In October 2019, the Council of the European Union formally adopted a new Directive for the Protection of Whistleblowers, requiring both private and public organisations to create safe channels for reporting across a wide range of areas, including public procurement, financial services or money laundering. Member States will have two years to transpose the Directive … Continue Reading
On 24 January 2019, the Personal Data Protection Office (UODO) published a sectoral inspection schedule for 2019. According to the schedule, as approved by UODO’s President, the inspections will aim at verifying the legitimacy of personal data processing in the following private sectors: telemarketing, data brokers (as regards legal grounds for personal data processing) and … Continue Reading
On 15 January 2018, the Ministry of Digital Affairs (Ministry) held a conference to summarize the outcome of a public consultation on Poland’s draft GDPR implementation law. The consultation invited all citizens and entrepreneurs to express their opinion on the draft law on the protection of personal data, which was released by the Ministry on … Continue Reading
Within the vast range of changes implemented by the General Data Protection Regulation (GDPR), the scope of consent is mentioned as one of the most controversial. GDPR lists several basis for personal data processing, including consent of a data subject or legitimate business purpose of a data controller. Here we present a brief overview of … Continue Reading
On 28 March 2017, the Ministry of Digital Affairs (the “Ministry”) presented a preliminary draft of some of the provisions of the new Personal Data Protection Act. The remaining part of the Act that is not included in the presented project – which concerns regulations on the new data protection authority’s system position, transitional rules, … Continue Reading