Recently the Polish regulator (UODO) published the updated list of processing operations which require a data protection impact assessment – the consequence of the EDPB’s objection to the original “black list” published by UODO back in 2018. Additionally, UODO prepared detailed guidelines on the duties of controllers in connection with data breaches under the GDPR, … Continue Reading