🇵🇱Poland

Skin
PL-DPA-2018

Act of 10 May 2018 on the Protection of Personal Data

President of the Personal Data Protection Office

Poland overview

Poland has a national GDPR overlay

The GDPR applies directly, but it leaves Member States choices in areas such as children, employment, sensitive data, research, freedom of expression, public-sector processing and supervisory procedure. Poland uses its national law to exercise those choices.

National law

PL-DPA-2018: Act of 10 May 2018 on Personal Data Protection

What to assess

Start with the GDPR baseline, then assess the national provisions concerning DPO notification, public-task restrictions, UODO procedure, inspections and sanctions. Apply sector legislation and regulator measures where the national law refers to them.

Compliance method

Use the country-specific law page and controls as a delta layer. Retain the current official text, an applicability decision and evidence for every national rule implemented.