Przetwarzanie danych osobowych przez podmioty publiczne – nowe wymogi rozporządzenia UE

From 25th May 2018, all entities that process personal data will have to comply with the general regulation (UE) 2016/679 of 27th April 2016 on protection of personal data. The regulation will replace the national law on protection of personal data that is in force now. It is believed that the regulation will revolutionise the area of personal data protection, as it sets forth additional rights (e.g. to be forgotten, to transfer data), and it introduces new principles on which the privacy protection is to be based – the principle of accountability and the risk- based approach. Despite its general nature, the new regulation also contains provisions that provide the basis for personal data processing by public bodies and entities, however it remains coherent and complementary with the norms derived from the Constitution of Poland.