With a draft data protection law having passed its third reading in Poland’s lower house, there’s a good probability it will become law—meaning new responsibilities for organizations and, in particular, data protection officers (DPOs). In this Privacy Tracker blog post, Marcin Lewoszewski of CMS writes about provisions in the bill that would ease cross-border data transfer and require organizations to appoint a DPO with “appropriate knowledge in the field of personal data protection,” among other things. “However,” writes Lewoszewski, “there is no information in the new law about how a candidate’s ‘appropriate’ knowledge in the field of privacy should be verified or certified, or about who should do it.”
Full Story