The EU General Data Protection Regulation required adaptation of local law to the new requirements, including provisions on the appointment of a data protection officer within certain organizations. Under Poland's former law, a controller could appoint an information security administrator, so in enacting new legislation lawmakers had to deal with a transitional period during which the ISA and the DPO may coexist. In this Privacy Tracker post, Aneta Miśkowiec offers an overview of the new rules for both controllers and processors.
Full Story