The information obligation is one of the cornerstones of the GDPR and, at the same time, one of the most frequently mishandled requirements. Every company, institution, and organisation that processes personal data must inform the individuals concerned — and that information must meet strictly defined requirements. The document conveying this information is commonly referred to […]
The Data Protection Officer (DPO), known in Polish as Inspektor Ochrony Danych (IOD), is a key figure in the data protection framework established by the GDPR. For many organisations, appointing a DPO is a legal obligation — but even where it is not required, a competent DPO can significantly improve the effectiveness of the entire […]
A leak of customer data, a lost laptop containing an employee database, a ransomware attack encrypting company servers, an email with personal data sent to the wrong recipient — these are just some examples of personal data breaches that organisations face every day. The GDPR imposes specific obligations on data controllers when a breach occurs, […]
The General Data Protection Regulation (GDPR) is the most important piece of legislation governing personal data protection in Europe. It has been in force since 25 May 2018 and applies to virtually every company, institution, and organisation that processes the personal data of individuals in the European Union. This guide explains the key aspects of […]