An in-house Data Protection Officer or an outsourced DPO? This question arises in many organisations. First, however, you need to determine whether your organisation is required to appoint a DPO at all. If not, it is worth considering whether appointing one voluntarily would still be beneficial. Only then can you choose the model that best […]
Nearly a million złoty in fines — and not for a data leak, but for who held the DPO role in the company and how it was organised. The President of Poland’s Data Protection Authority (UODO) fined Poczta Polska (the Polish postal operator) PLN 978,128 (around EUR 232,000) for failing to ensure the independence of […]
Appointing a Data Protection Officer (DPO) — mandatory for many organisations, recommended for all — poses a practical question: hire a DPO as an employee or use an outsourced service? The GDPR expressly permits both models (Article 37(6)), and the choice depends on the size of the organisation, the scope of data processing, the budget, […]
The Data Protection Officer (DPO), known in Polish as Inspektor Ochrony Danych (IOD), is a key figure in the data protection framework established by the GDPR. For many organisations, appointing a DPO is a legal obligation — but even where it is not required, a competent DPO can significantly improve the effectiveness of the entire […]