On 3 April 2026, the amended Act on the National Cybersecurity System (KSC) entered into force in Poland, implementing the EU’s NIS2 Directive (Directive (EU) 2022/2555). This is a fundamental change — the previous legislation covered approximately 400 operators of essential services, while the new rules extend to over 42,000 entities. For many organisations, NIS2 […]
At the start of each year, the President of Poland’s Data Protection Authority (UODO) publishes a sectoral inspection plan. For many companies it is just an announcement that passes unnoticed. In practice it is one of the most important compliance documents of the year — a map of the areas where the authority sees the […]
The HR department is one of the most data-intensive areas of any organisation. From the moment a job advertisement is published, through the entire period of employment, to the archiving of records after the employment relationship ends — HR handles the personal data of employees, candidates, and contractors on a daily basis. At the same […]