Following the general EU data protection regulation of 26 April 2016 [Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)], each of the Member States of the European Union is obliged to implement the provisions of the above mentioned Regulation to the national legal system by 25 May 2018.
The bill of the Act on the protection of personal data was published on September 13, 2017, on the website of the Ministry of Digital Affairs.
The most important proposed regulations include granting citizens the additional civil right to claim for infringements of personal data. The proposed changes will also shorten the proceedings before GIODO (the bill introduces a new state body – the President of the Office for the Protection of Personal Data) by limiting the proceedings to one instance and limiting the control proceedings conducted by the President of the Office for the Protection of Personal Data for a maximum 30 days. Novelty to the current regulations is granting the President of the Office for the Protection of Personal Data the right to issue recommendations to the entrepreneurs regarding the means of personal data protection.
At the moment the bill is a subject to a social consultations, which will run until 13 October 2017. The Ministry of Digital Affairs encourages everyone to take part in social consultations on the proposed changes by directing comments to the email address of the Ministry of Digital Affairs: Konsultacje.odo@mc.gov.pl. Detailed information can be found on the website of the Ministry of Digital Affairs (https://www.gov.pl/cyfryzacja/konsultacje-spoleczne-projektu-przepisow wdrazajacych-ogolne-rozporzadzenie-o-ochronie-danych-rodo-).c