Poland: Notification of a DPO to the Supervisory Authority

In Poland, the Parliament passed the Act on Protection of Personal Data May 10, 2018. The act includes, inter alia, details on appointing and notifying a data protection officer. Under the act, a controller is obliged to notify the appointment of a DPO to the supervisory authority, President of the Office for Personal Data Protection (in Polish: Prezes Urzędu Ochrony Danych Osobowych, or PUODO). Taking into account that under former law the controller could appoint an information security administrator, the Polish legislator had to deal with a transitional period during which the ISA and the DPO may co-exist. Notification on appointment of a DPO by the controller or the processor to PUODO shall take place within 14 days from the date of the appointment. Any changes of the personal details of the DPO or the cancellation and appointment of a new DPO should be submitted to PUODO within 14 days of the date of the change. Immediately after appointment of the DPO, the controller or the processor is obliged to publish the DPO’s contact details on the company’s website.  https://iapp.org/news/a/poland-notification-of-a-dpo-to-the-supervisory-authority/?mkt_tok=eyJpIjoiWmpRMU1ESXpObVl4TmpBdyIsInQiOiJNcEVoSjhFUUpCRzJQanNzdGlleTVpWnFlZmhmNTRSZXEwMzMzS3hMVmxKMmExQjJRelN4ZHUwY1hKdkIxNHlFSHdXS0lYNGZibk03bENDallJd0ZaT0NGRndlenQxTlY4Ris4VG9oVmh5bTQ4bE9CY3l0ZTl5WGFyZUZnTW5vUiJ9