Poland: GDPR Application Supplemented

• Anna Kobylańska
• Krzysztof Muciak

Although the provisions of the GDPR (Regulation [EU] 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC [General Data Protection Regulation]) became effective on 25 May 2018, entrepreneurs in Poland have had to wait quite a while for additional provisions to facilitate the application of the GDPR under Polish legal regime. Only recently a new law entered into force (on 4 May 2019) amending more than 160 laws. The title of the new law is fairly long: Act of 21 February 2019 amending certain acts in order to ensure the application of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). For the purposes of this article, we will call it: “The GDPR Application Act”.