Ask Reggi Your Question Now
Can you summarize Act on the Protection of Personal Data 1997 (in English)?
Poland Laws - Others > Act on the Protection of Personal Data 1997 (in English)
Short Summary
The Act on the Protection of Personal Data governs the protection of personal data in Poland. It applies to any person, state authorities, territorial self-government authorities, non-public bodies carrying out public tasks, natural and legal persons, and organizational units not being legal persons. The Act determines the principles of personal data processing and the rights of natural persons whose personal data is or can be processed. It applies to various types of data filing systems, including files, indexes, books, lists, and computer systems. The Act does not apply to natural persons processing data for personal or domestic purposes exclusively, subjects residing in a third country using technical means in Poland for data transfer exclusively, and certain journalistic and artistic activities. The Act also establishes penalties for unauthorized processing of personal data, with fines, partial restrictions of freedom, or prison sentences of up to two years. In cases involving sensitive information, the penalties can be up to three years of imprisonment.
Whom does it apply to?
Any person, state authorities, territorial self-government authorities, non-public bodies carrying out public tasks, natural and legal persons, and organizational units not being legal persons
What does it govern?
Protection of personal data
What are exemptions?
Natural persons involved in the processing of data for personal or domestic purposes exclusively, subjects having the seat or residing in a third country making use of technical means located in the territory of the Republic of Poland for the transfer of data exclusively, press journalistic activity and literary and artistic activity unless it violates the rights and freedoms of the data subject
What are the Penalties?
A person who processes personal data in a data filing system where such processing is forbidden or where he/she is not authorized to carry out such processing shall be liable to a fine, a partial restriction of freedom, or a prison sentence of up to two years. If the offense relates to sensitive information, such as racial or ethnic origin, political opinions, religious or philosophical beliefs, health records, genetic code, addictions, or sexual life, the person may be liable to a fine, a partial restriction of freedom, or a prison sentence of up to three years.
Jurisdiction
Poland