Checked on September 27, 2026
GDPR in Poland
How the GDPR works in Poland: the supervisory authority, the national law that supplements the regulation, and where to notify a breach.
- Supervisory authority
- Personal Data Protection Office (UODO) (Urząd Ochrony Danych Osobowych)
- National law supplementing the GDPR
- Act of 10 May 2018 on the Protection of Personal Data · Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych · Dz.U. 2018 poz. 1000
- Age of digital consent
- 16
- Breach notification
- www.biznes.gov.pl/pl/portal/ou889
- National specifics
- Breach notifications to the UODO President can be filed via the biznes.gov.pl e-form, ePUAP (UODO/SkrytkaESP) or by post; e-filing must be signed with a qualified e-signature or Profil Zaufany.
Where does your company stand?
The free assessment applies these national rules to your answers and scores every area of the law.
Sources
National laws and portals change. This page is general information, not legal advice; confirm with the authority before relying on it.