Notification of the appointment of the Data Protection Officer

Do you process personal data? Check whether you need to appoint a Data Protection Officer and notify the Personal Data Protection Office.

How to handle a matter

What you should know and who can benefit from the service

Before deciding on the appointment of a Data Protection Officer, consider whether you are processing personal data in your company/facility in the manner described in Article 37 of the GDPR. If so, you must appoint a Data Protection Officer.

Such a data protection officer must be appointed, among others, by:

• banks, insurance agencies, security companies, mobile operators and Internet providers.
• hospitals, clinics

Who does not have to appoint an officer

According to the guidelines for the appointment of Data Protection Officers, such an officer does not have to be appointed by: 

• doctors - if they conduct an individual practice
• lawyers or legal advisers -  if they process data on convictions or infringements

Who can become a Data Protection Officer

The DPO may be a person with expertise in data protection law and practice. This can be either your employee or an external entity.

What are the tasks of the Data Protection Officer?

Main tasks of the officer:

• organising training for staff and audits on personal data protection
• monitoring compliance with data protection rules
• cooperation with the Personal Data Protection Office

When should you handle the matter

Send the notification within 14 days of the appointment of the Data Protection Officer.

Where you can handle the matter

Urząd Ochrony Danych Osobowych
Stawki 2, 00-193 Warszawa

What to do step by step

1. Notify of the appointment of a new Data Protection Officer

The notification shall be signed by the person authorised to represent the notifier.

Documents

Time limit

Send the notification within 14 days of the appointment of the Data Protection Officer.

2. The President of UODO will accept your notification

After sending the notification you will receive a confirmation of submission.

How much will you pay

The service is free of charge

How long will you wait

It is good to know

Many companies, one Data Protection Officer

A group of companies may appoint one Data Protection Officer. Each of these companies must send a separate notification to the UODO.

Inform about the appointment of the data protection officer

Do you already have a Data Protection Officer? Provide information about him/her, e.g. on your website.