Do you process personal data? Check whether you need to appoint a Data Protection Officer and notify the Personal Data Protection Office.
How to proceed
This procedure can be completed:
What you should know and who can use this service
Before deciding on the appointment of a Data Protection Officer, consider whether you are processing personal data in your company/facility in the manner described in Article 37 of the GDPR. If so, you must appoint a Data Protection Officer.
Such a data protection officer must be appointed, among others, by:
- banks, insurance agencies, security companies, mobile operators and Internet providers.
- hospitals, clinics
Who does not have to appoint an officer
According to the guidelines for the appointment of Data Protection Officers, such an officer does not have to be appointed by:
- doctors - if they conduct an individual practice
- lawyers or legal advisers - if they process data on convictions or infringements
Who can become a Data Protection Officer
The DPO may be a person with expertise in data protection law and practice. This can be either your employee or an external entity.
What are the tasks of the Data Protection Officer?
Main tasks of the officer:
- organising training for staff and audits on personal data protection
- monitoring compliance with data protection rules
- cooperation with the Personal Data Protection Office
When you should complete this procedure
Send the notification within 14 days of the appointment of the Data Protection Officer.
Where you can complete this procedure
Urząd Ochrony Danych Osobowych
Stawki
2,
00-193
Warszawa
What to do step by step
Notify of the appointment of a new Data Protection Officer
The notification shall be signed by the person authorised to represent the notifier.
Documents
You can submit a document as:
Dokument elektroniczny
You can submit a document as:
Dokument elektroniczny
Time limit
Send the notification within 14 days of the appointment of the Data Protection Officer.
The President of UODO will accept your notification
After sending the notification you will receive a confirmation of submission.
How much you will have to pay
The service is free of charge
How long you will have to wait
Your case will be dealt with immediately.
Good to know
Many companies, one Data Protection Officer
A group of companies may appoint one Data Protection Officer. Each of these companies must send a separate notification to the UODO.
Inform about the appointment of the data protection officer
Do you already have a Data Protection Officer? Provide information about him/her, e.g. on your website.