Information and services website for entrepreneurs

Notification of the appointment of the data protection officer (under the Act on personal data protection, GDPR)

Do you process personal data? Check whether you need to appoint a data protection officer and notify the Personal Data Protection Office (UODO).

How to proceed

This procedure can be completed:

  • electronically
Complete the procedure online

Sign the application with a qualified electronic signature or with a Trusted Profile.

What you should know and who can use this service

Before deciding on the appointment of a data protection officer, consider whether you process personal data in your company/facility in the manner described in Article 37 of the GDPR. If yes, you must appoint a data protection officer.

A data protection officer must be appointed for instance by:

  • banks, insurance agencies, security companies, mobile operators and Internet providers
  • hospitals, medical clinics

Who does not have to appoint a data protection officer

According to the guidelines for the appointment of Data Protection Officers, such an officer does not have to be appointed by: 

  • doctors - if they have individual medical practice
  • lawyers or legal advisers - if they process data on convictions or infringements

Who can become a Data Protection Officer

The DPO must be a person with expertise and experience in data protection law. This can be either your employee or an external entity.

What are the tasks of the data protection officer?

Main tasks of a data protection officer:

  • organising training for staff and personal data protection audits
  • monitoring compliance with data protection regulations
  • cooperation with the Personal Data Protection Office (UODO)

When you should complete this procedure

Send the notification within 14 days of the appointment of the data protection officer.

Where you can complete this procedure

URZĄD OCHRONY DANYCH OSOBOWYCH ul. Stawki 2, 00-193 Warszawa

What to do step by step

  1. Notify of the appointment of a new Data Protection Officer

The notification should be signed by the person authorised to represent the notifying entity.

Documents

You can submit a document as:
Dokument elektroniczny
You can submit a document as:
Dokument elektroniczny

Time limit

Send the notification within 14 days of the appointment of the data protection officer.

  1. The President of UODO will accept your notification

After sending the notification you will receive a confirmation of submission.

How much you will have to pay

The service is free of charge

How long you will have to wait

Your case will be dealt with immediately.

Good to know

Many companies - one data protection officer

A group of companies may appoint one data protection officer. Each of these companies must send a separate notification to UODO.

Inform about the appointment of the data protection officer

Do you already have a data protection officer? Provide information about your data protection officer, for instance on your website.

Was this page useful?