Do you process personal data? Check whether you need to appoint a data protection officer and notify the Personal Data Protection Office (UODO).
How to proceed
This procedure can be completed:
What you should know and who can use this service
Before deciding on the appointment of a data protection officer, consider whether you process personal data in your company/facility in the manner described in Article 37 of the GDPR. If yes, you must appoint a data protection officer.
A data protection officer must be appointed for instance by:
- banks, insurance agencies, security companies, mobile operators and Internet providers
- hospitals, medical clinics
Who does not have to appoint a data protection officer
According to the guidelines for the appointment of Data Protection Officers, such an officer does not have to be appointed by:
- doctors - if they have individual medical practice
- lawyers or legal advisers - if they process data on convictions or infringements
Who can become a Data Protection Officer
The DPO must be a person with expertise and experience in data protection law. This can be either your employee or an external entity.
What are the tasks of the data protection officer?
Main tasks of a data protection officer:
- organising training for staff and personal data protection audits
- monitoring compliance with data protection regulations
- cooperation with the Personal Data Protection Office (UODO)
When you should complete this procedure
Send the notification within 14 days of the appointment of the data protection officer.
Where you can complete this procedure
URZĄD OCHRONY DANYCH OSOBOWYCH
ul. Stawki
2,
00-193
Warszawa
What to do step by step
Notify of the appointment of a new Data Protection Officer
The notification should be signed by the person authorised to represent the notifying entity.
Documents
You can submit a document as:
Dokument elektroniczny
Download:
You can submit a document as:
Dokument elektroniczny
You can submit a document as:
Dokument elektroniczny
Time limit
Send the notification within 14 days of the appointment of the data protection officer.
The President of UODO will accept your notification
After sending the notification you will receive a confirmation of submission.
How much you will have to pay
The service is free of charge
How long you will have to wait
Your case will be dealt with immediately.
Good to know
Many companies - one data protection officer
A group of companies may appoint one data protection officer. Each of these companies must send a separate notification to UODO.
Inform about the appointment of the data protection officer
Do you already have a data protection officer? Provide information about your data protection officer, for instance on your website.