Share these talks and lectures with your colleagues
Invite colleaguesPractice paper
Revolution in data protection in Poland?
Journal of Data Protection & Privacy,
1
(4),
359-364
(2018)
Abstract
The application of the General Data Protection Regulation (GDPR) will undoubtedly constitute a challenge not only for data controllers and processors, but also for supervisory authorities. The new approach to data protection, that is, the risk-based approach providing for the need to analyse the risk that data processing may cause to privacy of the data subjects, or the accountability principle, that is, a completely new principle in the data protection system introduced by the regulation, will require from the controllers special responsibility for all data processing operations and data security. The new tasks and mechanisms aimed at consistent and transparent application of the regulation in all EU member states provide for the supervisory authorities tools for increasing effectiveness of the personal data protection activities.
Keywords: General Data Protection Regulation (GDPR); risk-based approach; accountability; codes of conduct; certification; data protection officer; prior consultation
The full article is available to subscribers to the journal.
Author's Biography
Edyta Bielak-Jomaa has a PhD in law and is the Inspector General for Personal Data Protection (GIODO). On 9th April, 2015 she was appointed for this post by the Sejm (lower chamber of the Polish Parliament), and on 16th April, 2015 the Senate (upper chamber of the Polish Parliament) consented to her appointment. As of 22nd April, 2015, that is, the day of taking the oath before the Sejm, pursuant to the Act on Personal Data Protection, the subsequent, four-year term of office of GIODO began. Edyta graduated from the Faculty of Law and Administration of the University of Lodz (UL). In 2003, she was awarded the academic title of PhD in law. Since 2003, she has been an adjunct professor at the Chair of Labour Law of UL Faculty of Law and Administration. Since 2012, she has been Manager of the Postgraduate Studies in Personal Data Protection and since 2012, of the Chair of the Centre for Personal Data Protection and Information Management at UL Faculty of Law and Administration. She is a lecturer on personal data protection, labour law and economic migration abroad. She is an academic supervisor at the Interdepartmental Students Centre for Rights of Disabled Persons; she has also conducted training courses within the activity of the International Women’s Foundation and a series of training courses organised for employees and employers from the region ‘Different, but equal’ concerning equal treatment and prohibition of discrimination on the labour market. She was the organiser of conferences and debates on personal data issues, such as: ‘Medical data – limits of use and protection’, ‘Personal data protection in the activity of churches and other religious associations’, ‘Personal data protection and journalistic activity – limits of media privilege’, ‘Personal data protection and practice of legal professions’, ‘Personal data protection and elections’ and ‘Judge – a public or private person? Limits of access to public information and personal data protection’ (co-organiser – President of the Court of Appeals in Lodz and Lodz Branch of the Polish Judges Association IUSTITIA). Edyta is the author of over 30 studies on labour law, labour market and personal data protection issues. Her scientific interests include issues concerning the protection of employees’ personal rights and the protection of personal data in the employment context. She was the first to start research on the protection of personal data of unemployed persons and job seekers.
