GDPR in practice – review of case law and positions of the Personal Data Protection Office
The turn of August and September 2026 brought several important decisions and announcements regarding personal data protection. The Supreme Administrative Court's ruling regarding the disclosure of PESEL numbers, the UODO's position regarding the MyDr incident, and the fine for the lack of independence of the data protection officer demonstrate the types of errors that can expose an organization to liability. For entrepreneurs, medical facilities, and property managers, the common conclusion is practical: […]

