Law note · Poland

GDPR Data-Subject Rights, Act Articles 92-97

cite Regulation (EU) 2016/679, Arts. 12-23; Ustawa z 10 maja 2018 r., Arts. 92-97 stage In effect since 2018-05-25 reviewed 2026-08-24

General Data Protection Regulation (GDPR) Articles 12-23 govern access, rectification, erasure, restriction, portability, objection, and Article 22 automated-decision rights, exercisable against the controller.

Poland's Act adds the enforcement forum, confirmed by direct read: a GDPR Article 79 or Article 82 claim is heard by the sad okregowy, UODO must be notified of any such filing and final judgment (Art. 94), proceedings are stayed if UODO has an open matter on the same violation (Art. 95), and a final UODO decision or court ruling finding a violation binds a later damages court on that finding (Art. 97).

What it asks of an app

  • Give a person in Poland a path to obtain human intervention, express their view, and contest a decision made solely by automated processing that produces a legal or similarly significant effect on them.

When LexLint raises it

Declared activities: high_risk_decisions, deploys_chatbot

Primary source: isap.sejm.gov.pl, Ustawa z 10 maja 2018 r., Arts. 92-97 (direct read)

← Back to the example  ·  Lint your app →