Ocena rządowego projektu ustawy o ochronie danych osobowych przetwarzanych w związku z zapobieganiem i zwalczaniem przestępczości (druk sejmowy nr 2989)

The provisions of the bill indicated in the opinion raise doubts from the in terms of their compliance with the directive and complementarity with the Regulation of the European Parliament and of the Council (EU) 2016/679. Among others the adoption of the act in the designed form will result in the fact that, within a specified time, the obliged entities will not be able to apply any of the basic security principles specified in the act, what creates a risk for the actual data security. The project disperses regulations regarding the security of personal data in many normative acts. There are no sanctions for breach of personal data security obligations, what may be considered as a lack of implementation of the requirement set out in the Directive.