Polish PDPO's Guidelines On Data Protection Breaches Under The GDPR: Five Key Takeaways

GDPR and Data Protection expert and senior associate Bartosz Jankowski shares some important data protection information...

In February 2025, the Polish Personal Data Protection Office (PDPO) issued guidelines detailing the obligations of controllers concerning data protection breaches under the General Data Protection Regulation (GDPR). These guidelines are a significant development as they shed light on the PDPO's interpretation of critical aspects of data protection, offering a predictive framework for how the authority may assess controllers' actions in the event of a data breach.

Below are the five main takeaways from the PDPO guidelines:

(1) Definition and Scope of a Personal Data Security Breach