Supreme Audit Office On Protection Of Personal Data

On 22 February 2024, the Supreme Audit Office in Poland (the "NIK") published the results of inspections carried out in several local government bodies. The inspections were triggered by a growing number of media reports on inappropriate conduct by government officials related to such a basic element of security as using e-mail addresses in public domains for official purposes and processing personal data through them. NIK checked how the protection and correctness of data processing is ensured, including personal data collected electronically by local government units and their subordinate organisational units on websites, e-mail and in connection with the sessions of legislative bodies held. The results were not satisfactory, as the audit found years of negligence related to personal data protection, unawareness of risks and lack of clear guidelines. Certain elements of the personal data protection system in local government units were in poor condition. The