An updated guide on data protection breaches is now available

The Personal Data Protection Office is publishing an updated version of its guide on data protection breaches. Its first edition was published in 2018 and has been a resource for controllers and data protection officers ever since. The latest version takes into account the current legislation, experience from the application of the GDPR to date and the results of the public consultation.

Public consultation and extensive expert input

The work on updating the guide was preceded by a public consultation in which all interested parties could participate. During them, we received numerous opinions and comments, which allowed us to adapt the content of the document to the current challenges and needs of data processors. Details of the consultation process can be found here: Public consultation of the Personal Data Protection Office.

The latest version of the guide is the result of the work of the employees of the Personal Data Protection Office, and the Social Team of Experts to the President of the Personal Data Protection Office also played an important role in its preparation, providing advisory support to the Personal Data Protection Office in the creation of the document. More on the activities of the Social Team of Experts can be found here: Social Team of Experts. The final shape of this edition of the guide was given by the President of the Personal Data Protection Office, Mirosław Wróblewski.

What's new in the guide?

The new version incorporates the latest interpretations of the legislation, case law and practical guidance to help controllers make the right decisions in the event of a data breach. It includes, among others:

• updated procedures for responding to breaches (reporting to the President of the Personal Data Protection Office);
• practical examples and case studies;
• guidelines on how to cooperate with the President of the Personal Data Protection Office and other supervisory authorities;
• key recommendations on risk assessment and breach prevention.

Future plans: seminar on breaches

In order to bring the subject of breaches and their notification even closer to the public, the Personal Data Protection Office is planning to organise a seminar during which experts will discuss the most important issues contained in the guide. The event will be an opportunity for participants to ask questions and exchange experiences. Detailed information on the date and programme of the seminar will be provided on the website of the Personal Data Protection Office.

‘I encourage you to read the updated version of the guide and to participate in the upcoming seminar. We hope that the new content and practical tips will help you effectively manage risks and respond to data protection incidents,’ - emphasised Mirosław Wróblewski, President of the Personal Data Protection Office.