
List of legal acts
- Constitution of the Republic of Poland of 2 April 1997
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR)
- Act of 10 May 2018 on the Protection of Personal Data
- Act of 21 February 2019 amending certain Acts to ensure the application of the General Data Protection Regulation
- Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA
- Act on the Protection of Personal Data Processed in Connection with the Prevention and Combating of Crime (DODO Act)
- Act of 9 May 2018 on the processing of passenger name record (PNR) data
- Regulation of the Council of Ministers of 20 March 2019 on the model official ID card for a PDPA employee
- Regulation of the President of the Council of Ministers of 31 May 2019 on the processing and performance of the tasks of the Data Protection Officer.
- Council of Europe Convention No. 108+ of 18 May 2019 (English)
- Council of Europe Convention No. 108 of 28 January 1981
- Additional protocol to the Council of Europe Convention No. 108 of 28 January 1981
- Council of Europe recommendation of 1 April 2015 on the protection of personal data in the employment sector
- Recommendation R(10) of 23 November 2010 on the protection of individuals with regard to the automatic processing of personal data when profiling
- Recommendation R(02) 9 of 18 September 2002 on the protection of personal data collected and processed for insurance purposes
- Recommendation R(99) 5 of the Committee of Ministers to member states on the protection of privacy on the Internet, guidelines on the protection of individuals with regard to the collection and processing of personal data on the information superhighway
- Recommendation R(97) 18 of the Committee of Ministers to the Member States on the protection of personal data collected and processed for statistical purposes
- Recommendation R(97) 5 of the Committee of Ministers to member states concerning the protection of personal data
- Recommendation R(91) 10. Explanatory note to the Committee of Ministers for the Member States on the disclosure to third parties of personal data held by public authorities
- Recommendation R(91) 10 of 9 September 1991 on the protection of personal data transferred to third parties by public authorities.
- Recommendation R(87) 15 of 17 September 1987 on the protection of personal data used in the police sector
- Recommendation No. R(86) 1 of 23 January 1986 on the protection of personal data for social security purposes
- Recommendation R(85) 20 of 25 October 1985 on the protection of personal data used for direct marketing purposes
- Recommendation R(83) 10 of the Committee of Ministers to member states on the protection of personal data collected and processed for scientific and statistical purposes
- Recommendation R(81) 1 of the Committee of Ministers to the Member States on regulations applicable to automated medical data banks


