Poland Act on Personal Data Protection (Ustawa o ochronie danych osobowych, 2018) POLAND-7: DPO Designation, UODO (Urzad Ochrony Danych Osobowych) Cooperation, Retention, Marketing, Training

Per Poland law + GDPR: governance + lifecycle. Requirements include (a) Designation and Notification of Data Protection Officer (DPO) per GDPR Article 37 + national requirements with notification to UODO (Urzad Ochrony Danych Osobowych) + (b) cooperate with UODO (Urzad Ochrony Danych Osobowych) (UODO) including responding to inquiries + facilitating audits + (c) implement Retention and Erasure including retention schedules + secure deletion + (d) implement Direct Marketing and ePrivacy safeguards per national + EU ePrivacy + (e) deliver Training and Awareness programmes including role-based content + national specifics + (f) maintain documented governance + accountability framework.