PolandGDPR Data-Subject Rights, Act Articles 92-97
Regulation (EU) 2016/679, Arts. 12-23; Ustawa z 10 maja 2018 r., Arts. 92-97
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 25 May 2018.
A data subject rights rule binding public and private bodies.
As of 24 August 2026.
What it requires
- Give a person in Poland a path to obtain human intervention, express their view, and contest a decision made solely by automated processing that produces a legal or similarly significant effect on them.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
General Data Protection Regulation (GDPR) Articles 12-23 govern access, rectification, erasure, restriction, portability, objection, and Article 22 automated-decision rights, exercisable against the controller.
Poland's Act adds the enforcement forum: a GDPR Article 79 or Article 82 claim is heard by the sad okregowy, UODO must be notified of any such filing and final judgment (Art. 94), proceedings are stayed if UODO has an open matter on the same violation (Art. 95), and a final UODO decision or court ruling finding a violation binds a later damages court on that finding (Art. 97).
When LexLint raises it
high_risk_decisionsdeploys_chatbot
Read the law
isap.sejm.gov.pl, Ustawa z 10 maja 2018 r., Arts. 92-97
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.