Cybersecurity Policy Report, Polish DPA Studies Right to Be Forgotten, Updates Decision Portal, (May 29, 2025)

By Tony Foley

The Polish data protection authority, Urzad Ochrony Danych Osobowych (UODO), announced yesterday that it would conduct a study on how data controllers and administrators handle requests from data subjects regarding the right to erasure of their personal data (the “right to be forgotten”) under article 17 of the European Union’s General Data Protection Regulation (GDPR).

In its announcement, UODO said the study was being conducted pursuant to the recently launched 2025 coordinated enforcement framework (CEF) on the right to erasure by the European Data Protection Board (EDPB) (CPR, March 5). UODO is encouraging all interested administrators to participate in its study by completing a survey on their handling of erasure requests. The results will be used to promote compliance with the GDPR and to disseminate best practices through tips, recommendations, or guidelines that UODO will develop in the future.

Participation in the study is voluntary, and interested parties have until June 18 to complete the survey.

Decision database. In a separate announcement, UODO said it had made available a new search engine for decisions reached by the agency. The new database provides access to UODO decisions and information on related rulings of administrative and civil courts. It includes a number of new features, including advanced search filters allowing for search by date, reference number, keyword, violation type, sector, or remedy applied; access to the full content on anonymized judgments; and the application of universal resource names for each decision, allowing for identification and references to the ruling, even when not available online (i.e., paper-only decisions).

UODO said the database would be updated regularly and gradually developed to meet user needs.

News: InternationalLegislation DataPrivacy GDPR