Cybersecurity Policy Report, Polish Privacy Regulator Urges Civil Service to Adopt Separate DPO Position, (Jul 7, 2025)

By Tony Foley

Mirosław Wróblewski, president of the Polish data protection authority, Urzad Ochrony Danych Osobowych (UODO), has renewed his call to the head of the nation’s civil service asking to present a position on a proposed amendment to the provisions of a civil service regulation that seeks to separate the position of data protection officer (DPO) in its list of civil service positions.

President Wróblewski sent a letter in July 2024 requesting that the civil service take appropriate measures to initiate the legislative work required to amend the Regulation of the Prime Minister of 29 January 2016 (the workplace and payroll regulation), pointing to the need to supplement the list of civil servant positions with the position of DPO. An August 2024 meeting between representatives of UODO and the civil service department discussed the consequences of not separating the DPO position in the structure of government administration, followed by consultations with directors-general of various civil service offices with the participation of DPOs from several ministries. Despite these actions, however, UODO said it had not received any information on the proposed legislative solution or the final decision on including the DPO position in the workplace and payroll regulation.

“Since 2019, the Office for Personal Data Protection has been emphasizing that the separation of this position is crucial for the proper performance of the function of the Data Protection Officer in government administration,” UODO said in a July 3 news release.

The letter may be downloaded from the news release but is available only in Polish.

News: InternationalLegislation DataPrivacy DataSecurity