Government Prepares a New Personal Data Protection Law Act

Government Information Centre issued a press release informing that work on the new act on the data protection law of personal data has been finished. The government of Mateusz Morawiecki is done with preparing the regulations that will adapt Polish legal environment to EU personal data protection requirements, in particular the General Data Protection Regulation (GDPR), the successor of the Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data. The new data protection law is expected to come into effect in May.

The upcoming regulations will affect any entities that collect and process personal data. This means all Polish companies that have personnel files or keep databases containing information (e.g. addresses) collected from their clients. In practice, the data protection law will apply to virtually all enterprises in Poland.

Business owners need to take appropriate measures to meet compliance obligations and adapt their internal rules with respect to data processing. To avoid the possibility of being granted a penalty, many companies in Poland decided to use the services of advisors offering services in this field.

Businesses will need to make it possible for their clients to request a complete removal of their personal data from the company’s internal system or move them to a different entity. Any breach in the system that could cause a threat to the rights and freedoms of individuals will have to be reported. Companies will be directly responsible for handling and processing personal data.

Big entities, i.e. those employing over 250 staff members, will be obliged to record all operations related to personal data processing. Entrepreneurs who do not meet their obligations will face heavy monetary penalties.

The goal of the new data protection law is to assert better protection of the personal data of individuals across the EU. The Data Protection Directive will come into effect on 25 May.

Implications for Banking and Business

Developments in the Polish banking sector affect businesses operating in the country in several ways. Access to corporate banking services, credit availability, deposit rates, and payment infrastructure are all critical factors for companies — whether established Polish firms or foreign-owned entities entering the market.

For foreign entrepreneurs setting up operations in Poland, choosing the right banking partner is a strategic decision. Major Polish banks including mBank, ING Bank Śląski, Bank Millennium, PKO BP, and Santander Poland offer varying levels of service for international clients, including English-language online banking, multicurrency accounts, and dedicated relationship managers for corporate clients.

The Polish banking market is well-regulated by the KNF (Financial Supervision Authority) and participates in the EU deposit guarantee scheme (BFG — Bank Guarantee Fund), providing deposit protection up to EUR 100,000 per depositor per institution. This regulatory framework provides stability and confidence for businesses maintaining corporate funds in Polish banks.

If you are doing business in Poland or considering entering the Polish market, Zalewski Consulting can help. Learn more about our company formation in Poland, or contact us for a free consultation.