Personal data breaches caused by the flood situation

In connection with devastating flooding that has hit the southern part of Poland, we understand that many data controllers may find themselves in a difficult situation, both personally and in the running of their business.

We would like to emphasise that your safety is the absolute priority at the moment.

We are aware that you may have concerns about the implementation of obligations under the GDPR, including possible notifying personal data breaches.

For this reason, we would like to remind you that the 72-hour deadline for notifying personal data breaches such an event to the President of the Personal Data Protection Office runs only from the moment it is discovered. We are aware that in many cases this will only be possible after the situation has been brought under control and the potential losses have been initially estimated.

We are also aware that some of you will not be able to notify personal data breaches in a timely manner. In such cases, it is important to indicate the reasons for the delay, referring to the extraordinary conditions related to the flood situation.

We assure you that the President of the Personal Data Protection Office and the employees fully understand the difficulties that the current situation brings, therefore all notifications made by you will be verified taking into account these special circumstances.