Alessandro AleddaInsider Threat and Risk

INTRA/PLPoland

What the record establishes for Poland, measure by measure, and what each source requires of the measure it governs.

Binding
11
Recommended
0
Reported
0
Measures touched
11 of 110
Sources cited
2
ControlSourceWhat it establishesPrerequisite or recommendation
11Mandatory
AW002/PLTransparency notice on what is observedMandatoryKodeks pracy, article 22(2)Sejm of the Republic of Poland · read 20 Sep 2026Kodeks pracy, article 22(3)Sejm of the Republic of Poland · read 20 Sep 2026That image recording at work is open for four purposes only, one of them keeping secret information whose disclosure could harm the employer, that its purposes, scope and manner are fixed in the collective agreement, the work regulations or an announcement, that it is notified two weeks before it starts and handed to each worker before they are admitted to work, and that recordings are kept three months.Workers are informed of the introduction of monitoring, in the manner the employer adopts, no later than two weeks before it starts, and the monitored rooms and area are marked visibly and legibly by signs or audible announcements no later than one day before. The code states that the marking does not displace articles 12 and 13 of the General Data Protection Regulation.
DP007/PLData loss prevention deploymentMandatoryKodeks pracy, article 22(3)Sejm of the Republic of Poland · read 20 Sep 2026That monitoring of a worker’s official electronic mail is open only where it is indispensable to an organisation of work permitting full use of working time and to the proper use of the work tools provided, that it may not violate the secrecy of correspondence, and that the same provisions, and with them the procedure of article 22(2), reach every other form of monitoring used for those purposes.A capability inspecting content is a form of monitoring other than electronic mail, and the code carries to it the procedural regime of article 22(2) where its use is necessary for the purposes article 22(3) states. Those purposes are working time and the proper use of work tools. Keeping secret information whose disclosure could harm the employer is stated in the code as a purpose of image recording, and is not among the purposes stated for any other form.
DP012/PLRetention and disposal of program recordsMandatoryKodeks pracy, article 22(2)Sejm of the Republic of Poland · read 20 Sep 2026That image recording at work is open for four purposes only, one of them keeping secret information whose disclosure could harm the employer, that its purposes, scope and manner are fixed in the collective agreement, the work regulations or an announcement, that it is notified two weeks before it starts and handed to each worker before they are admitted to work, and that recordings are kept three months.Image recordings are processed only for the purposes for which they were collected and kept no longer than three months from the day of recording. After that period those containing personal data are destroyed, unless separate provisions say otherwise.
GV007/PLLawful basis registerMandatoryKodeks pracy, article 22(2)Sejm of the Republic of Poland · read 20 Sep 2026Kodeks pracy, article 22(3)Sejm of the Republic of Poland · read 20 Sep 2026That image recording at work is open for four purposes only, one of them keeping secret information whose disclosure could harm the employer, that its purposes, scope and manner are fixed in the collective agreement, the work regulations or an announcement, that it is notified two weeks before it starts and handed to each worker before they are admitted to work, and that recordings are kept three months.The purposes, the scope and the manner in which monitoring is applied are set in the collective agreement or in the work regulations, or in an announcement where the employer is bound by neither. The code names the instrument the record is kept in, and names the same one for image recording, for electronic mail, and for every other form of monitoring.
GV010/PLWorker representative engagementMandatoryKodeks pracy, article 22(2)Sejm of the Republic of Poland · read 20 Sep 2026That image recording at work is open for four purposes only, one of them keeping secret information whose disclosure could harm the employer, that its purposes, scope and manner are fixed in the collective agreement, the work regulations or an announcement, that it is notified two weeks before it starts and handed to each worker before they are admitted to work, and that recordings are kept three months.Rooms made available to the workplace trade union organisation are outside the reach of image recording. Monitoring a sanitary room requires the prior consent of that organisation or, where none operates at the employer, of employee representatives chosen in the manner that employer adopts. What is required there is consent, not consultation, and it is obtained before the monitoring starts.
IV007/PLLegal hold and preservationMandatoryKodeks pracy, article 22(2)Sejm of the Republic of Poland · read 20 Sep 2026That image recording at work is open for four purposes only, one of them keeping secret information whose disclosure could harm the employer, that its purposes, scope and manner are fixed in the collective agreement, the work regulations or an announcement, that it is notified two weeks before it starts and handed to each worker before they are admitted to work, and that recordings are kept three months.Where image recordings are evidence in proceedings conducted under the law, or the employer has learnt that they may be, the three-month period runs on until the proceedings are finally concluded. The extension follows from the material being evidence and is not a decision the employer takes about retention.
MD004/PLEndpoint activity monitoringMandatoryKodeks pracy, article 22(3)Sejm of the Republic of Poland · read 20 Sep 2026That monitoring of a worker’s official electronic mail is open only where it is indispensable to an organisation of work permitting full use of working time and to the proper use of the work tools provided, that it may not violate the secrecy of correspondence, and that the same provisions, and with them the procedure of article 22(2), reach every other form of monitoring used for those purposes.An agent recording what is done on a workstation is a form of monitoring other than electronic mail, and article 22(3)(4) carries to it the provisions governing that monitoring, and with them the procedural regime of article 22(2). Its purposes, scope and manner are therefore set in the collective agreement or the work regulations, notified two weeks before it starts, and handed to each worker before they are admitted to work.
MD005/PLNetwork and egress monitoringMandatoryKodeks pracy, article 22(3)Sejm of the Republic of Poland · read 20 Sep 2026That monitoring of a worker’s official electronic mail is open only where it is indispensable to an organisation of work permitting full use of working time and to the proper use of the work tools provided, that it may not violate the secrecy of correspondence, and that the same provisions, and with them the procedure of article 22(2), reach every other form of monitoring used for those purposes.Inspection of traffic leaving the organization is a form of monitoring other than electronic mail, and the code carries to it the same provisions and the same procedural regime. The condition attached is the purpose: article 22(3) extends to another form of monitoring where its use is necessary to an organisation of work permitting full use of working time or to the proper use of the work tools provided.
MD006/PLElectronic mail and collaboration monitoringMandatoryKodeks pracy, article 22(3)Sejm of the Republic of Poland · read 20 Sep 2026That monitoring of a worker’s official electronic mail is open only where it is indispensable to an organisation of work permitting full use of working time and to the proper use of the work tools provided, that it may not violate the secrecy of correspondence, and that the same provisions, and with them the procedure of article 22(2), reach every other form of monitoring used for those purposes.Monitoring of a worker’s official electronic mail is open to the employer only where it is indispensable to an organisation of work permitting full use of working time and to the proper use of the work tools provided. Those two purposes are the whole list, and neither of them is the protection of information. The monitoring may not violate the secrecy of correspondence or the worker’s other personal rights.
MD014/PLVideo surveillance of the workplaceMandatoryKodeks pracy, article 22(2)Sejm of the Republic of Poland · read 20 Sep 2026That image recording at work is open for four purposes only, one of them keeping secret information whose disclosure could harm the employer, that its purposes, scope and manner are fixed in the collective agreement, the work regulations or an announcement, that it is notified two weeks before it starts and handed to each worker before they are admitted to work, and that recordings are kept three months.Special supervision of the workplace, or of the area around it, by technical means recording images is open to the employer for four purposes and no others: the safety of workers, the protection of property, the control of production, and keeping secret information whose disclosure could expose the employer to harm. Sanitary rooms, changing rooms, canteens and smoking rooms are outside it unless it is indispensable for one of those purposes and will not violate the dignity or other personal rights of the worker, in particular through techniques preventing those present from being recognised.
PS006/PLOnboarding security briefingMandatoryKodeks pracy, article 22(2)Sejm of the Republic of Poland · read 20 Sep 2026Kodeks pracy, article 22(3)Sejm of the Republic of Poland · read 20 Sep 2026That image recording at work is open for four purposes only, one of them keeping secret information whose disclosure could harm the employer, that its purposes, scope and manner are fixed in the collective agreement, the work regulations or an announcement, that it is notified two weeks before it starts and handed to each worker before they are admitted to work, and that recordings are kept three months.Before admitting a worker to work, the employer hands them, on paper or electronically, the purposes, the scope and the manner in which monitoring is applied. The obligation attaches to the start of the individual relationship and stands separately from the notice owed to the workforce when monitoring is introduced.