UODO published its annual sectoral control plan in January, focusing on Public Information Bulletins, particularly data processing and council session recordings.
Scope of UODO Controls
UODO published its annual sectoral control plan in January, identifying four key operational areas. This includes control over entities managing Public Information Bulletins (BIP). Information on the official office website indicates controls will cover personal data processing methods, specifically anonymization and access to recordings of municipal council session proceedings. Łukasz Kuligowski, Deputy Press Spokesperson for UODO, noted that the scope of these controls could be broader.
Entities Subject to Inspection
According to explanations on the office website, the sectoral control plan includes areas with reported personal data protection incidents in the past year, as well as areas deemed particularly problematic due to incoming complaints and reported violations. The UODO President’s 2024 activity report shows a rapid increase in complaints against public entities, especially regarding personal data disclosures in BIPs. Additionally, controlled entities will include medical facilities processing personal data in EU Large-Scale Systems, marketing firms, and online delivery platforms.