Data protection law WP-ADZ-2-PODO
The lecture will cover the following topics:
1. Privacy and its protection under civil law
2. Evolution of public law regulations
3. Structure of current regulations
4. Purpose and scope of the GDPR
5. Existing, amended, and new definitions
6. Principles of data processing
7. Grounds for the lawful processing of ordinary data
8. Special categories of data; sensitive data
9. Rights of data subjects
10. Entities responsible for data processing: Data Controller, Data Protection Officer (DPO), and the Supervisory Authority (PUODO)
11. Penalties for regulatory violations and their application
12. Personal data protection in public administration bodies
13. Protection of employee personal data
14. Protection of consumer personal data
15. Protection of patient personal data
(in Polish) Dyscyplina naukowa, do której odnoszą się efekty uczenia się
(in Polish) E-Learning
Term 2019/20_L: (in Polish) E-Learning z podziałem na grupy | Term 2021/22_L: (in Polish) E-Learning (pełny kurs) z podziałem na grupy | Term 2022/23_L: (in Polish) E-Learning (pełny kurs) z podziałem na grupy | Term 2023/24_L: (in Polish) E-Learning (pełny kurs) z podziałem na grupy | Term 2025/26_L: (in Polish) E-Learning (pełny kurs) z podziałem na grupy | Term 2026/27_L: (in Polish) E-Learning (pełny kurs) z podziałem na grupy |
(in Polish) Grupa przedmiotów ogólnouczenianych
Course coordinators
Term 2023/24_L: | Term 2026/27_L: | Term 2022/23_L: | Term 2025/26_L: | Term 2021/22_L: | Term 2019/20_L: |
(in Polish) Opis nakładu pracy studenta w ECTS
Subject level
Learning outcome code/codes
Type of subject
Preliminary Requirements
Learning outcomes
AD2_W03 The student characterizes the relationships between social structures and institutions—at both national and international levels—within the context of administration, as well as the principles governing them (reference to Polish Qualifications Framework Level 7 learning outcomes: P7U_W, P7S_WG, P7S_WK).
AD2_W04 The student describes the status of the individual and their activities within the sphere of personal data protection law, in both national and international contexts (reference to Polish Qualifications Framework Level 7 learning outcomes: P7U_W, P7S_WG, P7S_WK).
AD2_W05 The student is familiar with the methods, procedures, and tools—including data acquisition techniques—relevant to administrative law, including personal data protection law (reference to Polish Qualifications Framework Level 7 learning outcomes: P7U_W, P7S_WG, P7S_WK).
AD2_W06 The student applies the norms and legal rules governing personal data protection and understands the principles, sources, nature, origins, and functioning of these rules (reference to Polish Qualifications Framework Level 7 learning outcomes: P7U_W, P7S_WG, P7S_WK).
AD2_W07 The student is aware of the impact of personal data protection legal norms on processes involving changes to entities responsible for data processing (reference to Polish Qualifications Framework Level 7 learning outcomes: P7U_W, P7S_WG, P7S_WK).
Assessment criteria
For a grade of 2:
The student does not know or understand the relationships between social structures and institutions at the national and international levels within the context of administration, nor the principles governing them.
The student does not know or understand the status of the individual and their activities within the sphere of personal data protection law in national and international contexts.
The student does not know or understand the methods, procedures, and tools—including data acquisition techniques—specific to administrative law and personal data protection law.
The student does not know or understand the norms and legal rules governing personal data protection, the principles underlying them, or their sources, nature, origins, and functioning.
The student does not know or understand the impact of personal data protection legal norms on the processes of change regarding entities responsible for data processing.
For a grade of 3 – 3.5:
The student knows and understands, only to a basic extent, the relationships between social structures and institutions at the national and international levels within the context of administration, as well as the principles governing them.
The student knows and understands, only to a basic extent, the status of the individual and their activities within the sphere of personal data protection law in national and international contexts.
The student knows and understands, only to a basic extent, the methods, procedures, and tools—including data acquisition techniques—specific to administrative law and personal data protection law.
The student knows and understands, only to a basic extent, the norms and legal rules governing personal data protection, the principles underlying them, and their sources, nature, origins, and functioning.
The student knows and understands, only to a basic extent, the impact of personal data protection legal norms on the processes of change regarding entities responsible for data processing.
For a grade of 4–4.5:
The student has a good knowledge and understanding of the relationships between social structures and institutions at the national and international levels within the context of administration, as well as the principles governing them.
The student has a good knowledge and understanding of the status of the individual and their activities within the sphere of personal data protection law in both national and international contexts.
The student has a good knowledge and understanding of the methods, procedures, and tools—including data acquisition techniques—relevant to administrative law, including personal data protection law.
The student has a good knowledge and understanding of the legal norms and rules governing personal data protection, the principles underlying them, and their sources, nature, origins, and functioning.
The student has a good knowledge and understanding of the impact of legal norms regarding personal data protection on the processes of change concerning entities responsible for data processing.
For a grade of 5:
The student has a very good knowledge and understanding of the relationships between social structures and institutions at the national and international levels within the context of administration, as well as the principles governing them.
The student has a very good knowledge and understanding of the status of the individual and their activities within the sphere of personal data protection law in both national and international contexts.
The student has a very good knowledge and understanding of the methods, procedures, and tools—including data acquisition techniques—relevant to administrative law, including personal data protection law.
The student has a very good knowledge and understanding of the legal norms and rules governing personal data protection, the principles underlying them, and their sources, nature, origins, and functioning.
The student has a very good knowledge and understanding of the impact of legal norms regarding personal data protection on the processes of change concerning entities responsible for data processing.
Bibliography
Legal acts:
- Constitution of the Republic of Poland of 2 April 1997
- Treaty on the Functioning of the European Union (TFEU)
- Charter of Fundamental Rights of the European Union
- Council of Europe Convention 108 for the Protection of Individuals with regard to Automatic Processing of Personal Data
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
- Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA
- Act of 10 May 2018 on the Protection of Personal Data
- Act of 14 December 2018 on the Protection of Personal Data Processed in Connection with the Prevention and Combating of Crime
- Act of 21 February 2019 amending certain acts in connection with ensuring the application of Regulation (EU) 2016/679
Core literature:
- Handbook on European data protection law. 2018 edition. Luxembourg 2020,
Electronic version:
https://fra.europa.eu/sites/default/files/fra_uploads/fra-coe-edps-2018-handbook-data-protection_pl.pdf
- P. Fajgielski, *Personal Data Protection Law: An Outline*, Warsaw 2019
Supplementary literature:
- *GDPR: General Data Protection Regulation – Commentary*, E. Bielak-Jomaa, D. Lubasz (scientific eds.), Warsaw 2018
- P. Fajgielski, *General Data Protection Regulation. Personal Data Protection Act – Commentary*, Warsaw 2018
- *General Data Protection Regulation – Commentary*, M. Sakowska-Baryła (ed.), Warsaw 2018
- *EU Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data – Commentary*, P. Litwiński (ed.), Warsaw 2018
- *General Data Protection Regulation – Commentary*, M. Sakowska-Baryła (ed.), Warsaw 2018
- *Personal Data Protection Act – Commentary*, D. Lubasz (scientific ed.), Warsaw 2019
- *Personal Data Protection Act – Commentary*, P. Litwiński (ed.), Warsaw 2018
- *Act on the Protection of Personal Data Processed in Connection with the Prevention and Combating of Crime – Commentary*, A. Grzelak (ed.), Warsaw 2019
Additional information
Information on level of this course, year of study and semester when the course unit is delivered, types and amount of class hours - can be found in course structure diagrams of apropriate study programmes. This course is related to the following study programmes:
Additional information (registration calendar, class conductors, localization and schedules of classes), might be available in the USOSweb system: