The Polish Ministry of the Interior and Administration responded to the objections of the data protection authority (UODO) regarding the legality of collecting and storing biometric and genetic data of police officers.

In July 2026, the president of the Personal Data Protection Authority (UODO) expressed concerns about the collection of fingerprints and buccal samples from police officials and employees. He considered that the current methods of collection and storage violated constitutional and European standards. The criticisms focused on an insufficient legal basis, as essential elements concerning privacy are governed by an implementing act rather than by law. Furthermore, the fixed retention period of five years after the end of service was deemed potentially contrary to the data minimization principle and the "absolute necessity" requirement derived from the case law of the Court of Justice of the European Union (CJEU).

The ministry contested these points by stating that the collection is limited to officers involved in the search and securing of traces at crime scenes, in order to distinguish them from those of potential suspects. It considers that the law sufficiently defines the fundamental aspects (data subjects, type of data, and purpose), thus justifying the use of an implementing act for technical details. The five-year retention period is deemed necessary to ensure the continuity and effectiveness of investigative procedures. The ministry nevertheless announced that it is analyzing the raised doubts to determine whether legislative amendments are necessary, ensuring a balance between public missions and individual rights.