The Polish data protection authority (UODO) participated in a conference on cyber resilience and information security management in the science and higher education sector.

The event, entitled "Information security management in the science, higher education and public administration sector. Requirements of the NIS 2 Directive and cyber resilience of key and important entities," was held on 17 and 18 September 2026. Discussions focused on the impact of the NIS 2 Directive on universities and administration, as well as the need to build overall cyber resilience. A representative of the UODO emphasized that GDPR requirements should not be treated in isolation but integrated into a unified security system, also including obligations arising from the national cybersecurity law, the DORA regulation, and the Artificial Intelligence Act. It was specified that incident management procedures should adopt an interdisciplinary approach to allow the simultaneous execution of notification obligations arising from different regulations within a single coherent process. Other topics such as phishing, deepfakes, and cyber incident insurance were also addressed.