The Polish data protection authority (UODO) encourages the media sector to develop a code of conduct to regulate the processing of personal data within journalistic activities.

Despite the journalistic exemption provided by the Polish data protection law, the media are not completely exempt from the application of the GDPR and act as data controllers. The development of a sectoral code of conduct, an idea discussed during a conference on November 19, 2025, aims to provide practical solutions to harmonize data protection practices. This code should address topics such as anonymization rules, archiving of press articles, retention periods for recordings and photos, as well as the processing of data relating to minors and victims of offenses. It would reconcile the right to information and the right to privacy of individuals not holding public functions.

The UODO encourages journalist and media organizations to take the initiative to draft this code, which should be developed by sector representatives. The authority positions itself as a support to evaluate and approve the final project. The vice-president of the UODO specified that the goal is not to restrict media activity but to promote conscious use of personal data, adopting security measures appropriate to the risks and assessing the necessity of disclosing certain information, particularly for children or elderly persons.