The Polish data protection authority (UODO) has presented a pilot certification scheme for data protection specialists, developed by the Scientific and Academic Computer Network - National Research Institute (NASK).

This programme, presented on 2 July 2026, is aimed at data protection and compliance specialists, as well as data controller representatives, and will in the future extend to data protection officers. The certification will comply with the ISO/IEC 17024 standard on general requirements for bodies operating certification of persons. It will attest to knowledge of appropriate technical and organisational measures to ensure information security and compliance with basic data protection requirements. It is explicitly stated that this programme does not constitute certification within the meaning of Article 42 of the GDPR.

The proposed certification profile was submitted for consultation to representatives of several associations, including SABI, ZFODO, the IAPP KnowledgeNet Chapter and the Social Experts Team at the President of the UODO, in order to improve the project. The UODO also reaffirmed its commitment to developing certification initiatives compliant with Article 42 and Article 43 of the GDPR to strengthen the security of personal data.