The Polish data protection authority (UODO) and the Social Insurance Institution (ZUS) organized a seminar on September 24, 2026, focusing on the accountability of public administrations in the collection, storage, and sharing of personal data in the digital age.

During the event, it was emphasized that institutions like ZUS, which processes data of about 25 million citizens, are among the largest data controllers in Poland. The focus was on the need to reconcile the convenience of digital public services with accountability in data protection, with a warning against implementing new technologies such as artificial intelligence without prior analysis. It was recalled that the accountability of a data controller does not end when data is transmitted to another entity and that it is imperative to verify subcontractors. The discussion also addressed data breach management, noting that notifications can be overly bureaucratic. In the event of a health data breach, simply blocking the national identification number (PESEL) is considered insufficient given the risks of fraud. The UODO specified that it does not intend to hinder digitization but to promote its responsible development.