The Polish data protection authority (UODO) has concluded the 2026 edition of its educational program, the GDPR Leaders Summer Academy, aimed at students and recent graduates.

The program, which ended with a final meeting on September 14, 2026, aimed to provide practical knowledge of data protection rules. Participants studied the competences of UODO, the principles of the GDPR, the role of the data protection officer, breach management, and risk analysis. The program also covered technological topics such as cybersecurity, artificial intelligence, online tracking, deepfakes, online identity theft, and parental oversharing. Participants received diplomas, and the most deserving will have the opportunity to undertake internships within the authority.

During the closing meeting, a presentation by the vice-chairman of the ODO24 board focused on risk analysis. It was recalled that the objective of the GDPR is not to eliminate risks entirely but to lead the data controller to take appropriate measures to limit them. Risk analysis was described as an ongoing process involving the identification of assets and threats, estimation of likelihood and consequences, followed by regular monitoring. It was emphasized that the consequences of a risk must be assessed from the perspective of the rights and freedoms of natural persons, not the interests of the organization.