RODO, that is the data protection regulation applicable in the European Union (UE), regulates the processing by natural persons conducting business activity, enterprises and other organisations of personal data relating to natural persons in the UE.

RODO replaced Directive 95/46/EC and entered into force, after a two‑year transitional period, on 25 May 2018. It applies directly in the Member States of the UE without the need to adopt implementing legal acts into national law.

The Regulation does, however, allow for amendments in the national legislations of Member States. Since 25 May 2018 Poland has been governed by the Act on the Protection of Personal Data, which ensures the application of RODO on the territory of Poland and establishes a new authority responsible for data protection matters – the President of the Personal Data Protection Office.

The provisions of RODO do not apply to the processing of personal data by a natural person in the course of purely personal or household activities, provided that these are not related to professional or commercial activity. However, if a natural person uses personal data e.g. in connection with social, cultural or financial activities — they must comply with data protection regulations.

RODO aims to realise the fundamental rights and freedoms of natural persons, in particular the right to the protection of personal data of natural persons, and to regulate the principles and enable the free flow of personal data within the UE in such a way that the protection of individual rights does not stand in the way of that flow. What does RODO protect against? RODO protects the fundamental rights and freedoms of natural persons, and in particular their right to the protection of personal data. What falls under RODO and who does it concern? RODO applies to all entrepreneurs who, in connection with their activities, process personal data.

Compliance with RODO is an obligation of every entity that processes personal data in the course of its activities. Compliance with RODO is not a matter of an organisation's goodwill, but an obligation enforceable by multi‑million financial penalties that can reach up to €20 million or, in the case of an enterprise, up to 4% of its total worldwide annual turnover of the preceding financial year.

All processes in which an organisation processes personal data should be brought into compliance with RODO. The obligation to align an organisation with RODO also rests with entities that are sole proprietorships and process personal data to a limited extent. Persons who process personal data as part of personal activities do not have to align with RODO.

The purpose of aligning with RODO is to ensure a high level of protection of personal data within the organisation by taking appropriate technical as well as organisational measures. Therefore, people with knowledge of both the legal‑formal aspects and IT should take part in aligning with RODO. When choosing a contractor who will bring the organisation into compliance with RODO, one should consider whether they possess comprehensive knowledge and skills both in the application of the law and in the operation of IT systems.

A one-off adaptation of the company to RODO is not sufficient, because the situation in your company changes dynamically, as does its legal environment. With every new process and each new contract concluded, new challenges and potential threats to data protection arise.

If there is no person in the company responsible for RODO compliance, this may create a risk of incidents. Therefore, it is worth protecting yourself against them by using ongoing support in the area of RODO.

If you have been appointed to supervise the personal data protection system and want to learn how to implement and apply RODO so that the data protection regulations contribute to the development of your organisation, rather than remaining an irritating burden, we invite you to our RODO training.

Our training is tailored to the needs and specifics of the participants. It contains practical examples and exercises that allow participants to understand how to apply RODO provisions in practice in their work. In the workshop sections we create real situations that participants will encounter in their daily work. Additionally, due to the continuous changes and updates to RODO provisions, good training should be up to date and take into account the latest changes in legislation and technology. After completing the training the participant receives a certificate of completion, which confirms their knowledge and skills in the field of RODO.

Our training, workshops and courses enjoy a good reputation among clients, who appreciate the high quality of the training and the individual approach to the client, as well as the variety of formats and difficulty levels. We offer RODO training at a low price because we want to reach as many clients as possible and promote knowledge in the field of personal data protection. It is worth remembering, however, that the price of a training, course or workshop on RODO should not be the only criterion for selection. The quality and experience of the trainers and the thematic scope are also important. Before choosing a specific RODO training it is worth paying attention to these factors, and price should be one of the elements when comparing different offers.