Article 88 PDPA
The control protocol

1. The course of inspection activities is presented by the inspector in the inspection protocol.

2. The inspection protocol includes:

1) indication of the name or first and last name and address of the controlled party;

2) the name of the person representing the controlled and the name of the body representing the controlled;

3) the name and surname, official position, the number of the official ID card and the number of the named authorization of the inspector, and in the case of the inspector referred to in Article 79 (1) (2), the name and surname, the number of the identity document and the number of the named authorization;

4) the date of commencement and completion of control activities;

5) definition of the subject scope of the audit;

6) a description of the facts established in the course of the audit and other information relevant to the assessment of the compliance of data processing with the provisions on the protection of personal data;

7) listing of attachments;

8) discussion of the corrections, deletions and additions made in the inspection protocol;

9) instruction of the inspected person on the right to make objections to the inspection protocol and the right to refuse to sign the inspection protocol;

10) the date and place of signing of the inspection protocol by the inspector and the inspected person.

3. The inspection report shall be signed by the inspector and forwarded to the inspected person for signature.

4. The inspected person shall, within 7 days from the date of presentation of the inspection protocol for signature, either sign it or submit written objections to its contents.

5. If objections are filed, the inspector shall analyze them and, if necessary, undertake additional inspection activities, and if the objections are found to be justified, amend or supplement the relevant part of the inspection protocol in the form of an annex to the inspection protocol.

6. If the objections are not accepted in whole or in part, the inspector shall communicate this to the inspected person, along with the reasons.

7. Failure to deliver the signed inspection protocol to the inspector and failure to raise objections to its contents within the time limit referred to in paragraph 4 shall be deemed a refusal to sign the inspection protocol.

8. About the refusal to sign the inspection protocol, the inspector shall make a note in the protocol, including the date of the refusal. In the case referred to in paragraph 7, the note shall be made after the expiration of the time limit referred to in paragraph 4.

9. The inspection protocol shall be drawn up either electronically or in paper form in duplicate. The inspection protocol shall be delivered by the inspector to the inspected person.