Personal Data Protection law WP-AD-2-PODO-ćw
The course aims to familiarize students with the fundamental concepts, institutions, and principles of personal data protection law. The lectures will cover the following topics:
1. Privacy and its protection under civil law
2. Evolution of public law regulations
3. Structure of current regulations
4. Purpose and scope of the GDPR
5. Existing, amended, and new definitions
6. Principles of data processing
7. Grounds for the lawful processing of ordinary data
8. Special categories of data (sensitive data)
9. Rights of data subjects
10. Entities responsible for processing (Controllers and Processors), Data Protection Officers (DPOs), and Supervisory Authorities
11. Penalties for regulatory violations and their application
12. Personal data protection in public administration bodies
13. Protection of employee personal data
14. Protection of consumer personal data
15. Protection of patient personal data
(in Polish) Dyscyplina naukowa, do której odnoszą się efekty uczenia się
(in Polish) E-Learning
(in Polish) Grupa przedmiotów ogólnouczenianych
Course coordinators
Term 2022/23_L: | Term 2026/27_L: | Term 2025/26_L: | Term 2024/25_L: | Term 2023/24_L: |
(in Polish) Opis nakładu pracy studenta w ECTS
Subject level
Learning outcome code/codes
Type of subject
Preliminary Requirements
Learning outcomes
• AD2_U01: The student interprets social and legal phenomena within administrative sciences in the context of personal data protection.
• AD2_U02: Applies knowledge of law, administration, and economics, and critically selects methods and data (e.g., assessing information security levels).
• AD2_U04: Independently proposes solutions to administrative problems and resolutions to decision-making dilemmas, and develops data security instructions.
• AD2_U05: Integrates knowledge from various disciplines (law, economics, sociology, politics) for comprehensive analysis.
• AD2_U09: Utilizes IT systems, databases, and modern technologies, and works with Electronic Document Management (EZD) systems.
Social Competencies (AD2_K)
• AD2_K01: The student understands the need for continuous learning and updating interdisciplinary knowledge (e.g., tracking changes in legal regulations).
• AD2_K02: Cooperates and works in a group to carry out assigned tasks.
• AD2_K03: Sets priorities for achieving goals.
• AD2_K04: Identifies and resolves ethical dilemmas in the role of a public official (e.g., analyzing situations involving a conflict between private and public interests).
ECTS Description
Participation in practical classes – 16 h
Reading literature and case law – 19 h
Preparation for classes – 20 h
Preparation for the test – 20 h
ECTS calculation: 75/25 (1 ECTS = 25 h of student work) = 3 ECTS
Assessment criteria
Multiple-choice test – 30 points
Student presentation – 20 points
Total – 50 points
50–60% – Satisfactory
60–70% – Satisfactory Plus
70–80% – Good
80–90% – Good Plus
90–100% – Very Good
Bibliography
Legal acts:
- Constitution of the Republic of Poland of 2 April 1997
- Treaty on the Functioning of the European Union
- Charter of Fundamental Rights of the European Union
- Council of Europe Convention 108 for the Protection of Individuals with regard to Automatic Processing of Personal Data
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
- Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA
- Act of 10 May 2018 on the Protection of Personal Data
- Act of 14 December 2018 on the Protection of Personal Data Processed in Connection with the Prevention and Combating of Crime
- Act of 21 February 2019 amending certain acts in connection with ensuring the application of Regulation (EU) 2016/679
Core literature:
- Handbook on European data protection law. 2018 edition. Luxembourg 2020,
Electronic version:
https://fra.europa.eu/sites/default/files/fra_uploads/fra-coe-edps-2018-handbook-data-protection_pl.pdf
- P. Fajgielski, *Personal Data Protection Law: An Outline*, Warsaw 2019
Supplementary reading:
- *GDPR: General Data Protection Regulation – Commentary*, E. Bielak-Jomaa, D. Lubasz (scientific eds.), Warsaw 2018
- P. Fajgielski, *General Data Protection Regulation. Personal Data Protection Act – Commentary*, Warsaw 2018
- *General Data Protection Regulation – Commentary*, M. Sakowska-Baryła (ed.), Warsaw 2018
- *EU Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data – Commentary*, P. Litwiński (ed.), Warsaw 2018
- *General Data Protection Regulation – Commentary*, M. Sakowska-Baryła (ed.), Warsaw 2018
- *Personal Data Protection Act – Commentary*, D. Lubasz (scientific ed.), Warsaw 2019
- *Personal Data Protection Act – Commentary*, P. Litwiński (ed.), Warsaw 2018
- *Act on the Protection of Personal Data Processed in Connection with the Prevention and Combating of Crime – Commentary*, A. Grzelak (ed.), Warsaw 2019
Additional information
Information on level of this course, year of study and semester when the course unit is delivered, types and amount of class hours - can be found in course structure diagrams of apropriate study programmes. This course is related to the following study programmes:
Additional information (registration calendar, class conductors, localization and schedules of classes), might be available in the USOSweb system: