Everyone who ascertain, or has justified suspicion, that his personal data are processed in contradiction with the
ACT no. 101 (e.g. the data are inaccurate, exceeding the purpose for which they were required), has the right to turn to the Office with an instigation or complaint.
The instigation or complaint drawing attention to a suspected breach of the Personal Data Protection Act should contain such specific information that an effective and focused handling procedure could be chosen without delay:
- Specification of the entity suspected of the violation of the Personal Data Protection Act;
- Description of activity involving personal data processing within which the breach of law occurred;
- Specification of personal data (or categories at least) processed in contradiction with the Personal Data Protection
Act;
- Documents or other supporting materials (or copies) on relation between the person who submitted the instigation (complainant) and the entity that processed his personal data;
- Documents or other supporting materials (or copies) evidencing the breach of the Personal Data Protection Act
- If possible, a reference to available sources evidencing the described matters;
- Contact data for communication with the person who submitted the instigation
The instigation may be submitted anonymously to the address of the Office and also by e-mail to:
In accordance with the Article 29(1)(c) of the Personal Data Protection Act, the submitting person shall be informed of the settlement of instigation.
However, the submitting person is not a party to the administrative procedure but can be heard as a witness
