Following Panoptykon’s General Data Protection Regulation (GDPR) complaint against one of the biggest Polish news website, Interia.pl – the Polish Data Protection Authority has confirmed that online publishers should give users access to their advertising profiles generated for the purposes of delivering behavioural ads.

We enter the final stage of the negotiations of the AI Act – the first comprehensive law regulating the development and implementation of artificial intelligence. The lack of transparency of the trilogue and intense corporate are reasons to worry. But fortunately – thanks to the efforts of civil society – there are also reasons for optimism. Will the AI Act eventually promote and protect fundamental rights and freedoms?

Have the Polish authorities been aware of the PRISM program operated by US security services and have they discovered violations of the Polish law? Is the Polish prosecution going to investigate the matter?

In our first attempt at a “transparency report”, we looked at what happens at the interface of Internet service providers and public authorities in Poland. Who sends requests for users' data? How many and for what purpose? What legal procedures are followed and what safeguards apply? Our pilot study includes analysis of legal provisions and collection of data from both major Internet Service Providers and public authorities. The report explains systemic problems that were identified in our research and that should be solved in order to ensure adequate standard of protection for individuals.

Why do we need the reform of European Personal Data Protection Law? Panoptykon Foundation prepared a publication explaining problems regarding current law and presenting solutions to those problems that should be included in new regulation on personal data protection.