We have taken part in the public consultations of the draft code of conduct which is supposed to help apply the GDPR to the internet advertising sector. The code was prepared by the Polish office of the Internet Advertising Bureau.

The report looks at what happens at the interface of Internet service providers and public authorities in Poland. Who sends requests for users data, how many and for what purpose, what legal procedures are followed and what safeguards apply. During our research we analysed legal provisions and collected data from both major Internet service providers and public authorities. On that basis we were able to identify several systemic problems that should be solved in order to ensure adequate standard of protection for individuals.

Before Snowden’s revelations we had known about FISA – law that mandates big companies to cooperate with U.S. intelligence agencies and revealed data about us, but we have not been aware of the scale and the depth of that surveillance. On the basis of this new information about NSA’s mass surveillance programs, Panoptykon Foundation tried to better understand how law enforcement and intelligence agencies in Poland can access data of Internet users and thus bring more transparency in this area. Katarzyna Szymielewicz presents main conclusions from this research.