The report looks at what happens at the interface of Internet service providers and public authorities in Poland. Who sends requests for users data, how many and for what purpose, what legal procedures are followed and what safeguards apply. During our research we analysed legal provisions and collected data from both major Internet service providers and public authorities. On that basis we were able to identify several systemic problems that should be solved in order to ensure adequate standard of protection for individuals.

Do we really need data protection in this world? Katarzyna Szymielewicz (Panoptykon Foundation) and Jérémie Zimmermann (La Quadrature du Net) talk about usage of data collected in Internet by private companies and changes that new data protection regulation could bring, including explicit consent for data processing as a rule, information about data processing presented in clear manner, regulation of profiling and privacy by default concept.

Before Snowden’s revelations we had known about FISA – law that mandates big companies to cooperate with U.S. intelligence agencies and revealed data about us, but we have not been aware of the scale and the depth of that surveillance. On the basis of this new information about NSA’s mass surveillance programs, Panoptykon Foundation tried to better understand how law enforcement and intelligence agencies in Poland can access data of Internet users and thus bring more transparency in this area. Katarzyna Szymielewicz presents main conclusions from this research.

Anna Buchta (EDPS), Gwendal Le Grand (CNIL), Paul Nemitz (European Commission), Katarzyna Szymielewicz (Panoptykon Foundation) and James Leaton-Grey (BBC) discuss CJEU Google Spain and UPC Telekabel decisions and their implementation implications for rights to privacy and freedom to expression in Europe, as well as safeguards, processes and mechanism to protect human rights online.