On 22 June, Polish president signed a new anti-terrorism law. The law contains measures that are inconsistent with the Polish Constitution and with the European Convention on Human Rights. The list of controversies is long: foreigners’ phone calls might be wire-tapped without a court order, and police might collect their fingerprints, biometric photos and DNA if their identity is “doubtful”. Online content might be blocked, citizens' freedom of assembly limited, and secret services are given free access to all public databases.

Do we really need data protection in this world? Katarzyna Szymielewicz (Panoptykon Foundation) and Jérémie Zimmermann (La Quadrature du Net) talk about usage of data collected in Internet by private companies and changes that new data protection regulation could bring, including explicit consent for data processing as a rule, information about data processing presented in clear manner, regulation of profiling and privacy by default concept.

This paper is aims to give a brief overview of the following issues: (i) Polish data retention regime and its drawbacks; (ii) the use of data retention in practice and available
data on the subject; (iii) campaign run by the Panoptykon Foundation over last two years; and (iv) political shifts that occurred in Poland.