In Poland, how is data privacy handled? The main law on privacy in Poland is the GDPR. The national regulation that principally develops and supplements the provisions of the GDPR is the Personal Data Protection Act. The EU e-Privacy Directive (2002/58/EC) is also significant. The main body responsible for enforcing data privacy is the Personal Data Protection Office (PDPO). What are its key investigative powers and what do infringements of privacy laws mean for offenders?