Administrative penalty liability of the employer for unlawful processing of personal data

are legislative amendments to the current regime necessary?

Abstract

The survey deals with the consequences of violations of the employer’s obligations in the course of personal data processing. It reveals some failings of the national legislation on personal data protection, such as the unclear correlation between the general and the special clauses regulating the consequences of administrative violations, the significant difference between the minimum and the maximum amount of the fines and the different mechanisms of appealing of the sanctions imposed. As a result, some amendments in the Personal Data Protection Act are proposed.