The Role and Responsibilities of the Data Protection Officer in the State Archives – an Attempt to Assess from the Perspective of Five Years after the Introduction of the EU General Data Protection Regulation (GDPR) Cover Image

Rola i zadania Inspektora Ochrony Danych w Archiwach Państwowych – próba oceny z perspektywy pięciu lat po wprowadzeniu unijnego ogólnego rozporządzenia o ochronie danych osobowych (RODO)
The Role and Responsibilities of the Data Protection Officer in the State Archives – an Attempt to Assess from the Perspective of Five Years after the Introduction of the EU General Data Protection Regulation (GDPR)

Author(s): Małgorzata Szabaciuk
Subject(s): History
Published by: Wydawnictwo Naukowe Uniwersytetu Marii Curie-Sklodowskiej
Keywords: protection of personal data; information security management; the general data protection regulation (GDPR); National Archives; documentation; Data Protection Officer; Controller

Summary/Abstract: This article aims to assess the issue of data protection and the role and tasks of the Data Protection Officer in the National Archives. With the introduction of the EU Data Protection Regulation (GDPR), much has changed in the perception of those who deal with these issues. The Data Protection Officer’s main concern is the proper handling of records that are produced in the process of any organizational unit’s activities, including those of the State Archives. The role and responsibilities of the Data Protection Officer in the state archives are the same as in other organizations. Due to the nature of the activities of the state archive network and the specific nature of an institution such as the archives, the duties of the Data Protection Officer are extremely important. On the one hand, the state archives service holds records with permanent retention, i.e. category A, and onthe other hand it operates like a normal office serving the public with its organizational structure. The management of information security in the age of the knowledge society is the key issue in any institution, for which the Data Protection Officer is responsible. The information security system itself must be well designed and thought out. The EU legislator intended the function of the Data Protection Officer to protect our privacy as well. The system of personal data protection has been in place in Poland for twenty-six years, and after the implementation of the GDPR (along with penalties for improper processing of personal data), we are increasingly considering it as our inalienable right to have our personal data well processed and not shared with unauthorized persons.

  • Issue Year: 2023
  • Issue No: 55
  • Page Range: 693-715
  • Page Count: 23
  • Language: Polish