Wizards.io Blog - GDPR, DORA, NIS2, AI Act

Articles and guides on GDPR, DORA, NIS2 and AI Act compliance. Practical knowledge about data protection and cybersecurity.

All articles (38)

Data Processing Agreement - what it must contain and when it is required - A data processing agreement is a contract that a data controller enters into with a data processor when the latter processes data on behalf of and for the benefit of the data controller. This requirement stems directly from Article 28 of the GDPR. This is not merely good practice, but an obligation, and failure to comply constitutes a separate infringement, punishable by a heavy administrative fine. In the public sector, a legal act governed by EU or Member State law may serve as an alternative to a contract. [RODO - 2026-10 - Adam Jeż]
Umowa powierzenia przetwarzania danych osobowych - co musi zawierać i kiedy jest wymagana
Personal Data Management Applications within a Company in Accordance with the GDPR - Most organisations begin with a record of processing activities, but the register alone does not ensure GDPR compliance without knowledge of the actual data. What classes of applications make up complete personal data management? [RODO - 2026-09 - Adam Jeż]
Aplikacje do zarządzania danymi osobowymi w firmie zgodnie z RODO
Security incidents and data breaches: liability, costs and the first 72 hours - A serious incident and a data breach are two different categories. What deadlines actually apply after 3 April 2026, and why is liability now personal? [RODO - 2026-08 - Adam Jeż]
Incydent bezpieczeństwa i naruszenie ochrony danych: odpowiedzialność, koszty i pierwsze 72 godziny
Detecting personal data (shadow data) - or how to find personal data that a company is unaware of - Shadow data is personal data outside your inventory, retention and safeguards. How to detect it and why visibility is a prerequisite for GDPR compliance. [RODO - 2026-07 - Adam Jeż]
Wykrywanie danych osobowych (shadow data) - czyli jak znaleźć dane osobowe, o których firma nie wie
Personal data minimization - a GDPR obligation that also serves as a security measure - Why the GDPR Article 5 minimisation principle is also a risk management rule in an ISMS, and how Detecto and Oblivio support it in the context of NIS2, the Polish Cybersecurity Act and DORA. [RODO - 2026-07 - Adam Jeż]
Minimalizacja danych osobowych - obowiązek z RODO, który jest też środkiem bezpieczeństwa
Personal Data Anonymization in Poland - Rules and Methods - What anonymization means legally, how the 2025 CJEU ruling in C-413/23 P (SRB) changed the standard, and how the Article 29 WP methodology meets Polish DPA enforcement reality. [RODO - 2026-06 - Adam Jeż]
Anonimizacja danych osobowych w Polsce - zasady i metody
Personal Data Retention in the Context of NIS2 and DORA - How to manage data retention according to NIS2, DORA, and GDPR requirements? Practical guide for financial sector and critical infrastructure. [RODO - 2025-01 - Wizards Team]
Retencja danych osobowych w kontekście NIS2 i DORA
GPAI Code of Practice: Voluntary Guidelines for AI Act - What is the Code of Practice for GPAI models? How does it affect large language model providers and organizations using AI? [AI - 2025-01 - Wizards Team]
Kodeks GPAI: dobrowolny regulamin dla AI Act
DORA in Poland 2025: What You Need to Know - Practical guide to DORA implementation in Poland. Deadlines, regulatory requirements, and key steps for financial institutions. [DORA - 2025-01 - Wizards Team]
DORA w Polsce 2025: co musisz wiedzieć
NIS2 in Poland: Implementation Status and Entity Obligations - What is the NIS2 implementation status in Poland? Which sectors are covered and what are the obligations for essential service operators? [NIS2 - 2025-01 - Wizards Team]
NIS2 w Polsce: stan wdrożenia i obowiązki podmiotów
How to Prepare for a GDPR Audit in 2025 - Comprehensive GDPR audit preparation checklist. What do auditors check and how to avoid the most common non-compliances? [RODO - 2025-01 - Wizards Team]
Jak przygotować się do audytu RODO w 2025 roku
Artificial Intelligence and GDPR: Challenges and Solutions - How to reconcile AI use with GDPR requirements? Profiling, automated decisions, and data subject rights in the context of artificial intelligence. [AI - 2024-10 - Michał Wiśniewski]
Sztuczna inteligencja a RODO: Wyzwania i rozwiązania
Pseudonymization vs Anonymization: Key Differences in GDPR - What is the difference between pseudonymization and anonymization? When to use which technique? Practical GDPR guide. [RODO - 2024-09 - Wizards Team]
Pseudonimizacja a anonimizacja: Kluczowe różnice w RODO
Automatic Data Classification Using AI - How does artificial intelligence support personal data classification and categorization? ML models serving privacy protection. [AI - 2024-09 - Wizards Team]
Automatyczna klasyfikacja danych z wykorzystaniem AI
Data Breach: Notification Procedure and Response - What to do in case of personal data breach? Deadlines for reporting to DPA and notifying affected individuals. [RODO - 2024-09 - Anna Kowalska]
Naruszenie ochrony danych: Procedura zgłaszania i postępowania
Data Transfer Outside EEA: GDPR Rules and Mechanisms - How to legally transfer personal data to the USA and other third countries? SCCs, adequacy decisions, and binding corporate rules. [RODO - 2024-09 - Piotr Nowak]
Transfer danych poza EOG: Zasady i mechanizmy RODO
Nocturno: Data Anonymization with Referential Integrity - How does Nocturno anonymize personal data while preserving database relationships? Pseudonymization and anonymization techniques for GDPR. [Nocturno - 2024-08 - Wizards Team]
Nocturno: Anonimizacja danych z zachowaniem spójności referencyjnej
Oblivio: Automatic Retention Management and Personal Data Deletion - How does Oblivio automate the personal data lifecycle? Retention policies, automatic deletion, and GDPR compliance. [Oblivio - 2024-08 - Wizards Team]
Oblivio: Automatyczne zarządzanie retencją i usuwaniem danych osobowych
Records of Processing Activities (ROPA): How to Maintain It? - What is a record of processing activities and who must maintain it? Template and practical tips for creating ROPA. [RODO - 2024-08 - Michał Wiśniewski]
Rejestr czynności przetwarzania (RCP): Jak go prowadzić?
GDPR – Comprehensive Guide to Data Protection - Everything you need to know about GDPR. Data processing principles, individual rights, and controller obligations. [RODO - 2024-07 - Katarzyna Zielińska]
RODO – kompleksowy przewodnik po ochronie danych
Revelio: Automatic Personal Data Detection in Documents - How does Revelio use AI to identify personal data in unstructured documents? NLP technology serving GDPR compliance. [Revelio - 2024-07 - Wizards Team]
Revelio: Automatyczne wykrywanie danych osobowych w dokumentach
Detecto: Personal Data Detection in Databases and IT Systems - How does Detecto scan databases for personal data? Automatic inventory for GDPR and DORA compliance. [Detecto - 2024-07 - Wizards Team]
Detecto: Wykrywanie danych osobowych w bazach danych i systemach IT
DPO – Data Protection Officer: When is One Required? - When must an organization appoint a Data Protection Officer? What are the DPOs obligations and responsibilities under GDPR. [RODO - 2024-07 - Anna Kowalska]
IOD – Inspektor Ochrony Danych: Kiedy jest wymagany?
DPIA – Data Protection Impact Assessment: When and How to Conduct It - What is DPIA and when is it mandatory? Methodology for conducting data protection impact assessments under GDPR. [RODO - 2024-07 - Piotr Nowak]
DPIA – Ocena skutków dla ochrony danych: Kiedy i jak ją przeprowadzić
What is DORA and what framework does it establish - Digital Operational Resilience Act for the financial sector. Learn about the obligations it imposes on financial institutions and how to prepare. [DORA - 2024-06 - Anna Kowalska]
Czym jest DORA i jakie wyznacza ramy działania
NIS2 – Risk Assessment and Incident Reporting - New requirements of the Network and Information Security Directive. Learn about key changes and implementation deadlines. [NIS2 - 2024-06 - Piotr Nowak]
NIS2 – ocena ryzyka i zgłaszanie incydentów
AI Act – Artificial Intelligence Regulation in Europe - Comprehensive guide to the Artificial Intelligence Act. Risk categories, requirements, and implementation timeline. [AI - 2024-06 - Michał Wiśniewski]
AI Act – regulacja sztucznej inteligencji w Europie
Consent for Data Processing: GDPR Requirements and Common Mistakes - How to properly collect and document consent for personal data processing? Consent validity requirements and how to meet them. [RODO - 2024-06 - Piotr Nowak]
Zgoda na przetwarzanie danych: Wymogi RODO i najczęstsze błędy
Cookies and GDPR: Practical Compliance Guide - How to properly implement a GDPR and ePrivacy compliant cookie banner? Which cookies require consent and how to collect it. [RODO - 2024-06 - Michał Wiśniewski]
Cookies a RODO: Praktyczny przewodnik po zgodności
Personal Data Anonymization – Methods and Challenges - How to effectively anonymize personal data? Techniques, tools, and common mistakes in the anonymization process. [RODO - 2024-05 - Michał Wiśniewski]
Anonimizacja danych osobowych – metody i wyzwania
Sensitive Data vs Personal Data: Key Differences in GDPR - How do special category data differ from regular personal data? What additional requirements does GDPR impose on sensitive data processing. [RODO - 2024-05 - Michał Wiśniewski]
Dane wrażliwe vs dane osobowe: Kluczowe różnice w RODO
GDPR Data Subject Rights: Complete Guide for Organizations - How to handle data subject requests? Right of access, rectification, erasure, portability, and objection. [RODO - 2024-05 - Anna Kowalska]
Prawa osób w RODO: Kompletny przewodnik dla organizacji
10 GDPR Myths That Could Cost Your Business - Most popular misconceptions about GDPR. Check if you are not making these costly data protection mistakes. [RODO - 2024-04 - Anna Kowalska]
10 mitów o RODO, które mogą kosztować Twoją firmę
GDPR Fines: Biggest Penalties and How to Avoid Them - Analysis of the largest GDPR fines in Europe and Poland. What violations are most frequently penalized and how to protect your organization. [RODO - 2024-04 - Piotr Nowak]
Kary RODO: Największe grzywny i jak ich uniknąć
Data Retention – How Long to Store Personal Data? - Principles for determining data retention periods. How to avoid fines for storing personal data too long. [RODO - 2024-03 - Piotr Nowak]
Retencja danych – jak długo przechowywać dane osobowe?
Cybersecurity in the Financial Sector - Security requirements for financial institutions. DORA, NIS2 and regulators – how to meet all regulations. [DORA - 2024-02 - Anna Kowalska]
Cyberbezpieczeństwo w sektorze finansowym
High-Risk AI Systems – AI Act Requirements - Which AI systems are classified as high-risk? Obligations for providers and users according to the AI Act. [AI - 2024-01 - Michał Wiśniewski]
Systemy AI wysokiego ryzyka – wymogi AI Act
GDPR – Complete Personal Data Protection Guide - Everything you need to know about GDPR. Principles, rights, obligations, and practical guidance for organizations. [RODO - 2024-01 - Wizards Team]
RODO – Kompletny przewodnik po ochronie danych osobowych

Wizards.io Blog - GDPR, DORA, NIS2, AI Act

All articles (38)

Tags