The Law on Legal Protection of Personal Data (1996) (last edition 2021) aims to protect fundamental human rights and freedoms, in particular the right to the protection of personal data, and to ensure a high level of protection of personal data. The Law lays down the principles of personal data processing, the legal status and powers of the State Data Protection Inspectorate, the powers of the Inspector of Ethics of Journalists, the procedure of the investigation of the violations of personal data and privacy laws, and the imposition of administrative fines by the State Data Protection Inspectorate.
A new edition of the Law was passed in 2018. It was brought into line with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
The fifth part of Article 20 of the Law on Documents and Archives (1995) (last edition in 2020) determines fixed restrictions on access to the documents which contain information on a person’s private life, as well as to structured sets of personal data – 30 years after the person’s death, and in the event of failure to determine the date of death – for a term of 100 years from her/his birth. If neither the date of birth nor the date of death of a person is determined, the access shall be limited for a term of 70 years, counting from the creation of the documents.