Abstract

The aim of this article is to point out the legal consequences in terms of ensuring the security of personal data processing in IT systems. The legislator appointed personal data administrators specific duties on the question of setting organizational, personal, material and technical adequate means which they have to make it impossible to use personal details by unauthorized entities for them in the illegal destination. From May 2018 General Data Protection Regulation of the European Parliament and of the Council 2016/679 applies. It introduces new legal regulations, e.g. establish a data protection officer. The first part of the paper shows the tasks of data administrators consisting in the use of personal data security measures in IT systems, before the entry into force of the GDPR and the Act of 10 May 2018 on the Protection of Personal Data. The second contains the most important changes referring to the personal data administrators, specified in the GDPR and the Act on the Protection of Personal Data. Research methods contain basic legal acts together with publications in the field (comparative-legal method was used).