What is the official ID of this bill?
The official print number for this legislation is PROJEKT USTAWY 1955.
New Cybersecurity Rules: More Companies Under Supervision and Stricter Penalties
The act significantly expands the list of companies and institutions required to implement advanced IT security measures and report major incidents. It introduces new, very high financial penalties for negligence, reaching up to 100 million PLN. For citizens, this means potentially better protection against data leaks and disruptions to essential services, but also new obligations for a wider range of businesses.
Key points
Many more companies and institutions (including energy, transport, healthcare, internet providers, and large municipal offices) will have to meet strict cybersecurity standards and report serious incidents.
Financial penalties of up to 10 million EUR or 2% of turnover for companies, and up to 100 million PLN for violations posing a serious threat to the state or human life, have been introduced.
Heads of companies and public institutions bear personal responsibility for cybersecurity and can be fined up to 300% of their salary.
An online service is being created to allow every citizen to check if their personal data (e.g., login, PESEL number) has been leaked online.
The government will have a tool to designate hardware and software suppliers as 'high-risk' and order their gradual removal from critical systems within 4-7 years.
94%
VOTING RESULTS
2026-01-23
For
407
Against
10
Abstain
17
Status:
Became Law
Record your position for audit.
Why does your vote on bills matter?
It creates raw, undeniable proof. Civic Will provides the permanent data to verify the Government's loyalty towards its citizens
(explained here).
Start recording it now.