Poland identity verification standards face scrutiny over security gaps

identity verification telecommunications security customer authentication cybercrime prevention data protection

Current regulations in Poland do not establish strict standards for identity verification via telephone helplines, granting telecommunications operators significant discretion in setting security protocols. Experts warn that relying solely on basic personal data, such as the PESEL number, facilitates identity theft and unauthorized account changes by cybercriminals.

While the banking sector follows stringent authentication regulations, telecommunications providers currently operate under broader guidelines. Przemysław Poznański from the Office of Electronic Communications (UKE) noted that the choice of authentication methods lies with the enterprise, provided they comply with data protection and service security laws. Similarly, the Personal Data Protection Office (UODO) and GDPR do not mandate specific verification requirements, leaving a gap in standardized security measures for telephone-based customer service.