Polish Police data retention practices spark privacy concerns

Polish police officers and employees are subject to the collection of fingerprints and buccal swabs, which are stored in police databases in connection with their service or employment. Under current regulations, unit heads decide on the collection of this data based on the scope of tasks performed by the individual.

Data is retained in police databases for up to five years after an officer leaves the service. This retention period has drawn criticism from the Commissioner for Human Rights (RPO) and the Personal Data Protection Office (UODO), who argue it may violate data minimization and storage limitation principles. For example, one retired officer was informed that his data would not be deleted until 2027, despite having been retired for three years.

While similar practices exist in countries such as the Netherlands, Austria, Canada, and the United Kingdom, those systems are reportedly based on voluntary participation and allow for the immediate deletion of data upon request, with data often being stored anonymously. In response to these concerns, the Ministry of Interior and Administration has announced a detailed analysis of the current regulations and their practical application.