Polish legislative and digital governance developments

Poland is navigating various legal and digital challenges. Initial concerns focused on legislative laxity, where contradictory or unconstitutional regulations were identified. These included ‘dead laws’ that are selectively applied to individuals and ‘criminogenic laws’ that inadvertently facilitate criminal activity, such as the misuse of collector’s identity cards.

More recent developments involve a cybersecurity crisis linked to ‘PHP2Shell’ vulnerabilities (CVE-2026-109618 and CVE-2026-109619), prompting the Ministry of Digital Affairs to issue urgent warnings regarding unauthorized server control. In response, the Central Information Center has temporarily taken several Public Information Bulletin websites offline.

Simultaneously, the government is pursuing legislative reforms, including a draft law on restrictive measures to address human rights violations and foreign interference. This legislation seeks to establish rules for sanctions against individuals and enterprises, though critics fear it could enable censorship by allowing the state to freeze financial resources or restrict transactions for ‘supporting foreign interference in the information environment of the Republic of Poland.’

While the Ministry of Justice is also proposing the digitalization of the court system through electronic files and automated speech recognition, experts have raised concerns regarding the reliability of electronic filing deadlines. Additionally, Poland is seeking to negotiate longer deadlines for the EU’s SAFE program in Brussels to ensure contract fulfillment, amid data indicating that nearly 40 percent of the Polish population now uses artificial intelligence.