Rozporządzenie o Ochronie Danych Osobowych. Aspekty organizacyjno-informatyczne w małych i średnich przedsiębiorstwach

This article describes basic aspects of implementation of GDPR in small and medium-sized enter-prises. Large entities usually have extensive legal and IT departments that can adapt their organiza-tion to the upcoming changes in a professional way. In smaller organizations GDPR raises anxiety and uncertainty. The starting point in this article were legal changes, that will be introduced on May 25, 2018. Next, the requirements for IT systems in terms of personal data protection were indicated. The third part of this article indicates potential solutions that are used in GDPR