LABLOGIC KNOWLEDGE BASE
From a requirement to an action you can evidence
The materials lead from the provision through qualification to a concrete step inside the organisation. I also show what evidences that step.
LATEST
Latest publications
Recent materials from every area.
Is the data protection officer liable for a personal data breach?
A controller or processor is liable for a personal data breach towards the President of UODO…
What is the head of an essential or important entity personally responsible for?
Every company board member is the head of an essential or important entity, responsible for the…
How and when must a processor notify a personal data breach to the controller?
A processor notifies the controller of every breach it becomes aware of without undue delay and…
How to manage supplier risk under NIS2?
Supply chain security under Article 8 of the Polish KSC Act covers ICT products, services and…
What NIS2 documentation must an essential or important entity keep?
NIS2 documentation under Article 10 of the KSC Act means normative and operational documentation together with…
What new prohibitions does the AI Act introduce from 2 December 2026 and whom do they cover?
From 2 December 2026 the AI Act bans AI systems creating intimate deep fakes without consent…
How do you notify data subjects of a breach and what must the communication contain?
A breach communication is sent without undue delay to a person for whom the breach is…
What resources must a data protection officer receive?
Article 38(2) GDPR requires the DPO to be given resources for the tasks, access to personal…
How to document training so that it serves as evidence for the authority?
Training records serve best as evidence when they establish the person, the content and the day…
FOR THE BOARD
Materials that support decisions
A selection for people who answer for a decision and have to justify it. Without technical jargon and without sending you to the full text of the provision.
What should NIS2 training for the board cover?
The scope of training for the head of the entity is set by Article 8e(2) of…
How to determine if an organization must appoint a DPO?
The obligation to appoint a data protection officer arises in three cases under Article 37(1) GDPR.…
Where should the board begin preparing for NIS2?
With two board decisions. Who is the entity manager within the meaning of the KSC Act,…
KNOWLEDGE AREAS
Choose an area
Each area has its own set of materials and sits next to the service that follows from it. Start with the one that concerns your organisation today.
Incidents and Breaches
Assessing the event, the notification decision and the first day.
NEW AREA
AI Act
Roles towards an AI system, the obligations that already apply and how to evidence them.
WORKING TOGETHER
Need to relate a topic to your own situation?
The materials answer general questions. The scope of obligations depends on how the organisation actually works, so the next step is a conversation about a specific situation.