Obligations of the inspected person

The inspected person is obliged to:

• tolerate the performance of the incpection and create adequate conditions for the Inspection Authority to perform the inspection and process the inspection findings,
• provide the Inspection Authority with the cooperation necessary for the proper performance of the inspection, especially when documenting an adequate level of security with regard to the risks posed by the processing of personal data under the conditions of the controller and processor,
• during the inspection, ensure the Inspection Authority has accessible and safe access to equipment, resources and information systems,
• provide the required cooperation to the Inspection Authority in accordance with its powers under § 93 and to refrain from actions that could hinder the performance of the inspection,
• present himself or herself at the request of the Inspection Authority to provide explanations on the subject of the inspection,
• within the specified period, provide the Inspection Authority with the originals or copies of documents, other documents, statements and information, personal data processed on storage media, including technical carriers of personal data, extracts and source codes of programs, if he or she owns or has them available, and other materials or documents necessary for the performance of the inspection and, in justified cases, allowed the Inspection Authority to take originals or copies even outside the premises of the inspected person,

• provide the Inspection Authority with complete and true oral and written information, statements and explanations regarding the inspected facts and facts related to the inspection,,
• at the request of the Inspection Authority to appear for the discussion of the protocol.

Everyone is obliged to provide the Office with the necessary cooperation in the performance of its tasks and powers and to enable the Office to supervise compliance with obligations under this Act or special regulations and decisions issued on the basis of the Personal Data Protection Act. This does not affect the provisions of § 81 par. 7 and 8.