Poland to legislate against liability shifting in medical data processing contracts

The Polish Ministry of Digital Affairs is drafting legislation to prevent large entities from offloading legal liability for data protection onto small medical practices via contract clauses. This move addresses a recurring pattern where small providers were held solely responsible for data breaches or compliance failures despite limited control over processing systems.