Poland - Open Data Re-use Act (1641/2021)

Overview

The Act on Open Data and Re-use of Public Sector Information (Ustawa z dnia 11 sierpnia 2021 r. o otwartych danych i ponownym wykorzystywaniu informacji sektora publicznego) creates a modern legal framework for publication, discovery and re-use of information held by public-sector bodies in Poland. The Act transposes Directive (EU) 2019/1024 and updates prior national law to emphasise machine-readable formats, metadata, APIs for dynamic data and the identification and prioritisation of high-value datasets. It establishes a centrally administered national data portal ("portal danych") managed by the minister competent for informatization and sets out duties for a broad class of obligated entities to publish, describe and facilitate re-use of datasets while preserving necessary restrictions for personal data and other protected information. Official publication and text of the Act are available from the Polish official journal and legal repositories such as Dziennik Ustaw, Dz.U. 2021 poz. 1641 (PDF) and consolidated HTML/text at the public legal registries (see also the ELI entry at ELI).

Definitions

The Act supplies precise definitions critical to implementation: "information of the public sector" (any content held by an obligated body in any form); "open data" (public-sector information published in open, non-proprietary, machine-readable formats intended for free re-use); "dynamic data" (datasets subject to frequent or real-time updates, e.g., sensor or transport feeds); "high-value datasets" (datasets with significant economic or social potential); "metadata" (structured descriptive information facilitating discovery and use); "API" (technical interface for automated exchange); and "anonymisation" (process turning personal data into non-identifiable records). The definitions align with and extend concepts in Directive (EU) 2019/1024 and reference related instruments such as the GDPR for data protection matters.

Governance and Institutional Framework

The Act designates the minister competent for informatization as the administrator of the national data portal and requires public-sector bodies to cooperate with that ministry on dataset publication and metadata standards. The Council of Ministers and the minister implement detailed technical and operational rules via regulation (notably the Rozporządzenie Rady Ministrów of 21 November 2022 on the data portal, Dz.U. 2022 poz. 2415). The Act also interacts with other ministries and public registries: central statistical authorities, national archives, museums (subject to specific fee rules), land and geodetic authorities, and sectoral regulators where sectoral datasets exist. Guidance, templates and forms for reuse applications have been published across ministry portals (see e.g. Portal Interoperability & Architecture — gov.pl and numerous ministry pages), and the Council of Ministers' regulation operationalises portal roles such as administrator, provider (dostawca) and user account management.

Key Focus Areas

The Act concentrates on several interlocking priorities: first, mandatory publication and cataloguing of public-sector datasets in machine-readable open formats and with comprehensive metadata; second, identification and prioritisation of high-value datasets (whose re-use yields high public benefit and economic value) that must be made available under enhanced conditions; third, specific treatment of dynamic data requiring API-based access to support real-time applications; fourth, open licensing and non-discriminatory access rules which prohibit restrictive conditions or technical barriers to reuse; and fifth, balancing openness with safeguards for personal data, trade secrets, confidentiality and national security. The Act also addresses practical concerns: it requires publishing the source, update frequency and contact information; encourages the use of permissive licenses; constrains charging policies to cost recovery in limited cases (with special regimes such as maximum museum charges set by subsequent regulation); and provides procedural timelines for handling reuse requests and refusals. Additionally, it integrates research data provisions to support academic verification and reproducibility while aligning anonymisation rules to protect personal data where necessary.

Implementation Framework

Operational implementation relies on a combination of statutory duties and subordinate instruments. The Council of Ministers regulation of 21 November 2022 sets technical standards, metadata elements, portal operation rules and automated verification processes; it defines the portal's elements like profiles, identifiers, format checks and availability monitoring. Ministries and obligated bodies must publish metadata and either upload datasets to the portal or provide stable URLs and APIs. The Act foresees integration with existing registers and systems (e.g., national court register, statistics, geodesy and cartography), and contemplates phased rollouts for dynamic and high-value datasets. Administrative procedures, templates and guidance are issued by responsible ministries, and the national portal provides automated metadata ingestion, quality checks and a five-level openness rating to help users assess dataset quality.

Monitoring and Evaluation

Monitoring occurs through portal analytics, automated verification of metadata and format compliance, and periodic reporting by obligated entities. The portal software is required to track publication dates, update timestamps and availability, enabling government monitoring of compliance. Evaluation includes metrics such as number of published datasets, proportion of high-value datasets accessible via APIs, machine-readability rates, frequency of updates for dynamic data, metadata completeness and reuse requests processed. Ministries may publish status reports and statistics; non-governmental actors (academia, civil society, businesses) also track progress and publish independent assessments of quality and accessibility.

Penalties, Liability, and Appeals

The Act primarily creates obligations and administrative remedies rather than introducing new criminal sanctions. Enforcement typically relies on administrative procedures, oversight by supervising authorities and judicial review available under Polish administrative law for refusals or failures to act. Specific penalty mechanisms (such as fines) are not the central enforcement tool in the Act itself; instead, the law enables remedies including administrative decisions, mandatory publication orders and judicial appeals. Liability for misuse of information remains governed by general civil and criminal law (including data-protection rules under the GDPR and Polish data-protection statutes) and intellectual-property protections. The Act also contemplates obligations for anonymisation and data minimisation where datasets include personal data; failure to observe data-protection obligations may trigger separate supervisory actions by data-protection authorities.

Relationship to Other Instruments

The Act repeals and replaces the 2016 Act on Re-use of Public-Sector Information and amends numerous sectoral laws (geodesy, national statistics, museums, roads law, national court register, access to public information, IT in public tasks, public medical rescue, population registry, water law, tourism, central business register and others). It explicitly implements Directive (EU) 2019/1024 and interacts with the GDPR (Regulation (EU) 2016/679) where personal data are concerned. Secondary legislation (e.g., the Rozporządzenie Rady Ministrów on the portal and ministerial regulations on fees) operationalises many technical and fee-related aspects. The Act is intentionally interoperable with existing registries, standards and public information portals and is designed to work with Poland's wider digital-government initiatives and interoperability frameworks.

International Alignment

The Act was drafted to transpose and implement Directive (EU) 2019/1024 on open data and the re-use of public-sector information and therefore aligns Poland with EU-level definitions, obligations and priorities (e.g., high-value datasets, dynamic data and API access). It references EU instruments and takes account of GDPR obligations for personal data protection. The national portal and metadata standards aim to interconnect with EU-level openness initiatives (such as the European Data Portal) and to facilitate cross-border re-use. The Act also reflects good-practice guidance from EU bodies on machine-readable formats, licensing and metadata standards to promote interoperability and cross-jurisdictional data applications.

Implementation Timeline

Sources and References