Skip to main content

Abstract

The year 2018 was a breakthrough year for all European Union countries due to the need to adapt the organization to the management of personal data in accordance with the General Data Protection Requirements (GDPR). The Regulation specified some important obligations that should be implemented in all entities processing personal data in all sectors, including public administration offices. The aim of the article was an analysis and evaluation the degree of preparation for the implementation of this Regulation in the offices of local government administration in Poland and Republic of Lithuania. As part of the work on the article, a research was conducted using the Computer Aided Web Interview (CAWI) method and data from 472 offices of self-government administration was collected. The results of the research were subjected to statistical analysis using the Mann-Whitney U Test. On the basis of the data the process of implementing changes resulting from the GDPR was assessed and some significant problems in the implementation of these changes were identified.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 129.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 169.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Addis, M.C., Kutar, M.: The General Data Protection Regulation (GDPR), emerging technologies and UK organisations: awareness, implementation and readiness. UK Academy for Information Systems Conference Proceedings 29 (2018). https://aisel.aisnet.org/ukais2018/2

  2. Becker, J., Niehaves, B., Poeppelbuss, J., Simons, A.: Maturity models in IS research. In: 18th European Conference on Information Systems, ECIS (2010)

    Google Scholar 

  3. Corder, G.W.: Nonparametric Statistics for Non-statisticians: A Step-by-Step Approach. Wiley, New York (2009)

    Book  Google Scholar 

  4. Deloitte Legal: The GDPR: six months after implementation practitioner perspectives. https://www2.deloitte.com/bg/en/pages/legal/articles/gdpr-six-months-after-implementation-2018.html#. Accessed 08 July 2019

  5. European Committee of the Regions, Division of Powers. https://portal.cor.europa.eu/divisionpowers/Pages/Lithuania-Introduction.aspx. Accessed 15 Apr 2019

  6. Finocchiaro, G.: GDPR implementation series ∙ Italy: the legislative procedure for national harmonisation with the GDPR. Eur. Data Prot. Law Rev. 4(4), 496–499 (2018). https://doi.org/10.21552/edpl/2018/4/12

    Article  Google Scholar 

  7. Gellert, R.: Understanding the notion of risk in the General Data Protection Regulation. Comput. Law Secur. Rev. 34(2), 279–288 (2018)

    Article  MathSciNet  Google Scholar 

  8. Giurgiu, A.: GDPR implementation series ∙ Luxembourg: reshaping the national context to adjust to the GDPR. Eur. Data Prot. Law Rev. 3, 372–375 (2017). https://doi.org/10.21552/edpl/2017/3/11

    Article  Google Scholar 

  9. Główny Urząd Statystyczny, Liczba jednostek podziału terytorialnego kraju (eTERYT). http://eteryt.stat.gov.pl/eteryt/raporty/WebRaportZestawienie.aspx. Accessed 15 Apr 2019

  10. Hoofnagle, C.J., Sloot, B., Borgesius, F.Z.: The European Union General Data Protection Regulation: what it is and what it means. Inf. Commun. Technol. Law 28(1), 65–98 (2019)

    Article  Google Scholar 

  11. Iannopollo, E.: The five milestones to GDPR success, Forrester, 25 April 2017. https://interwork.com/wp-content/uploads/2018/03/The-Five-Milestones-To-GDPR-Success.pdf. Accessed 08 July 2019

  12. IBM Corporation: IBM’s Journey to GDPR Readiness. https://www.ibm.com/downloads/cas/V2B2VBXY. Accessed 08 July 2019

  13. IBM: IBM Pathways for GDPR Readiness. https://www.ibm.com/downloads/cas/QE2NL4GP. Accessed 08 July 2019

  14. Korpisaari, P.: GDPR implementation series ∙ Finland: a brief overview of the GDPR implementation. Eur. Data Prot. Law Rev. 5(2), 232–237 (2019). https://doi.org/10.21552/edpl/2019/2/13

    Article  Google Scholar 

  15. KPMG, GDPR Discovery and Maturity Assessment. https://assets.kpmg/content/dam/kpmg/xx/pdf/2018/03/gdpr-discovery-maturity.pdf. Accessed 08 July 2019

  16. Krystlik, J.: With GDPR, preparation is everything. Comput. Fraud Secur. 2017(6), 5–8 (2017)

    Article  Google Scholar 

  17. Lisiak-Felicka, D., Szmit, M., Szmit, A.: The assessment of GDPR readiness for local government administration in Poland. In: Wilimowska, Z., Borzemski, L., Świątek, J. (eds.) Information Systems Architecture and Technology: Proceedings of 39th International Conference on Information Systems Architecture and Technology – ISAT 2018. Advances in Intelligent Systems and Computing, vol. 854, pp. 417–426. Springer, Cham (2018)

    Google Scholar 

  18. Lisiak-Felicka, D., Szmit, M.: Cyberbezpieczeństwo administracji publicznej w Polsce. Wybrane zagadnienia, European Association for Security, Kraków 2016, pp. 36–37 (2016)

    Google Scholar 

  19. Lopes, I.M., Guarda, T., Oliveira, P.: EU General Data Protection Regulation implementation: an institutional theory view. In: Rocha, Á., Adeli, H., Reis, L., Costanzo, S. (eds.) New Knowledge in Information Systems and Technologies. WorldCIST 2019. Advances in Intelligent Systems and Computing, vol. 930, pp. 383–393. Springer, Cham (2019)

    Google Scholar 

  20. Mc Cullagh, K., Tambou, O., Bourton, S.: National adaptations of the GDPR. https://blogdroiteuropeen.files.wordpress.com/2019/02/national-adaptations-of-the-gdpr-final-version-27-february-1.pdf. Accessed 08 July 2019

  21. McSweeney, A.: GDPR - context, principles, implementation, operation, data governance, data ethics and impact on outsourcing. In: Warwick Legal Network Conference (2019)

    Google Scholar 

  22. Mettler, T.: Maturity assessment models: a design science research approach. Int. J. Soc. Syst. Sci. 3(1/2) (2011)

    Article  Google Scholar 

  23. Ministerstwo Spraw Zagranicznych, Informator ekonomiczny. https://informatorekonomiczny.msz.gov.pl/pl/europa/litwa/. Accessed 15 Apr 2019

  24. Official Statistics Portal, Administrative Territorial Division. https://osp.stat.gov.lt/regionine-statistika-pagal-statistikos-sritis. Accessed 15 Apr 2019

  25. Pandit, H.J., O’Sullivan, D., Lewis, D.: Queryable provenance metadata for GDPR compliance. In: Fensel, A., de Boer, V., Pellegrini, T., Kiesling, E., Haslhofer, B., Hollink, L., Schindler, A.: Proceedings of the 14th International Conference on Semantic Systems, Vienna, Austria, 10–13 September 2018, vol. 137, pp. 262–268 (2018). https://doi.org/10.1016/j.procs.2018.09.026

    Article  Google Scholar 

  26. Polkowski, Z.: The method of implementing the General Data Protection Regulation in business and administration. In: Proceedings of the 10th International Conference on Electronics, Computers and Artificial Intelligence, ECAI 2018 (2018)

    Google Scholar 

  27. Privacy Culture Ltd.: The GDPR maturity framework. https://iapp.org/media/pdf/resource_center/PrivacyCulture_GDPR_Maturity_Framework.pdf. Accessed 08 July 2019

  28. Proença, D.: Methods and techniques for maturity assessment. In: 11th Iberian Conference on Information Systems and Technologies (CISTI), pp. 1–4 (2016). https://doi.org/10.1109/cisti.2016.7521483

  29. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

    Google Scholar 

  30. Tikkinen-Piri, C., Rohunen, A., Markkula, J.: EU General Data Protection Regulation: changes and implications for personal data collecting companies. Comput. Law Secur. Rev. 34(1), 134–153 (2018)

    Article  Google Scholar 

  31. Ustawa z 24 lipca 1998 r. o wprowadzeniu zasadniczego trójstopniowego podziału terytorialnego państwa (Dz. U. z 1998 r. Nr 96, poz. 603)

    Google Scholar 

  32. Ustawa z 5 czerwca 1998 r. o samorządzie powiatowym (Dz. U. z 2001 Nr 142, poz. 1592, z późn. zm.)

    Google Scholar 

  33. Ustawa z 5 czerwca 1998 r. o samorządzie województwa (Dz. U. z 2001 r. Nr 142, poz. 1590 z późn. zm.)

    Google Scholar 

  34. Ustawa z 8 marca 1990 r. o samorządzie gminnym, (Dz. U. z 2001, nr 142, poz. 1591, z późn. zm.)

    Google Scholar 

  35. Voight, P., von dem Bussche, A.: The EU General Data Protection Regulation (GDPR). A Practical Guide. Springer (2017). https://doi.org/10.1007/978-3-319-57959-7

    Book  Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Dominika Lisiak-Felicka .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2020 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Lisiak-Felicka, D., Szmit, M., Szmit, A., Vaičiūnienė, J. (2020). GDPR Implementation in Local Government Administration in Poland and Republic of Lithuania. In: Wilimowska, Z., Borzemski, L., Świątek, J. (eds) Information Systems Architecture and Technology: Proceedings of 40th Anniversary International Conference on Information Systems Architecture and Technology – ISAT 2019. ISAT 2019. Advances in Intelligent Systems and Computing, vol 1052. Springer, Cham. https://doi.org/10.1007/978-3-030-30443-0_5

Download citation

Publish with us

Policies and ethics