| In Principle

It has generally been assumed that sectors like finance, energy and transport are most at risk for attacks by cyber criminals. But according to forecasts by Europol, in 2017 sensitive medical data of patients stored in poorly secured hospital systems will be in the front lines of cyberattacks. Blocking of the IT system or leaking of patient data can disrupt the work of a medical unit to such a degree that it is unable to treat patients until it pays a heavy ransom to cyber criminals. Is it possible to protect against such a scenario?

With the fight against economic crime, criminal law increasingly intrudes into the sphere of business. Under proposed legislation, an enterprise used to commit an offence could be confiscated.

On the last day of October a notice was published on the Sejm website on filing of a parliamentarian’s bill to amend the Personal Income Tax Act and the Corporate Income Tax Act. The changes to the CIT Act, to enter into force on 1 January 2017, would eliminate the exemption from corporate income tax for closed-end investment funds (FIZ). This exemption has been used as a major instrument for tax optimisation, for example for entities involved in trading of debt and real property, and for taxpayers seeking protection against rules governing controlled foreign corporations (CFC).

Proposed standards for strong authentication stir numerous controversies.

Poland’s National Appeal Chamber (KIO) issued an order on 5 September 2016 of great practical significance, applying new procurement rules on the permissibility of appeals by contractors interested in bidding for public contracts below the EU thresholds.

On 12 July 2016 the European Commission adopted a decision under Directive 95/46/EC on the adequacy of the protection provided by the EU–US Privacy Shield, confirming that entities operating in the United States that meet the conditions specified in the Privacy Shield programme will be deemed to provide an adequate level of protection of personal data. This means that it will be permissible to forward personal data to such entities without the need to apply other mechanisms to ensure adequate protection of the data, such as binding corporate rules or approval of the data protection authority.

Consumers and producers alike complain that labels on food products are hard to understand. Could the solution for crowding in too much information be an electronic label where data of interest to the consumer could be checked using a smartphone app?

An interview with Prof. Małgorzata Korzycka of the Department of Agricultural Law at the Faculty of Law and Administration of the University of Warsaw on barriers to free movement of goods on the EU food market, and the growing role of private food law.

The Act on Trust Services and Electronic Identification is intended to adapt Polish law to the EU’s eIDAS Regulation. Among other things, it repeals the Electronic Signature Act. The new act is part of a broad trend toward creation of a new regulatory framework for digital commerce.

A real threat to repayment of credit taken out to build wind farms has arisen. It is a problem for investors and banks. Will it launch a wave of arbitration claims against the Polish Treasury?

Based on a recent judgment of the Court of Justice of the European Union, the provisions of the Polish Public Procurement Law permitting reliance on third-party capacity to demonstrate fulfilment of selection criteria are consistent with EU law.

The issue of reprivatisation is currently being presented through the prism of numerous controversial aspects of restitution processes. This distorts the picture of reprivatisation, which in any event is a limited phenomenon in Poland.