Poland: UODO issues statement on information requirement regarding health insurance applications
The Polish data protection authority issued, on 25 May 2020, a statement ('the Statement') on the exemption of employees to fulfil their information obligation under Article 14 of the General Data Protection Regulation (EU) 2016/679) ('GDPR'), when employees report their family members for health insurance purposes. In particular, the Statement highlights that employees are exempt from complying with this obligation because the processing of data of a family member in a health insurance application is necessary to fulfil the legal obligation of the data controller, i.e. the employer, pursuant to Article 6(1)(c) of the GDPR, and the collection of this data is explicitly governed by the law of the Member State to which the controller is subject, which provides for appropriate measures to protect the legitimate interests of the data subject. Therefore, the exemption under Article 14(5)(c) of the GDPR, applies.
You can read the Statement, only available in Polish, here.