Abstract
The article discusses implementation of new duties connected with ensuring compliance with the personal data protection regulations by entities obligated by the provisions of the Personal Data Protection Act which have not appointed an information security administrator and will perform the relevant duties on their own.