Abstract
The idea of self-regulation is one the most interesting concepts adopted in the GDPR. The concept itself is not new, though it is the first time that the legislative act precisely governs the content and enforcement of its use. The article outlines first reservations and problems arising from adoption of voluntary codes of conduct by controlled subjects under the Polish law and what advantages may ensue therefrom.