Legislation
Data Protection Act (Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych) has implemented the GDPR and specifies the norms serving the protection of personal data in Poland. Its text (in Polish) is available at http://prawo.sejm.gov.pl/isap.nsf/download.xsp/WDU20180001000/T/D20181000L.pdf.
Guidelines of the supervisory authorities
Guidelines (in Polish) of the supervisory authorities are available on the official website of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych): https://www.uodo.gov.pl/.
Archived guidance by the former supervisory authority (SA), the General Inspector for Personal Data Protection (Generalny Inspektor Ochrony Danych Osobowych, GIODO), may be found at https://giodo.gov.pl/.