Basics · 6 min read

Do you need a GDPR clause on a Polish CV?

Poland's data protection authority says a consent clause on a CV is not needed for the current recruitment. When it does apply, and the wording to use.

The short answer

For the job you are applying to, generally not. Poland's data protection authority, UODO, says in its guide for employers that the established practice of putting a consent clause for recruitment in a CV or cover letter "nie jest właściwa": it is not appropriate. An employer may process the personal data the Labour Code lists, such as your name, date of birth, contact details, education, qualifications and work history, to take steps towards a contract with you, without your consent. A clause matters in two cases: if you want the employer to keep your CV for future recruitments, and if your CV contains personal data beyond the Labour Code's list. If the job advert asks for a specific clause, add the one it asks for.

On sourcing: the legal points below come from UODO's guide for employers (October 2018) and the official consolidated text of the Polish Labour Code (2026). The guide predates the 2019 amendment that added Article 22¹a, so where the two differ, this page follows the current statute. This is general information, not legal advice.

What the Labour Code lets an employer ask a candidate for

Article 22¹ § 1 of the Labour Code lists the personal data an employer asks of a person applying for a job:

  1. first name (or names) and surname;
  2. date of birth;
  3. the contact details the candidate gives;
  4. education;
  5. professional qualifications;
  6. previous employment history.

The last three are asked for only when they are necessary for the type of work or the position. Beyond the list, an employer asks for other personal data only when that is necessary to exercise a right or meet an obligation under the law (§ 4).

The current list does not include a home address or your parents' names, which some older templates and guides still mention. Those items come from earlier versions of the rules.

The wording

UODO's guide gives sample sentences. In Polish, with an English translation:

Purpose UODO's sample (Polish) In English
Future recruitments "Wyrażam zgodę na przetwarzanie danych w celu wykorzystania ich w kolejnych naborach prowadzonych przez X przez okres najbliższych 6 miesięcy." I consent to the processing of my data for use in further recruitments run by X over the next 6 months.
Special categories of data "Wyrażam zgodę na przetwarzanie szczególnych kategorii danych, o których mowa w art. 9 ust. 1 RODO, które zamieściłem w liście motywacyjnym oraz załączonych do niego dokumentach." I consent to the processing of the special categories of data referred to in Article 9(1) of the GDPR that I have included in my cover letter and the documents attached to it.

Replace X with the employer's name. RODO is the Polish name for the GDPR. The verb "zamieściłem" is the masculine form; a woman writes "zamieściłam".

Job boards publish longer versions, including English ones, and some describe a clause as necessary on every CV. That is not UODO's position for the current recruitment. If an employer's advert gives its own wording, use that wording exactly.

Clause generator

Choose what the clause is for, then copy the result. For future recruitments and special categories of data, the generator uses UODO's samples from the table above. For an advert that asks for a clause without giving its wording, it uses the sentence CVder's editor suggests for a GDPR consent section.

From the people who built this

See what your resume is missing — before you apply.

CVder reads the job posting and your resume side by side, then shows the exact terms to add and the formatting a parser would trip on.

Check your match → Free · no card · 7 exports

What to do in practice

  1. Read the advert first. If it asks for a clause, copy the one it gives.
  2. If it asks for nothing, a clause for the current recruitment is not needed. Adding the future-recruitment sentence is your choice.
  3. Keep personal data to what the role needs: the Labour Code's list covers name, date of birth, contact details, education, qualifications and work history.
  4. Put the clause at the foot of the CV, in the same language as the CV, as the last line.
TL;DRThe short version
  • UODO calls a recruitment consent clause on a CV "not appropriate" for the current recruitment; the employer can process the Labour Code's list of data without consent.
  • Consent matters for future recruitments and for data beyond that list.
  • Refusing consent cannot be held against you (Labour Code Article 22¹a § 2).
  • If the advert asks for a clause, use the advert's wording.
Sources
  • UODO (Urząd Ochrony Danych Osobowych) — Ochrona danych osobowych w miejscu pracy. Poradnik dla pracodawców, October 2018 (the clause in a CV "nie jest właściwa"; future recruitments; sample clauses). https://uodo.gov.pl/pl/file/4933
  • Kancelaria Sejmu, ISAP — Kodeks pracy, consolidated text, Dz. U. 2026 poz. 1245 (Articles 22¹ and 22¹a). https://isap.sejm.gov.pl/isap.nsf/download.xsp/WDU19740240141/U/D19740141Lj.pdf
  • gov.pl, Ministry of Family, Labour and Social Policy — Nawiązanie stosunku pracy (the data an employer may ask a candidate for). https://www.gov.pl/web/rodzina/nawiazanie-stosunku-pracy
  • Pracuj.pl (a commercial job board) — Klauzula RODO do CV. Wzór zgody na przetwarzanie danych osobowych, 29 October 2024 (longer Polish and English versions; describes a clause as necessary on every CV). https://cv.pracuj.pl/poradniki/klauzula-o-przetwarzaniu-danych-w-cv
FAQ

Quick answers

Not for the job you are applying to. UODO's guide for employers says putting a consent clause for recruitment in a CV is not appropriate, because the employer can process the data the Labour Code lists without consent. Consent is needed if you want to be considered for future recruitments, or if the CV contains data beyond that list.

RODO is the Polish abbreviation for the GDPR. The clause is a consent sentence some candidates add at the foot of a CV, allowing the employer to process their personal data.

In the language of your CV and the advert. If the advert gives its own clause, use it as written.

We found no authoritative source saying an employer may. The Labour Code says refusing consent to the processing of data beyond its list cannot be a reason to refuse employment.

Only with your consent, according to UODO's guide. Add the future-recruitment sentence if you want that.

Try it on your own resume

See your resume’s match score in under a minute.

Paste a job posting, upload your resume, and CVder shows your match, the keywords you’re missing, and what to fix — before you hit apply. No card, no countdown timers.

✓ 7 free exports · works with the ATS recruiters actually use
Keep reading