photo: InfoWire.plWhen it comes to sending press releases, "two legal grounds apply: consent and the legitimate interest of the data controller. One might wonder which is safer."
Consent and Data Processing Agreement
- For now, I believe that consent is the safer option, says Michał Sztąberek, President of iSecure, in an interview with infoWire.pl. - Press releases are often classified as commercial information sent electronically, and the Law on Electronic Services requires consent in such cases.
What if we send a request for permission to send press releases but receive no response? Unfortunately, in this situation, silence means no consent.
If journalists` publicly available data, such as emails seen in a byline under an article, are used, can we send an email that fulfills the data processing information obligation?
- This is publicly available information, meaning it was provided by the person themselves, so we can use it to contact that journalist. But we must remember that if we send a marketing message electronically, we still need to obtain their consent and fulfill the information obligation, explains Dr. Maciej Kawecki, coordinator of the data protection reform, Director of the Data Management Department at the Ministry of Digitization in an interview with InfoWire.pl. - But we also shouldn’t go to extremes. If someone publishes their email address under an article, it means they expect contact. So, if we want to ask a question specifically related to that article, there’s no issue using that email address.
However, if the article is about a new phone model, and we work for a manufacturer who also makes phones and want to send information about a similar model, Dr. Kawecki believes this qualifies as marketing information. If sent electronically, we must first request consent before using that email for marketing purposes.
Journalists Unlikely to Subscribe to Newsletters
After May 25, will some companies stop emailing journalists if they don’t have documented consent for such communication? Could this lead to an increase in journalists subscribing to newsletters from press services or news agencies?
Do you trust AI-created news? You might have NO CHOICE 👇
- I don’t think journalists will be more willing to subscribe to newsletters. Maybe a little more. I’m not saying there will be no interest at all, but it won’t be significant because those who want to subscribe to newsletters have already done so, says Piotr Wardziak, author of the blog GospodarkaPoProstu.pl, in an interview with InfoWire.pl. - I don’t think they’ll suddenly want to "sign up" for new newsletters unless they notice a clear lack of correspondence on a subject they’re interested in, like finance, banking, or personal finance. If they find they’re receiving fewer updates in a particular field and remember that certain companies provided valuable information, they may order that company’s newsletter.
According to Piotr Wardziak, the opposite is more likely. Companies will approach journalists saying, "We used to send emails; now we’ll send newsletters, please subscribe." Journalists expect proactive communication from companies; they won’t actively seek newsletters to subscribe to.
PR Agencies and GDPR
Sometimes, a company has its own journalist database, which it decides to share with a PR agency to send press releases. In such cases, it’s best for the data controller (company) to sign a data processing agreement with the processor (agency).
If there are any violations in data processing by the agency, its legal responsibility toward the client would be based on GDPR provisions, the company’s instructions, and the terms of the data processing agreement.
Will GDPR require amendments to contracts with PR agencies? Paweł Soproniuk, a partner at PR agency Neuron, told InfoWire.pl he expects the process of adapting client contracts with public relations agencies to GDPR to be unavoidable.
- Everyone is preparing for this. These are very extensive processes. We work for large companies, so GDPR issues usually affect not only communication departments but many others, like marketing, especially direct marketing, explains Soproniuk. - Work on this is ongoing.
COMMERCIAL BREAK
New articles in section Law in media
Blood in the world of media. The IFJ report on journalists killed in 2025
KFi
The International Federation of Journalists has published a shocking document titled 2025 Killed List Report. The increase in violence against media workers is visible all over the world. Last year, 128 people lost their lives. They die because of their courage in revealing facts that authorities try to hide.
Ai in disinformation. Operation Matryoshka and personalization of fakes
Anna Mikołajczyk-Kłębek
The increasing use of artificial intelligence to generate false content and profiled disinformation are trends that will shape the disinformation landscape in the coming years, according to Dr. Wojciech Kotowicz, an expert from the University of Warmia and Mazury (UWM) in Olsztyn, Poland.
Dietary supplement ads in Poland. Who keeps influencers in check?
Newseria, KFi
One in three Polish internet users considers influencer recommendations when deciding on medicines and dietary supplements. Although promotion of such products is regulated, there are still cases of advertising that skirt the law.
See articles on a similar topic:
How to Detect Pegasus on Your Phone and Protect Against Spying
RINF
The nature of spyware is to remain as hidden as possible, making it difficult to detect on a device. However, some mechanisms can help verify if a smartphone has been compromised.
Online Hate in Numbers. What Do We Think About Offensive Comments?
KFi
Nearly 70% of adults have encountered online hate. The group most affected includes individuals aged 18-24, with 81% reporting exposure to hateful content - according to the report "Hate on the Internet," prepared by the polish Foundation "W zgodzie ze sobą" in cooperation with Maison&Partners and the Ariadna research panel.
Cyberwarfare on the Internet. The ESET Report
KF
Governments, corporations, and even the education sector are becoming targets of advanced cyber attacks. The report for the period from October 2023 to March 2024, prepared by ESET, sheds light on the intensification of activities by Advanced Persistent Threat (APT) groups, which conduct espionage, sabotage, and destabilization operations in key sectors on behalf of states.
GDPR and Press Releases. Is Journalists' Consent Required?
BARD
After May 24, will it be possible to send press releases to journalists without concern, or is it safer to obtain their consent? Industry experts and lawyers explained GDPR regulations on this topic to infoWire.pl news agency journalists.





























