Abuse Inside the Polish Patent Office (UPRP) - Part III: Data Protection Failures, Just Like at the European Patent Office (EPO)
Justyn Łojko finished university 20 years ago and he's now in charge of "IT" (buzzword) at UPRP. In Part I we mentioned a public report (in Polish) and in Part II we highlighted the similarities between what's happening at UPRP and the EPO, where data breaches were common and privacy violations were the norm. Any mentions of "data protection" were lip service and cover-up attempts, painting the Office as the exact opposite of what it really was. Whenever EPO management spoke of "privacy" or "data protection" it basically meant reasons to silence staff which spoke about wrongdoing. It also misused those terms to justify not obeying orders from judges and not allowing staff to communicate with one another.
In the case of UPRP, some of the same things can be seen, as covered in the report.
A key fact raised in the report, we're told, is the insufficient protection of personal data at UPRP. Despite serving as Director of the IT Department since 2020, Justyn Łojko failed to implement effective data security measures. The report notes operational lapses such as non-transparent data processing systems, delays in publishing information, and vulnerabilities potentially affecting the privacy of UPRP staff.
Just less than a decade ago we showed that the EPO had illegally shared staff data with third parties. Of course the people who did this weren't held accountable. They didn't get punished and will never be punished. They're above the law. They assume that they themselves are "the law" and anyone who speaks about them is "breaking the law". █