Biuro Informacji Kredytowej S.A. was formed by the banks and Związek Banków Polskich [Polish Banks Association] pursuant to Art. 105 section 4 of the Act of 29 August 1997 The Banking Law (Journal of Laws No. 140 item 939 as amended ) which enabled the banks acting together with the bank economic chamber to establish an organisation authorised to collect, process and share the information constituting banks secrets with the banks in so far as this information is required in connection with the performance of banking activities and also with other organisations statutorily authorised to grant credits, i.e. information about the financial obligations and turnovers on bank accounts in so far as this information is required in connection with the credit and loan lending and providing bank guarantees and security.

Information collected and shared by Biuro Informacji Kredytowej S.A., headquartered in Warsaw, includes the personal data protected under the  Personal Data Protection Act of 29 August  1997 (Journal of Laws No. 133 item 883 as amended). Pursuant to the provisions of this Act, the processing of personal data is possible, among other things also when the provisions of the prevailing law so permit. Such a particular statutory authorisation for Biuro Informacji Kredytowej S.A. to process the personal data (including the data which constitute bank secrets) is Art. 105 section 4 of the Act of 29 August 1997 - The Banking Law (Journal of Laws No. 140 item 939 as amended).

The rights of the bank client and duties of Biuro Informacji Kredytowej S.A. are laid down in the “Regulations of information sharing on the processing of Personal Data in the Biuro Informacji Kredytowej S.A. data set.”

The taking effect of the Act on Sharing Economic Information made the establishment of cooperation with the newly formed Economic Information Bureaux possible and enabled to expand the informational content of Credit Reports with the data collected by these Bureaux.

Further, Biuro Informacji Kredytowej S.A. as an organisation whose operation is governed by the Banking Law, may, pursuant to Art. 68 section 4 of the Act on Electronic Payment Instruments, collect and share information concerning the holders of the electronic payment instruments with to their issuers.