Due to the changing legal environment for data processing organizations, it seems justified to try to answer the question whether this change in the environment requires the reconstruction of IT systems and applications controlling and supporting the actual implementation of the rights of data subjects. Considering this research question, it is necessary to refer to the legal literature in the field of European and Polish data protection law. It is also necessary to analyze the changing environment, which has a major impact on the pace of evolution within the issues and theses discussed in this article. The applied methodology takes into account market research methods to the extent necessary to indicate the category of IT solutions that can meet the individual requirements of the GDPR, while the study of the legal literature is necessary, but may not give satisfactory results due to the short period of their use. The research results, as well as the legal analysis, focus on typical legal issues, not on praxeological or economic issues. It is assumed that based on the analysis of solutions available on the IT market and legal analysis in the context of the basic requirements for personal data administrators, it will be possible to formulate certain directive safeguards that will contribute to the improvement of compliance processes in the field of personal data, taking into account legal and economic approaches appropriate to grades.