In a scientific journal, publishing authors’ names (and co-authors) is standard practice: it supports citations, identification of scholarly output in library systems and databases, and institutional reporting. This is not inherently incompatible with the GDPR where processing is lawful — typically under Art. 6(1)(b) (publishing services and manuscript workflow), (a) (consent) or (f) (legitimate interests in documenting and disseminating research in the appropriate form), together with verification, minimisation and the journal’s rules.
Special-category data, including health information in published material, is governed by Art. 9 GDPR and editorial/ethical rules (including anonymisation where required). Peer review is confidential; reviewers’ identifying data are not published under anonymous or double-anonymous models as applicable.
In Poland, the President of the Personal Data Protection Office (UODO) supervises GDPR application (the former “GIODO” label refers to an earlier setup). Publishing surnames in a scholarly context, in compliance with law and policy, follows widely accepted practice; data subjects retain their rights and complaint options as described under «Processors, retention, rights, contact».