Firms To Watch: Data privacy and data protection

Data privacy and data protection in Poland

Andersen in Poland

Andersen in Poland is a fast-growing firm in the data privacy and protection space, handling a plethora of GDPR matters, with department head Magdalena Patryas focusing her practice on GDPR compliance audits and data breaches.

Kieszkowska Rutkowska Kolasinski Kancelaria Prawna sp. j.

Jointly led by Marcin Kolasiński and Michał Chodorek, the team at Kieszkowska Rutkowska Kolasinski Kancelaria Prawna sp. j. specialises in transactions within the life sciences and healthcare industry, involving various data protection issues related to the process of researching and developing products and services.

Principaux dossiers


Soltysinski Kawecki & Szlezak

Soltysinski Kawecki & Szlezak has strong expertise on matters related to processing personal data pertaining to AI and cloud computing. Department head Agata Szeliga is an expert in new technologies and personal data protection, specialising inlegal advisory services related to data processing – particularly in the financial sector.

Principaux dossiers


Bird & Bird Koremba, Dziedzic i Wspólnicy sp.k.

Bird & Bird Koremba, Dziedzic i Wspólnicy sp.k.'s expertise spans multi-jurisdictional data breaches, regulatory proceedings, data transfers and cookie compliance. The team is capable of handling complex data protection cases surrounding potential violations of the EU GDPR, AI Act and other EU digital regulations. Izabela Kowalczuk-Pakuła leads the practice, with an exclusive focus on data laws including privacy, cybersecurity and AI. Her acumen also lies in advising on marketing services, blockchain/DLT and whistleblowing schemes. Marta Kwiatkowska-Cylke provides counsel to clients on regulatory requirements, proceedings before the Polish supervisory authority and contentious matters.

Responsables de la pratique:

Izabela Kowalczuk-Pakuła


Les références

‘I consider the team to be one of the strongest in the market. They combine outstanding legal expertise with a deep understanding of how data protection issues impact business operations. Their advice is always clear, pragmatic, and tailored to our needs. What really distinguishes them is their accessibility, responsiveness, and collaborative spirit.’

‘Great team.’

‘Izabela Kowalczuk-Pakuła is one of the leading figures and a great pleasure working with.’

Principaux clients

Samba TV


Michael Page


Principaux dossiers


  • Providing on-going support to Samba TV, a US software developer providing personalised TV experience and tailored, preference-based ads.
  • Providing ongoing support to Michael Page, a global recruitment agency, and its Polish branch in negotiating contracts with their clients.

CMS

CMS advises across the full spectrum of matters including IT, cloud, telecoms, media, e-commerce, and cybersecurity. The team is known for representing clients before key regulators, including the Polish Data Protection Authority, the Office of Electronic Communications and the Financial Supervision Authority. Tomasz Koryzma has significant expertise in privacy, data protection and cybersecurity, regularly advising multinational clients on the full spectrum of data regulation challenges. Damian Karwala is recognised for his work across data protection, cybersecurity, IT law and digital transformation, acting for clients such as banks, insurers and telecoms.

Responsables de la pratique:

Tomasz Koryzma


Autres avocats clés:

Damian Karwala


Les références

‘CMS has a group of very professional privacy law lawyers who are very proactive and responsive. They are an experts on privacy regulations and have good understanding of DPA expectations.’

‘The team is open, approachable and genuinely focused on the client’s needs. I appreciate their collaborative way of working and their practical approach to solving problems.’

‘The team I work with are outstanding specialists in the field of data protection in the country, particularly Damian Karwala. What sets him apart from his competitors is not only his deep expertise, but also his open and understanding approach. I especially value his ability to explain complex issues clearly and to remain approachable and supportive throughout the process.’

Principaux clients

Lufthansa Group


Iron Mountain


Visa


Primark


Manage Now


BEC Financial Technologies


Bausch & Lomb Poland sp. z o.o.


Better Energy


Ubezpieczenia Pocztowe


Diageo Polska sp. z o.o.


Principaux dossiers


  • Advised the association representing all Polish banks on GDPR compliance and local privacy regulations, particularly in relation to reporting obligations to the National Bank of Poland.
  • Advising Visa, providing daily support on data protection matters and advising across their operations.

Dentons

Dentons‘ data privacy and data protection offering spans across diverse sectors, notably, automotive, digital advertising and IT. The team works across the full spectrum of services in connection with privacy, data protection and cybersecurity and other related matters such as data classification and management, data transfers and security measures and policies. Practice head Karol Laskowski advises multinational and national corporations on compliance with GDPR, ePrivacy and other regulatory acts at the intersection of data and technology. Paweł Gruszecki brings expertise in data protection, data privacy and cybersecurity. Aleksandra Danielewicz handles the managing of personal data breaches.

Responsables de la pratique:

Karol Laskowski


Principaux clients

Tata Communications Group


Principaux dossiers


  • Advising a corporate in data, applications and services for insurance and automotive sectors on data protection and privacy matters, primarily in the EU and UK.
  • Advising a financial institution on aligning its documentation and procedures with European cybersecurity and operational resilience frameworks, specifically the EU’s NIS2 Directive and the Digital Operational Resilience Act (DORA).
  • Advised an automotive brand on its regulatory response to a major data breach, representing the client before the Polish Data Protection Authority.

DLA Piper Gizinski Kycia sp.k.

DLA Piper Gizinski Kycia sp.k. assists on a range of IT and data privacy law matters with extensive experience in advising clients from regulated sectors, including banking, insurance, pharmaceuticals and media. Notably, the team advises on cross-border data transfers, data security breaches, profiling and cloud computing. Ewa Kurowska-Tober advises on legal issues related to data protection, advanced technologies as well as cybersecurity and often represents clients in proceedings before the Polish Data Protection Authority and the Office of Electronic Communications. Piotr Czulak advises clients from several key sectors, including telecoms, banking, energy and pharmaceuticals, in matters related to IT services, regulated outsourcing, telecoms regulatory and personal data protection.

Responsables de la pratique:

Ewa Kurowska-Tober


Autres avocats clés:

Piotr Czula


Les références

‘Ewa Kurowska-Tober makes this practice very unique. She is great experienced data privacy and AI lawyer. She is always professional and very knowledgeable in regulatory matters. I appreciate her attitude towards the client and her openness. Ewa has an extraordinary ability to present difficult issues in a transparent way for the recipients. Ewa brings together great experts in her team.’

‘Individual approach to the client needs, looking and finding solutions in complicated issues.’

‘DLA Piper Gizinski Kycia sp.k. distinguishes itself through its strategic blend of international reach and local precision. The team is deeply embedded in the global DLA Piper network, allowing it to offer seamless cross-border support while maintaining a strong understanding of Polish regulatory frameworks and business culture. Their ability to anticipate regulatory trends and translate them into actionable guidance is a key differentiator.’

Principaux clients

Qemetica


Health Technologies


Towarzystwo Szkół Zjednoczonego Świata i


Fundacja TUS


Ermax A/S


CLM Holdco, LP


Vastint Poland


Cushman & Wakefield Polska


Allegro (with Cinven, Permira, and Mid Europa Partners as the majority owners)


Ardagh


Amplifon


AUDI


Axalta


BASF


BNP Paribas


BorgWarner


Capgemini


Cognizant


Credit Suisse


DataTag


Generali


HSBC


ING Bank


LEGO


LEVI Strauss


mBank


Michelin


Moroccan Oil


Dell


PEKAO SA


Philips


Prada


PZU


Rituals


Vodafone


Żabka (a CVC Partners company)


Disney


Orange


Standard Chartered Bank


RobotecAI


Dell


Principaux dossiers


  • Representing mBank S.A in proceedings before the District Administrative Court.
  • Provided Generali Polska with comprehensive advice related to privacy matters, including advice on group marketing efforts based on shared personal data, cookies and tracking technologies and potential cooperation with external information bureaus.
  • Assisted Żabka Polska with a project involving a third-party provider related to services based on big-data analysis and targeted marketing.

Rymarz Zdort Maruta

Rymarz Zdort Maruta's work covers full-scale implementation projects, GDPR audits, cross-border data transfer projects and regulatory risk assessments. The team is regularly involved in cases that require acting across advisory, compliance and litigation contexts advice focusing on topics such as artificial intelligence, digital marketing models, e-commerce and platform regulations. Marcin Serafin handles GDPR compliance and advisory projects across sectors such as retail, healthcare, infrastructure and tech. Pawel Tobiczyk is known for his work on the development of internal data protection policies while Piotr Kalina supports IT companies and entities offering AI services or using artificial intelligence systems, both in Poland and abroad. Monika Gieraltowska-Karpowicz‘s particular focus is on matters related to the entrustment of personal data processing and audits of data processors.

Responsables de la pratique:

Marcin Serafin; Pawel Tobiczyk; Piotr Kalina


Autres avocats clés:

Monika Gieraltowska-Karpowicz


Les références

‘I would like to emphasise that I have had the privilege of working with individuals who consistently demonstrate the highest professional standards while also bringing genuine commitment and a collaborative mindset to every engagement.’

‘I particularly value their openness in communication, willingness to share knowledge, and reliability in execution. Our partners and associates distinguish themselves by fostering an atmosphere of trust and inspiration, which ultimately drives long-term success and creates tangible value that extends well beyond the immediate outcomes of our projects.’

‘The team has expertise in new technologies, fintech and artificial intelligence, combining many areas of technology and law to increase the effectiveness and precision of the assistance provided by the law firm.’

Principaux clients

Zabka Polska sp. z o.o.


Polskie Sieci Elektroenergetyczne S.A.


Mercedes-Benz Leasing sp. z o.o.


Makro Cash&Carry


Media Saturn Holding Polska sp. z o.o.


Grupa Maspex sp. z o.o.


Morele.net


Link4


Principaux dossiers


  • Serving as the data protection officer and deputy DPO for Polskie Sieci Elektroenergetyczne S.A., the operator of the National Power Grid in Poland.
  • Represented Link4 in successfully challenging a GDPR enforcement decision before the Voivodeship Administrative Court in Warsaw, resulting in the revocation of a fine imposed by the Polish Data Protection Authority.
  • Representing Getin Noble Bank in bankruptcy in ongoing proceedings before the Polish Data Protection Authority, including multiple individual complaint cases and regulatory engagement.

Traple Konarski Podrecki & Partners

Traple Konarski Podrecki & Partners represented clients in numerous proceedings before the Polish Data Protection Authority and in judicial and administrative proceedings concerning such issues as the right to be forgotten. Furthermore, the team has advised on projects, including AI systems, ad tech, cloud computing and big data. Grzegorz Sibiga specialises in personal data protection and other matters of administrative law, including legal protection of information, access to public information and the re-use of public sector information and data opening in the sector. Xawery Konarski has participated in the legislative work on a number of laws in the field of new technologies, alongside being an arbitrator for the Arbitration Court for Internet Domains at the PIIT. Dominika Nowak-Byrtek is a specialist in personal data protection and new technologies law.

Responsables de la pratique:

Grzegorz Sibiga; Xawery Konarski


Les références

‘TKP’s data protection practice stands out for its exceptional legal expertise, strategic insight, and hands-on approach to complex regulatory challenges. Led by Grzegorz Sibiga, a recognised authority in privacy and data protection law, the team consistently delivers high-quality, business-oriented solutions that help clients navigate evolving legal landscapes such as GDPR.

‘What sets this practice apart is its ability to manage high-stakes, multi-dimensional projects with precision and agility. Dominika Nowak, a key member of the team, brings deep operational knowledge and a proactive mindset that ensures seamless execution and client confidence. Together, they demonstrate a rare combination of academic excellence and practical experience.’

Principaux clients

Polskie Sieci Elektroenergnetyczne S.A


Henkel Polska sp. z o.o.


British American Tobacco Poland


Poczta Polska S.A.


City of Wrocław


Kaczmarski Group


Polpharma Biologics S.A.


Axpo Polska Sp. z o.o.


Mobilis Sp. z. o.o.


CANAL + Polska S.A


Polskie Sieci Elektroenergnetyczne S.A


Henkel Polska sp. z o.o.


British American Tobacco Poland


Poczta Polska S.A.


City of Wrocław


Kaczmarski Group


Polpharma Biologics S.A.


Axpo Polska Sp. z o.o.


Mobilis Sp. z. o.o.


CANAL + Polska S.A


Principaux dossiers


  • Representing Poczta Polska S.A. before the Voivodship Administrative Court in Warsaw, this  case challenges the decision of the Polish DPA imposing an administrative for GDPR violations.
  • Advised Polskie Sieci Elektroenergetyczne S.A. on its obligations under GDPR while acting as the Energy Market Information Operator.

Domanski Zakrzewski Palinka

Domanski Zakrzewski Palinka handles data transfers, data attacks and leaks as well as personal data flows in multinational groups. Bartosz Marcinkowski has participated in creating best data protection practices. Sylwia Kuca specialises in personal data protection and international data flows, working for clients in various sectors regarding the legal aspects of their operations involving data privacy and protection and works with the Polish Chamber of Information Technology and Telecommunications.

Responsables de la pratique:

Bartosz Marcinkowski


Les références

‘The team is highly responsive and handles all queries and needs quickly and efficiently. They are always available to discuss matters in detail and provide practical guidance.’

‘What sets the individuals we work with apart is their consistently practical and business-oriented approach, combined with deep legal expertise — particularly in the area of data protection. They are approachable, responsive, and always ready to discuss our questions in a way that is both clear and actionable.’ 

‘We have especially appreciated their understanding that legal compliance, especially in data protection, should support rather than obstruct business operations — a mindset that is not always common among competitors.’

Principaux dossiers


GP Partners Gawronski, Biernatowski Sp.K.

GP Partners Gawronski, Biernatowski Sp.K. handles the full spectrum of AI, IT and cloud computing matters. The practice also covers GDPR compliance audits and implementations, acting in complex data breach management situations and acting in proceedings before the President of the Polish Data Protection Office. Practice head Maciej Gawronski is a specialist in data protection, IT, cloud computing and cybersecurity.

Responsables de la pratique:

Maciej Gawroński


Les références

‘Expert knowledge at the highest level, honed over many years.’

‘Experts who skilfully combine knowledge of the legal environment with practical experience and an excellent understanding of business needs.’

‘Gawroński & Partners stands out on the Polish and European legal market as a truly pioneering practice combining top-tier legal expertise with cutting-edge technological and regulatory know-how.’

Principaux clients

PGNiG OD


PKO BP


Good Data Protection Standard


Polish Advertising Board


House-Med (upacjenta.pl)


Ringier Axel Springer Polska


Warsaw Stock Exchange


DnB Bank


Track-Tec


RSVPify


Trustonic


Medicover


Millennium Bank


OneTrust Data Guidance


Phono Media


Softnet


Softblue


EOS Poland


Wonga


Bank Gospodarstwa Krajowego


MDR Regulator


Medicover


ORM Trade


TMS Brokers S.A.


DPD Polska


ACP Global Forwarding


The Chancellery of the Polish Parliament


Unia Metropolii


HRK S.A.


PGE Systemy S.A.


Fieldfisher (US, UK, Germany)


DHI Polska sp. z o.o.


DOC4U sp. z o.o.


Master Film sp. z o.o.


PGNiG Termika S.A.


PKP Intercity S.A.


Sedivio S.A.


Fixtra P.S.A.


Millennium Goodie Sp. z o.o.


Softwebo Sp. z o.o.


Instinct Animations Ltd.


GoIT Polska Sp. z o.o.


Fundacja Serce Dla Maluszka


Aasa Polska Sp. z o.o.


Appercut Sp. z o.o.


AURUMARIS Sp. z o.o.


Business Wise Sp. z o.o.


ECMS Express, Inc.


Euro-net Sp. z o.o.


FERCHAU Poland Sp. z o.o.


Humanverse Sp. z o.o.


HubQuest Sp. z o.o.


Multikino S.A.


ZeroDot Sp. z o.o.


Principaux dossiers


  • Providing ongoing support to DPD Polska, the courier and postal operator in Poland, in the area of privacy, including auditing compliance and improving processes.
  • Providing ongoing data protection advice to PGNiG OD, a gas distributor in Poland, including transfer impact assessment and amendments to data breach risk assessment methodology.
  • Representing Łukasz Olejnik, a Polish cybersecurity & privacy researcher, in a case concerning the legality of Chat GPT’s data processing.

Kieltyka Gladkowski KG Legal

Kieltyka Gladkowski KG Legal, led by Malgorzata Kieltyka, focuses on digital technologies, cybersecurity, crypto trading and data protection. The practice also handles the interplay between AI and GDPR, examining the implementation of machine learning and AI to process data. Kazimierz Jakub Gładkowski advises clients from a wide variety of sectors, including fintech, blockchain and cybersecurity, assisting clients in complex aspects of data protection and data privacy problems.

Responsables de la pratique:

Małgorzata Kiełtyka; Kazimierz Jakub Gładkowski


Les références

‘The team of KG Legal is unique for their knowledge and insights about innovative matters such as AI, data privacy and data protection. At the same time, they are very flexible about new issues and are responsive. I may recommend companies doing businesses in or in relation to Poland to engage KG Legal.’

‘Both of Jakub Gładkowski and Małgorzata Kiełtyka have coped with difficult legal issues in relation to the current laws and regulations which do not expect emergence of new technologies.’

‘Key strengths lie in a deep understanding of industry and reach. The firm distinguishes itself from larger, general-practice firms through their modern approach and that provide services for corporate and private clients.’

Principaux clients

Pyle USA


Globalxpsa


Advantage Austria


Principaux dossiers


  • Provided assistance provided to US-based client in mass trade e-commerce industry under GPS Regulation No. 988 involving data protection when it comes to product safety information and traceability and product recalls.
  • Represented international client, software provider for Contract for Difference (CFD) trading in complex procedures before Polish cybersecurity agency, including recall of domain names.
  • Advised international client in double use technology transfer, including databases and specific scope of data that constitutes the technology, including data on tests, reports, incidents, prototypes, models, algorithmic calculations, algorithm libraries, technical data, and instructional data.

Lubasz i Wspólnicy - Kancelaria Radców Prawnych

Lubasz i Wspólnicy - Kancelaria Radców Prawnych provides assistance on a range of matters in data privacy and protection, notably, data audits, data compliance and data risk analysis and data security. Dominik Lubasz specialises in  TMT, IT and data protection, handling cases before the President of the Personal Data Protection Office, while Witold Chomiczewski has an extensive experience in supporting entities from e-commerce sector. Monika Susałko has extensive experience in supporting entities from IT sector while Edyta Bielak-Jomaa specialises in Polish and EU law in TMT and data protection. Monika Namysłowska advises on multi-threaded projects in the new technology law, data protection and consumer protection. All individuals mentioned lead the team.

Responsables de la pratique:

Dominik Lubasz; Witold Chomiczewski; Monika Susałko; Edyta Bielak-Jomaa; Monika Namysłowska


Les références

‘What makes this team unique is their commitment to every matter, their willingness to help, their openness, flexibility, and ease of communication. The team works efficiently, but also with great care – I’m always sure that everything has been verified in every possible way.’

‘What I really appreciate about the individuals I work with is their open mind, constant commitment and suggestions for changes that may be beneficial to us.’

‘The client can count on a dedicated team (to serve a given client and specialised in his sector). It facilitates communication and speeds up processes.’

Principaux clients

Institute of Justice (Ministry of Justice)


Panoptykon


Principaux dossiers


  • Representing The Panoptykon Foundation in administrative court proceedings in terms of a complaint against a decision of the President of the Office for Personal Data Protection in a case concerning a promotional campaign of a Polish insurance company.
  • Representing The Panoptykon Foundation in a precedent court dispute against a state-owned company Poczta Polska (Polish Post) in terms of illegal use of personal data for the presidential’s elections.
  • Prepared for The Institute of Justice, a Polish research and scientific institution operating under the supervision of the Minister of Justice, a report entitled: “Legislative and organisational solutions to ensure access to data in individual public registers” on open data and reuse of public sector information, with particular emphasis on solutions to ensure data protection.

Olesinski & Wspolnicy

Olesinski & Wspolnicy handles data protection across a range of different sectors such as e-commerce, new technologies and IT systems. Outside of data protection, the team handles cybersecurity, crisis management and proceedings before supervisory authority and dispute resolution in GDPR matters. Ludmiła Łuczak specialises in information security law, including data protection, cybersecurity, and trade secret protection. Bartosz Kolarz provides comprehensive advice on projects in the area of personal data protection and data security.

Responsables de la pratique:

Ludmiła Łuczak; Bartosz Kolarz


Les références

‘I rate this organisation very highly compared to other large Polish law firms. I have known Olesiński & Wspólnicy for 17 years. They consistently provide their clients with the highest quality services. They are a trusted partner. They constantly improve their skills, which guarantees the highest quality of services.’

‘The people I work with are experts in their fields. They provide the expected support in a timely and high-quality manner.’

‘The whole team of Olesinski & Wspolnicy is knowledgeable and respected. We regularly work with them on cross-border projects. They are responsive and have professional experience to handle complex matters, especially in digital transformation projects.’

Principaux clients

Wood-Mizer Holding, Inc.


Inplag Sp. z o.o.


Atlas Ward Polska sp. z o.o.


McCain Poland sp. z o.o.


Tarczyński S.A.


Smulders Projects Poland Sp. z o.o.


GPRE Management Sp. z o.o.


Principaux dossiers


  • Advised Wood-Mizer Holdings, Inc., on auditing and legally securingintra-group personal data flows within the Wood-Mizer Group.
  • Advised Booksy International sp. z o.o. [Ltd] on the successful launch of Booksy Med.
  • Provided legal support on Kinguin Digital Limited cashback campaign programme and personal data governance.

Baker McKenzie Krzyzowski i Wspólnicy Sp.k.

Baker McKenzie Krzyzowski i Wspólnicy Sp.k.’s privacy and data protection practice, led by Marcin Fijalkowski, offers a full range of services within the TMT sector. The team’s focus has shifted with global trends to encompass digitalisation, cybersecurity and privacy. The privacy and data security taskforce is led by Radosław Nożykowski and supported by Martyna Czapska and Katarzyna Baranowska. The team advises clients, both domestic and international, on a wide range of issues related to privacy protection and strict rules on collecting and processing of personal data.

Responsables de la pratique:

Marcin Fijałkowski; Radosław Nożykowski


Principaux clients

Goldman Sachs Bank Europe SE, J.P. Morgan SE, PKO BP Securities


Alior Bank


Schneider Electric


LG Electronics


Lingaro


Skanska


3M


TUiR Warta


Minova


Principaux dossiers


  • Advising TUiR Warta on implementation DORA being most comprehensive legislation of European Union in the cybersecurity area for the financial sector.
  • Advised the underwriters, led by Goldman Sachs Bank Europe SE and J.P. Morgan SE, and performed a due diligence covering compliance with GDPR requirements.
  • Advised, together with the Baker McKenzie Dubai team, various clients from the Middle East region on a data protection compliance projects that concerned two newly-introduced data protection laws in the region.

DWF Poland Jamka Sp.k

DWF Poland Jamka Sp.k advises on the implementation of cloud and AI-based services as well as other complex areas such as data protection, cyber security and technology matters. Gerard Karp is an advocate specialising in personal data protection, IT and cyber security. He actively advises clients on various aspects related to cyber security issues, including NIS2 and DORA regulations. Marian Giersz advises clients on data protection, telecommunications and technology.

Responsables de la pratique:

Gerard Karp


Autres avocats clés:

Marian Giersz


Les références

‘The team combines legal expertise with a strong client-focused approach. Demonstrates professionalism, clear communication resulting in comprehensive and effective solutions. It is their professionalism and accessibility that distinguishes them from other firms.’

‘The DWF Data Protection team stands out for its exceptional ability to combine cutting-edge technology with profound expertise in privacy and data governance.’

‘The practice is led by Gerard Karp, a highly respected and visionary practitioner who combines deep regulatory knowledge with a pragmatic, business-oriented mindset.’

Principaux clients

Integer Group Services sp. z o.o. (InPost)


The Insurance Guarantee Fund


Lyreco Polska sp. z o.o.


Adama Agricultural Solutions Ltd.


EnterAir


Ayvens Poland


Paccar Financial Polska sp. z o.o.


Elavon Financial Services DAC (US Bank)


GSM Association (GSMA)


Polski Światłowód Otwarty sp. z o.o.


Principaux dossiers


  • Involved in a strategic project for the Insurance Guarantee Fund where the team advised on the implementation cloud and AI-based services.
  • Advised on data protection, cyber security and technology matters for charter airlines in the CEE region.
  • Providing day-to-day data protection support on issues and key projects for GSMA.

KWKR Konieczny Wierzbicki i Partnerzy

KWKR Konieczny Wierzbicki i Partnerzy is known for its data protection and compliance offering, boasting extensive experience handling mobile apps and web platforms, IoT devices, mobile and online banking systems utilising video conferencing. Mariusz Purgał oversees the implementation of GDPR and Privacy Shield frameworks for a diverse range of clients – from international corporations to growing startups. Marcin Wierzbicki regularly supports clients in cross-border transactions, including ensuring compliance with data protection regulations and the secure flow of information within corporate structures.

Responsables de la pratique:

Mariusz Purgał


Les références

‘The individuals we worked with distinguished themselves through professionalism and a solutions-driven mindset.’

‘Very approachable, always they are always up-to-date with our legal situation we do not have to explain each time. Affordable but with high quality. They are very responsive.’

‘A law firm distinguished by its multi-threaded approach and the ability to solve any problem. A highly-trained team, open to new communication and reporting tools.’

Principaux clients

Van der Vorm Vastgoed B.V.


Hitachi Energy


Euroloop


Archdesk


Grape Up


Fitqbe


Trify Pożyczki


Novobet


Ajax Systems Poland


Polskie Sieci Elektroenergetyczne S.A.


Woltair


Securitum


GBS sp. z o.o.


AJ Travel


CarePoint


Principaux dossiers


  • Advising Ajax Systems on implementing and standardising personal data protection documentation across its international corporate group.
  • Advising Trify on the full implementation and long-term management of personal data protection compliance, with a particular focus on interactions with agents and external partners.
  • Advising CarePoint on a legal and data protection audit, including GDPR compliance and risk assessment of their new Portal designed for medical consultations.

Wardynski & Partners

Wardynski & Partners regularly advises tech platforms, life sciences companies, media studios and retail chains on matters involving sensitive data flows, whistleblowing frameworks, HR compliance and cyber incidents. The team supports  clients in various domestic and cross-border personal data processing incidents, including representing them before the Personal Data Protection Office. Joint practice head Krzysztof Wojdyło handles matters involving e-commerce, payment services, blockchain and privacy while Karolina Romanowska participates in projects for domestic and international companies in matters related to data protection and privacy. She supports clients with data breaches and represents them before relevant authorities.

Responsables de la pratique:

Krzysztof Wojdyło; Karolina Romanowska


Les références

‘Wardynscy & Partners practice stands out through a combination of deep law expertise, a proactive approach to risk management, and a strong commitment to client service. They don’t just respond to legal issues – they anticipate them. Their advisors are known for their commercial acumen, enabling us to provide solutions that are not only legally sound but also aligned with our strategic goals.’

‘The individuals I work with consistently demonstrate a rare combination of legal acumen, commercial awareness, and genuine client empathy. What sets them apart is not just their technical expertise, but their ability to anticipate client needs, communicate with clarity, and collaborate seamlessly across disciplines.’

‘Great Polish firm.’

Principaux dossiers


APLaw Artur Piechocki

APLaw Artur Piechocki provides advisory services related to e-commerce, IT and cybersecurity. Founder Artur Piechocki specialises in intellectual and industrial property law, information and communication technology law, data protection and privacy and cyber security. Agata Domańska specialises in IP, GDPR and IT, as well as TMT law.

Responsables de la pratique:

Artur Piechocki


Les références

‘Each member of the APLAW team has her/his own skills adjusted to our needs. They deliver whole range of services from data processing contracts through data management to international transfers of personal data.’

‘They provide not only legal services but understand our business thoroughly, in particular technology behind it. Artur Piechocki’s legal and technical background makes his legal support unique.’

‘APLAW team members are reliable, accessible, experienced and very well-educated lawyers. They always react business-wise, firstly understand our needs then act. Each legal solution they provide is associated with risk assessment, so our final decision is based on full understanding of the privacy problems we are facing with.’

Principaux clients

Supermedia


9Bits


Totalbet


Film Produkcja


Domar


Data Lake


Sesderma


Magic Box International


Ediba


Wielton


GymBeam


AfterMarket


Principaux dossiers


  • Drafting terms and conditions for Aftermarket for numerous online services, i.e. AI-based services for translation, transcription, prediction of stock-exchange results and re-drafting terms and conditions.
  • Advising Supermedia, the Polish TV, telecommunications and Internet supplier, on data protection legal services.

Kochanski & Partners

The Kochanski & Partners team is experienced in handling data privacy, protection and information security projects. Piotr Kochański brings expertise in technology, IP and media law, dispute resolution and arbitration, while Monika Maćkowska-Morytz specialises in the field of information security, data protection and privacy, cyber security and new technologies law.

Responsables de la pratique:

Piotr Kochański; Monika Maćkowska-Morytz


Les références

‘This practice stands out due to its deep expertise, responsiveness, and client-centred approach. Potential clients would appreciate their strong legal knowledge combined with practical business insight. Compared to other firms, their commitment to clear communication and innovative use of technology enhances efficiency and collaboration.’

‘The individuals I work with distinguish themselves through professionalism, outstanding legal skills, and a genuine commitment to clients’ success. Their proactive attitude and problem-solving abilities set them apart from competitors. I have particularly valued the dedication and insight of key partners and associates, who bring both expertise and approachability to the table.’

‘Overall, it is important to emphasise the great communication skills of the team. The entire negotiation and project preparation process was very transparent. The team described in a very clear manner what would be prepared for the client and what the costs would be.’

Principaux clients

Lidl


Digital Knowledge


BOX POLAND (BOX GROUP)


LOT Polish Airlines


Pandora Jewellery CEE


Ringier Axel Springer Polska


Havi Logistics


Perfect Gym


ERGO Hestia


TIDIO Poland


Principaux dossiers


  • Representing LOT Polish Airlines in proceedings before the Personal Data Protection Office and the Supreme Administrative Court.
  • Providing advice to Digital Knowledge for the planned entry into European markets (starting with Poland) of an e-learning platform that makes extensive use of artificial intelligence.
  • Supporting BOX Poland in obtaining a transfer of Binding Corporate Rules (BCR) for the entire BOX Group from the UK after Brexit and in having the changes approved by the Polish Personal Data Protection Office (UODO) as part of the mandatory annual review.

PwC Legal Zelaznicki sp.k.

PwC Legal Zelaznicki sp.k. advises on all aspects of personal data law, including multinational cases. The team is better known for assisting with personal data law. Paulina Komorowska-Mrozik advises on all aspects of personal data protection, including comprehensive multi-jurisdictional data protection compliance programmes, data protection documentation and data transfer assessments, as well as proceedings before the Polish data protection authority.

Responsables de la pratique:

Paulina Komorowska-Mrozik


Les références

‘Deep expertise in the team, well-structured team. What makes them stand out it the use of technology and alternative delivery models (e.g. using a team of analysts for simpler, more repetitive tasks).’

‘Paulina Komorowska-Mrozik has a strategic mindset, clear communication, and deep insight, particularly in navigating complex data breaches, international data transfers, and AI-related privacy challenges. She has a business-oriented approach and provides tailored solutions. It is a pleasure to work with her.’

‘The data protection team is highly knowledgeable and provides clear, practical guidance on complex privacy matters.’

Principaux clients

Benefit Systems S.A.


Fundacja Drzewo i Jutro


BenefitSystems S.A.


Inter Europol S.A.


Principaux dossiers


  • Advised Polish food group Inter Europol S.A. on the acquisition of companies: Trimar Piekarnie spółka z ograniczoną odpowiedzialnością and Trimar Piekarnie sp. k.
  • Providing Fundacja Drzewo i Jutro ongoing legal support to a non-profit organisation supporting children in foster care and other vulnerable groups.
  • Advising Benefit Systems S.A. on series of acquisitions aimed at broadening its gym clubs portfolio.

SSW

SSW’s team has heavy involvement in matters centred on cyber-attacks related to global and local data breaches. The practice support to businesses with data security and privacy assisting streaming platforms and social media companies. Agnieszka Witaszek specialises in data protection and privacy laws, with significant experience in all aspects of data privacy, particularly in mapping and managing data privacy processes.

Responsables de la pratique:

Agnieszka Witaszek


Les références

‘The data privacy and data protection team delivers comprehensive and strategic advice that effectively bridges legal, regulatory and business considerations. Notably, the practice has the capability to address the full spectrum of data protection issues — from implementing GDPR-compliant governance frameworks and managing cross-border data transfers to advising on data breaches and representing organisations before supervisory authorities.’

‘Agnieszka Witaszek stands out for her exceptional leadership and business-oriented approach. She combines deep knowledge of data protection law with the ability to deliver pragmatic, commercially focused solutions.’

‘Agnieszka Witaszek: she is an outstanding privacy lawyer and a trusted business partner. She has a rare ability to translate complex privacy issues into clear, business-oriented language and practical solutions.’

Principaux clients

TIME Magazine


Astara


Indigo Group


Baltic Power


Pracuj Group


Sqilline


LX Pantos


Axpo Solar


Axpo


Optima Logistics Group


Video Games Poland (previously SPiDOR)


Orlen


Alba Group


Principaux dossiers


  • Representing Indigo Group in managing and mitigating the effects of a cyber-attack (ransomware).
  • Providing data privacy support to Baltic Power, an off-shore energy project.
  • Designing a whistleblowing policy for Optima Logistics Group.

WKB Lawyers

WKB Lawyers covers a broad range of TMT and data protection matters, including software development contracts, e-commerce, as well as telecommunications and electronic communications issues. Agnieszka Wiercińska-Krużewska leads the department and specialises in new technologies, IT contracts and cybersecurity. Aleksandra Urbanowicz is recognised for her focus on the intersection of data and consumer-facing sectors, while Piotr Filipowski specialises in new technology law, with a particular focus on cyber security matters and cloud technology implementations.

Responsables de la pratique:

Agnieszka Wiercińska-Krużewska; Aleksandra Urbanowicz; Piotr Filipowski


Les références

‘Specialised expertise: team members have extensive experience across multiple industries and jurisdictions, enabling them to anticipate regulatory and market shifts before they impact clients.’

‘The individuals I work with stand out for their combination of technical mastery, commercial awareness, and genuine commitment to client success.’

‘Aleksandra Urbanowicz – advanced knowledge and quality of work.’ 

Principaux clients

Polski Bank Komórek Macierzystych sp. z o.o.


11bit Studios S.A.


Iterative Scope Inc.


Empik S.A.


VeloBank S.A.


Principaux dossiers


  • Providing Data Protection Officer (DPO) with ongoing services for almost 6 years to the Polski Bank Komórek Macierzystych sp. z o.o. (leading the Polish Stem Cell Bank) and for more than two years to the FamiCordTx S.A. – a member of the PBKM Group, on day-to-day data protection matters.
  • Providing Data Protection Officer (DPO) services and ongoing legal support to 11 bit studios S.A., a leading company in the gaming industry.
  • Advising to Iterative Scopes – a company specialising in clinical trials support on a range of data protection and regulatory compliance issues, arising primarily from their cooperation with European partners.