Firms To Watch: Data privacy and data protection

Andersen in Poland is a fast-growing firm in the data privacy and protection space, handling a plethora of GDPR matters, with department head Magdalena Patryas focusing her practice on GDPR compliance audits and data breaches.
Jointly led by Marcin Kolasiński and Michał Chodorek, the team at Kieszkowska Rutkowska Kolasinski Kancelaria Prawna sp. j. specialises in transactions within the life sciences and healthcare industry, involving various data protection issues related to the process of researching and developing products and services.

Data privacy and data protection in Poland

Bird & Bird Koremba, Dziedzic i Wspólnicy sp.k.

Bird & Bird Koremba, Dziedzic i Wspólnicy sp.k.‘s data privacy and protection practice is deemed ‘an absolute standout’ in handling a vast range of data-related matters, including both contentious and non-contentious mandates across Poland and the EU. Its offering covers assistance with such matters as data breaches, regulatory proceedings and data transfers. The team is also brings strength to advising on the regulations surrounding the ever-changing AI landscape. The ‘dedicatedIzabela Kowalczuk-Pakuła leads the practice, specialising in retail, fintech and pharmaceutical sector matters, and excelling at strategically handling cybersecurity incidents, investigations and proceedings before national DPAs. Other key members of the team include Marta Kwiatkowska-Cylke, who represents clients in proceedings before the Polish supervisory authority and handles contentious matters, while Emilia Stępień works in GDPR regulation.

Practice head(s):

Izabela Kowalczuk-Pakuła


Other key lawyers:

Marta Kwiatkowska-Cylke; Emilia Stępień


Testimonials

‘Extremely active in the domestic market, also in the European Union. A go-to team.’

‘Izabela Kowalczuk-Pakuła is most dedicated and steers the team. She has incredible passion and skills. A go-to power lawyer.’

‘Bird & Bird has justifiably earned the reputation of the premier consumer data protection law firm in Europe.’

‘The practice is an absolute standout – the only law firm that we work alongside.’

‘Izabela Kowalczuk-Pakula: we have worked with Izabela and her team for over a decade. They are responsive, clear and very transparent. It is an absolute joy to be able to work alongside them in international mandates.’

‘Very professional and thorough.’

Key clients

Samba TV


Michael Page


Work highlights


  • Providing support to Samba TV, including acting as a DPO for its European operations and advising on the content and design of data protection and privacy documentation.
  • Providing ongoing support to Michael Page, in negotiating agreements with its clients and service providers.

CMS

CMS operates on a multidisciplinary basis with a merged TMT and EU trade mark and design team, engaging in a wealth of cross-border work spanning such sectors as IT, education and the automotive industry. The practice's comprehensive offering covers matters ranging from data transfers and contracts to representation before various authorities, including the Polish Data Protection Authority. The practice is led by Tomasz Koryzma, an expert in tech, media and data privacy law, who advises clients on digital businesses, e-commerce and cloud contracts. Damian Karwala assists the team with cross-border data transfer matters.

Practice head(s):

Tomasz Koryzma


Other key lawyers:

Damian Karwala


Testimonials

‘The CMS team has shown great expertise in all aspects that we have been collaborating in. Damian Karwala was very proactive in understanding our needs and proposed optimal solutions.’

‘Damian Karwala has shown great proactiveness, data- and privacy-related expertise and outstanding communication skills.’

‘Great team of privacy professionals at all levels of seniority that makes for flexibility, and availability. We highly value their experience and support on international data transfer matters. We feel like they are our extended in-house team when we need them most.’

Key clients

Lufthansa Group


RTB House


eBay


Primo Water


Hermes


Box


Iron Mountain


Point 72


Partner in Pet Food


Becton Dickinson


BEC Financial Technologies


Bausch & Lomb Poland sp. z o.o.


Better Energy


International Paper


Work highlights


  • Assisted Lufthansa Group & SAS Airlines with data protection cases and in the interdisciplinary administrative proceedings.
  • Providing ongoing advice to Iron Mountain on matters crucial to conducting the client’s business globally, coordinating projects in multiple jurisdictions.
  • Advising Box on a data protection project which is crucial for its ability to offer its services post-Brexit and post-Schrems II.

Dentons

The team at Dentons is ‘motivated and engaged in finding the best solutions’. It operates on a single legal hub basis and in collaboration with its other offices worldwide, allowing for a wealth of cross-border work spanning various industries such as fintech, telecoms and energy. The practice encompasses a full spectrum of services including data transfers, security measures and data breaches. Karol Laskowski leads the team with copious experience advising multinational and domestic corporations on compliance with GDPR, ePrivacy and other data regulations. Singled out for his ‘deep expertise’, Paweł Gruszecki acts as counsel at the firm, assisting clients in large-scale projects involving cybersecurity and personal data protection.

Practice head(s):

Karol Laskowski


Other key lawyers:

Paweł Gruszecki


Testimonials

‘Competent and business-oriented team with real and rich experience in privacy matters. They know how data protection issues work in real life, and what are the current challenges and potential threats.’

‘Great combination of legal knowledge, soft skills and experience. Moreover, the team members are motivated and engaged to find the best solutions.’

‘Dentons stands out due to its global reach, paired with deep local expertise, allowing for a comprehensive understanding of legal frameworks in multiple jurisdictions. One of the firm’s key strengths is its multidisciplinary approach, combining legal expertise with strategic business insight, which provides clients with holistic and actionable solutions.’

‘In comparison to other firms, Dentons excels in its ability to collaborate seamlessly across borders, pulling in specialised experts when needed while maintaining the efficiency of a single point of contact for clients.’

‘Pawel Gruszecki at Dentons consistently stands out for his deep expertise, proactive approach and exceptional client service. What sets him apart from competitors is his combination of technical legal knowledge and a collaborative mindset.’

‘Among the many qualities I value in the Dentons team is their responsiveness and adaptability. They are always available to address issues promptly and have a forward-thinking attitude when tackling complex challenges. Their attention to detail, combined with a focus on delivering results efficiently, gives them a competitive edge.’

‘The team demonstrates a great level of knowledge and skills.’

‘Pawel Gruszecki is a professional demonstrating a sound understanding of business priorities and client needs. He is a great partner to work with.’

Key clients

Tata Communications Group


Work highlights


  • Advised a global data firm on data protection and privacy matters, primarily in the EU and UK.
  • Assisted a global telecommunications enterprise in monitoring the implementation status of the NIS 2 Directive in selected EU Member States, advising the client with registration procedures in Hungary related to the local implementation of the NIS 2 Directive.
  • Assisted a fintech company during the assessment of incidents for possible recognition as data protection breaches under GDPR and Spanish law, as well as Singapore law.

DLA Piper Giziński Kycia sp.k.

 ‘Providing clear guidance on compliance challenges’ and ‘crafting tailored solutions’, the team at DLA Piper Giziński Kycia sp.k., offers a comprehensive advisory service to a robust client base of domestic and multinational businesses spanning such sectors as banking, insurance and media, on matters concerning cross-border data transfers, data security breaches, big data and profiling. The firm’s day-to-day work consists of handling GDPR implementation projects and providing full-service data protection support. Leading the practice is Ewa Kurowska-Tober, who focuses on IT, data protection and advanced technologies, advising clients in highly regulated areas such as cloud computing, e-commerce, and content and distribution.

Practice head(s):

Ewa Kurowska-Tober


Other key lawyers:

Piotr Czulak


Testimonials

‘DLA Piper’s Warsaw office’s privacy and data protection team stands out for its practical and business-oriented approach to navigating the complexities of EU data protection law. My interactions with the team have always been positive, and they consistently demonstrate an ability to balance regulatory compliance with pragmatic, client-focused solutions.’

‘One of the team’s greatest strengths is its commitment to delivering on promises. Whether it’s providing clear guidance on compliance challenges or crafting tailored solutions, I’ve always found them reliable and effective.’

‘As the head of the team, Ewa Kurowska-Tober brings an exceptional depth of knowledge and leadership to her practice. She has a keen understanding of how privacy regulations impact businesses; her ability to navigate this evolving landscape is remarkable. Ewa’s approach is always business-first, ensuring that clients receive solutions that are not only legally sound but also practical and actionable.’

‘Overall, the DLA Piper privacy team in Warsaw provides a combination of legal expertise and business-savvy solutions that consistently meet and exceed client expectations.’

‘The data privacy team is always very professional and eager to support not only in the domestic Polish market but also in other jurisdictions of DLA. Very business oriented advice that is always on time.’

‘Responsiveness and understanding of the customer’s needs is what characterises DLA.’

Key clients

Allegro (with Cinven, Permira, and Mid Europa Partners as the majority owners)


Ardagh


AUDI


Axalta


BASF


BNP Paribas


BorgWarner


Capgemini


Cognizant


Credit Suisse


DataTag


Generali


HSBC


ING Bank


LEGO


LEVI Strauss


mBank


Michelin


Moroccan Oil


Dell


PEKAO SA


Philips


Prada


PZU


Rituals


Vodafone


Żabka (a CVC Partners company)


Disney


Orange


Standard Chartered Bank


YouGov


Dell


Work highlights


  • Advised YouGov plc on the acquisition of GfK CP, the European Consumer Panel Business of Germany-based GfK SE.
  • Provided Generali Polska with comprehensive advice related to privacy matters, including advice on group marketing efforts based on shared personal data, cookies and tracking technologies.
  • Advised Renesas on the Polish data protection aspects of the acquisition of US-Australian multinational software company Altium Limited.

Kobylanska Lewoszewski Mednis

The team at Kobylanska Lewoszewski Mednis handles a range of contentious and non-contentious work, including advising on personal data regulations for new technologies, implementing GDPR and representing clients in proceedings before the supervisory authority. The team is jointly headed by Anna Kobylańska, who assists clients with cases concerning internet domain name protection, the use of new technologies to collect and process personal data, as well as projects concerning the implementation of NFT and AI solutions in wearable devices; Arwid Mednis, who represents various entities in disputes with the Polish DPA; and Marcin Lewoszewski, who advises on personal data issues and assists corporations with data breaches.

Practice head(s):

Anna Kobylańska; Marcin Lewoszewski; Arwid Mednis


Testimonials

‘Kobylańska Lewoszewski Mednis specialises in new technology law and has extensive experience in this field. Each of the partners has extensive experience.’

‘We work mainly with attorney Arwid Mednis in the field of personal data protection. He has extensive knowledge and experience.’

‘This law firm stands out due to its specialised expertise in niche areas of law, such as intellectual property, data protection and cybersecurity. This focus allows the firm to provide highly tailored and knowledgeable advice to clients in these specific fields.’

Key clients

Warsaw School of Economics


Orlen


Work highlights


  • Represented Warsaw School of Economics in GDPR-related court proceedings.
  • Supported leading healthcare provider during the onsite regulatory audit carried by the Polish Data Protection Authority.

Rymarz Zdort Maruta

Sporting a ‘unique combination of deep theoretical knowledge and a practical, business-oriented approach’, the team at Rymarz Zdort Maruta handles data protection, transfers and tech projects for their client roster of large multinationals and domestic companies.  The firm also represents clients in proceedings before the relevant authorities, including the DPA and Supreme Administrative Court. The practice is headed by Marcin Serafin, who advises clients such regulations as GDPR, and who also acts in disputes; Paweł Tobiczyk, who has advised on domestic and European legislation, particularly within the banking and finance and insurance fields; and Piotr Kalina, who assists clients with compliance and regulation, with a focus on AI-related matters.

Practice head(s):

Marcin Serafin; Paweł Tobiczyk; Piotr Kalina


Testimonials

‘The teams have a wide knowledge in various areas of law, are flexible, competent and have up-to-date knowledge. At the time when new regulations come into force, they already have ready-made solutions, which they are able to implement at the client’s site in a short time.’

‘The lawyers of Rymarz Zdort Maruta with whom we work are characterised by an extraordinary work ethic, commitment and a business understanding of legal problems, which is reflected in the solutions they propose.’

‘The lawyers at Rymarz Zdort Maruta are open to unconventional solutions that help achieve objectives while minimising legal risks, which is particularly visible and important in the area of data protection.’

‘The individuals at Rymarz Zdort Maruta stand out for their distinct blend of expertise, professionalism and adaptability, setting them apart from competitors in the area. Piotr Kalina, a partner at Rymarz Zdort Maruta fulfilling the role of Data Protection Officer, is known not only for his extensive knowledge but also for his remarkable ability to manage work effectively, especially in situations that require urgent responses.’

‘Marcin Serafin displays openness, agility and an understanding of the market.’

‘The Rymarz Zdort Maruta data privacy team is a recognised authority in data protection law, consistently staying ahead of industry trends.’

Key clients

Polski Fundusz Rozwoju S.A.


Getin Noble Bank S.A. w upadlosci


Morele.net Sp. z o.o.


Work highlights


  • Advised Bankowy Fundusz Gwarancyjny on data protection issues in the process of selling Velo Bank S.A. to an external investor.
  • Advised Morele.net Sp. z o.o. in filing a complaint with the Administrative Court regarding an imposed financial penalty in connection with a data breach.
  • Advised Zabka Polska on the creation of a joint account for multiple services of different entities in the group and the exchange of data between them.

Traple Konarski Podrecki & Partners

Described as ‘highly competent, responsive and practical’, the team at Traple Konarski Podrecki & Partners is noted for assisting organisations with the application and implementation of GDPR, and for the branching out of its advisory service cover AI systems, cloud computing and biometric data. Outside of providing advice, the firm also regularly represents clients before the Polish Data Protection Authority in both judicial and administrative proceedings. The practice is jointly led by Xawery Konarski, an expert in the field of new technologies who assists clients in providing online services for projects involving the implementation of the Digital Services Act; and Grzegorz Sibiga, who specialises in personal data protection and other matters of administrative law, including access to public information, re-use of public sector information and data opening, in addition to providing strategic advice in innovative areas such as data governance, AI governance and incident response.

Practice head(s):

Grzegorz Sibiga; Xawery Konarski


Testimonials

‘Excellent team, solution- and business-oriented.’

‘Grzegorz Sibiga is a prominent expert in the field of personal data protection in Poland.’

‘The entire team of Grzegorz Sibiga is very knowledgeable and experienced.’

‘The individuals we’ve worked with in this legal team have consistently demonstrated qualities that make them stand out from the competition.’

‘Very good and professional team.’

‘TKP’s data protection practice is highly competent, responsive and practical. They have provided our company with comprehensive support across a wide range of data protection matters, consistently offering practical and well-thought-out solutions, even under tight deadlines.’

‘Grzegorz Sibiga is an extremely knowledgeable and versatile legal counsel. He stands out for his responsiveness and his extensive experience with data protection authorities and various regulatory matters, which has proven invaluable on several occasions.’

Key clients

Polskie Sieci Elektroenergnetyczne S.A


Henkel Polska sp. z o.o.


Minister of Health of the Republic of Poland


RTB House


GPW DAI S.A.


British American Tobacco Sp. z o.o.


City of Wrocław


Association of Data Protection Companies (Związek Firm Ochrony Danych Osobowych, ZFODO) and The Association of Data Protection Officers (SABI – Stowarzyszenie Inspektorów Ochrony Danych)


Bankowy Fundusz Gwarancyjny (The Bank Guarantee Fund)


CANAL + Polska S.A


Work highlights


  • Representing the Minister of Health in a case involving a complaint against a decision by the Polish DPA following the publication of health data from a governmental database on social media.
  • Prepared a legal opinion for Association of Data Protection Companies on the avoidance of conflict of interest by data protection officers.
  • Advised Polskie Sieci Elektroenergetyczne S.A. on its obligations under GDPR while acting as the Energy Market Information Operator.

Domanski Zakrzewski Palinka

The team at Domanski Zakrzewski Palinka advises clients in at the domestic and global levels on the implementation of GDPR, data transfers and the management of data leaks. The firm handles projects across a wide range of industries including energy, finance and healthcare, in addition to assisting IT and technology sector businesses with implementation matters. Leading the practice is Bartosz Marcinkowski, a specialist in personal data protection, whose wide network supports the team’s international outreach.

Practice head(s):

Bartosz Marcinkowski


Testimonials

‘Super responsive. Proactive. Contributors to contemporary and ahead-of-market legal and tech developments.’

‘The team led by attorney Bartosz Marcinkowski stands out for its innovation, professionalism and individual approach to the client.’

‘Each DZP employee had strong sector knowledge to share and the support was delivered by the whole team.’

‘Professional, friendly, with a customised approach.’

GP Partners Gawroński, Biernatowski Sp.K.

The technology and data protection practice at GP Partners Gawroński, Biernatowski Sp.K. is best known for its capabilities in assisting clients working in key sectors such as banking and finance, energy and telecoms. The practice also brings strength to cybersecurity and IT disputes and displays capability in handling GDPR compliance audits and implementations, data breach management and proceedings before the Polish Data Protection Office. The practice is jointly headed by Maciej Gawroński, who works across personal data protection, IT and cybersecurity; and Michał Ćwiakowski, who, in addition to data protection, assists with the implementation of new technologies.

Practice head(s):

Maciej Gawronski; Michał Ćwiakowski


Testimonials

‘GP Partners’ advisory in data protection matters is of great value to us. They have great insight in terms of regulations and know the market practice extremely well.’

‘Michał Ćwiakowski is an expert in data protection and privacy-related matters. He also understands cybersecurity and technology very well, which in our view is important in advising on privacy issues.’

‘A boutique with excellent approach, engagement and advanced technologies.’

Key clients

Polish Airports (Przedsiębiorstwo Państwowe PortyLotnicze PPL)


Polkomtel NoPolish Bar of Attorneys-at-law


PGNiG OD


Plus Bank


PKO BP


PKO BH


Work highlights


  • Providing ongoing support to DPD Polska in the area of privacy, including auditing compliance.
  • Provides ongoing data protection advice to PGNiG OD, including Transfer Impact Assessments to data breach risk assessment methodology.
  • Representing Łukasz Olejnik, a Polish cybersecurity and privacy researcher, in a case concerning the legality of Chat GPT’s data processing.

Kieltyka Gladkowski KG Legal

With its cross-border capabilities, the team at Kieltyka Gladkowski KG Legal handles a vast range of matters, including data protection, transfers and processing mandates, most notably for the defence sector. The firm has also expanded its horizons to work involving crypto wallets and useTOR. The team is headed by Małgorzata Kiełtyka, who regularly represents international entities operating across such sectors as pharmaceuticals, tech and media; and Kazimierz Jakub Gładkowski, who advises clients involved in fintech, blockchain and transport matters.

Practice head(s):

Małgorzata Kiełtyka; Kazimierz Jakub Gładkowski


Testimonials

‘KG Legal’s team stands out for its deep expertise and tailored support, which have proven invaluable to Austrian companies operating in the Polish market. What sets this practice apart is its client-focused approach, combining a thorough understanding of Polish, EU and international regulations with a commitment to practical solutions.’

‘Both Kazimierz Jakub Gładkowski and Małgorzata Kiełtyka are knowledgeable about IT and privacy law, which is helpful for their clients.’

‘Kazimierz Jakub Gładkowski stands out as a highly experienced legal professional with an impressive 15 years of expertise in commercial and corporate legal matters. His ability to navigate complex cross-border transactions and litigation sets him apart from his peers.’

‘Kazimierz Jakub Gładkowski’s comprehensive skill set is remarkable; whether it’s negotiating intricate international contracts, assisting with technology transactions, or advising on regulatory compliance, he consistently provides pragmatic and forward-thinking solutions. His work in technology-related fields, such as fintech, blockchain and robotic process automation, shows his grasp of emerging trends and how to navigate the legal challenges that accompany innovation.’

‘Małgorzata Kiełtyka, with her 14 years of experience, is an exceptional legal professional, known for her thorough and insightful approach to cross-border commercial matters, including litigation and non-contentious issues. Her deep expertise in sectors such as pharmaceuticals, healthcare and IT makes her uniquely positioned to handle complex, high-stakes legal challenges.’

‘Małgorzata Kiełtyka’s ability to guide clients through mergers and acquisitions, corporate governance and restructuring showcases her command of corporate law. What truly makes her stand out is her specialised knowledge in life sciences and technology transactions, where her understanding of regulatory frameworks is unrivalled. Her work with innovative sectors, including artificial intelligence, machine learning and blockchain demonstrates her forward-looking approach and keen awareness of future trends in the tech industry.’

‘Małgorzata Kiełtyka is highly knowledgeable and effective, and a pleasure to work with.’

Key clients

Pyle USA


GLOBALXPSA


Advantage Austria


Work highlights


  • Assisted a client with their launch of services on the Polish market, covering requirements of data circulation, data storage and data processing.
  • Assisted in a corporate phishing case data.
     
  • Advising a foreign trustee in Poland in the bankruptcy case of a bitcoin investment club.

Lubasz i Wspólnicy - Kancelaria Radców Prawnych

The team at Lubasz i Wspólnicy - Kancelaria Radców Prawnych handles a variety of data issues including compliance, risk analysis and security, while also specialising in handling data in the marketing and social media industries. The team is led by Dominik Lubasz, who specialises in handling litigation proceedings across the practice space; Witold Chomiczewski, who draws on extensive experience assisting entities from the e-commerce sector; Monika Susałko, who handles IT industry matters; Polish and EU data protection laws and regulations specialist Edyta Bielak-Jomaa; and Monika Namysłowska, who advises on new technology projects.

Practice head(s):

Dominik Lubasz; Witold Chomiczewski; Monika Susałko; Edyta Bielak-Jomaa; Monika Namysłowska


Testimonials

‘The law firm’s team treats the needs of each client individually and chooses a method of cooperation that is comfortable for the client.’

‘Monika Susalko: the bulk of the work and coordination of contacts is done by her. Very good understanding of the client’s needs and the level of advice depending on the parts of the company involved.’

‘Very competent, business-oriented team with a very good market reputation, thanks to academic work, conferences and publications.’

‘Dominik Lubasz is an authority in data protection. Very cooperative, business-minded.’

‘Witold Chomiczewski’s competence in data protection, especially in e-commerce-related matters, is excellent.’

‘Advanced specialisation and expertise – thanks to this, the wait for an opinion or advice is short.’

‘The firm is known for its expertise in data and privacy protection and we must confirm its excellent reputation.’

Key clients

Japan Tobacco International (JTI Polska)


Panoptykon


NNV


Polenergia Sprzedaż


Polenergia Fotowoltaika


Oponeo.pl


Work highlights


  • Providing ongoing advice to Japan Tobacco International on big data management and Data Protection Officer services.
  • Representing Panoptykon Foundation in a court dispute against a state-owned company in terms of illegal use of personal data for the presidential elections.
  • Advised Polenergia Sprzedaż on analysis in terms of Data Protection Impact Assessment relating to the purchase and implementation of a complex IT system.

Olesinski & Wspolnicy

Olesinski & Wspolnicy is jointly led by Ludmiła Łuczak, an expert in data protection, who advises international clients on GDPR compliance; and Bartosz Kolarz, who provides strategic legal advice on projects concerning data security, particularly matters concerning international data transfers. Assisting clients both domestically and within the EU, the team adopts a multidisciplinary approach, drawing on the expertise of its TMT and litigation teams to provide advice and representation on data protection, cybersecurity and DPO outsourcing matters.

Practice head(s):

Ludmiła Łuczak; Bartosz Kolarz


Testimonials

‘Great quality team.’

‘Bartosz Kolarz is a very good leader.’

‘Clear terms of cooperation and excellent quality.’

‘It’s one of few teams in which data privacy expertise is connected with technology expertise; it’s one team essentially. This greatly facilitates cooperation and obtaining coherent advice no matter with whom you have a conversation.’

‘Bartosz Kolarz is a great asset, always positive and easy to work with. Ludmiła Łuczak is very professional ’

‘What sets OW’s data team apart is their very high level of communication skills; they are able to discuss even the most difficult issues in data protection law in a simple and accessible manner. In addition, they are always able to explain their position in a reasonable, balanced and logical way.

‘Exceptional praise must be given to lawyer Bartosz Kolarz, who stands out from other lawyers, both for his knowledge of his client, as well as for his extensive knowledge, which very often touches on various branches of law.’

‘Overall experience while working with Olesinski & Wspólnicy is great. They understand the legal needs of a client and provide a great service.’

Key clients

Atlas Ward Polska sp. z o.o.


Schock Bath sp. z o.o.


DCG Centrum Medyczne Sp. z o.o.


Rebel Wolves sp. z o.o.


Ajinomoto Poland sp. z o.o.


Silekol sp. z o.o.


McCain Poland sp. z o.o.


NSK Steering Systems Europe (Polska) Sp. z o.o.


N-IX Poland sp. z o.o.


Booksy International sp. z o.o.


DWS Draexlmaier Wyposażenie Wnętrz Samochodowych Sp. z o.o.


DIP Draexlmaier Engineering Polska Sp. z o.o.


MODIVO S.A. / previously eobuwie.pl S.A.


IFIRMA S.A.


Limango Polska Sp. z o.o.


Brose Sitech Sp. z o.o.


Ten Square Games S.A. / previously Sp. z o.o.


Tidio Poland sp. z o.o.


Tarczyński S.A.


Gates Polska Sp. z o.o.


Sportano.com Sp. z o.o.


Guotai-Huarong (Poland sp. z o.o)


Umicore Poland Sp. z o.o.


Smulders Groep Poland Sp. z o.o.


Smulders Projects Poland Sp. z o.o.


IMPEL S.A.


SpotOn Poland Sp. z o.o.


GPRE Management Sp. z o.o.


Waverley Software


Polskie Koleje Linowe S.A.


Kolej Gondolowa Jaworzyna Krynicka S.A.


PKL Horeca Sp. z o.o.


PKL Solina Sp. z o.o.


PKL Food Sp. z o.o.


PKL Food Sp. z o.o. sp.k.


Tristone Flowtech Poland Sp. z o.o.


EPCD Sp. z o.o.


VISKASE Polska Sp. z o.o.


AKS Precision Ball Sp. z o.o.


JOST Polska Sp. z o.o.


VOSS Automotive Polska Sp. z o.o.


Burda GmbH


Merit Aktiva sp. z o.o.


Neogames S.A.


Continental Opony Polska Sp. z o.o.


SFC Solutions Częstochowa sp. z o.o.


SFC-Solutions Piotrków Sp. z o.o.


Curaden Polska Sp. z o.o.


KIK Textil Sp. z o. o.


IZOBLOK S.A.


ZREW Transformatory S.A.


Work highlights


  • Carried out several key projects for Booksy International Sp. z o.o., including strategic advice from a personal data perspective on the launch of the ‘Zakupy’ platform.
  • Supported DCG Centrum Medyczne Sp. z o.o. in a data protection breach concerning a leak of medical data. O&W represented DCG in proceedings conducted by Polish DPA.
  • Supported Boekestijn Transport in a project to digitise and securely store documents, using the biometric data contained in the signature.

Baker McKenzie Krzyzowski i Wspólnicy Sp.k.

The team at Baker McKenzie Krzyzowski i Wspólnicy Sp.k. advises clients operating across a wide range of industries such as tech, finance and healthcare, on matters involving digital media, data privacy and cybersecurity. The practice is jointly led by Radosław Nożykowski, an expert in cybersecurity and the regulatory aspects of new technologies, who draws on extensive litigation experience in disputes across the practice area; and Marcin Fijałkowski, who specialises in gaming and metaverse matters.

Practice head(s):

Marcin Fijałkowski; Radosław Nożykowski


Testimonials

‘We appreciate the cooperation with Marcin Fiałka. He is distinguished by professionalism, reliability and many years of experience in the area of GDPR.’

Key clients

Google


Schneider Electric


Lingaro


Skanska


3M


Agora Media Group


Minova


Work highlights


  • Advising Agora Media Group on data privacy implications and supporting the client’s privacy team in drafting legal documents and consumer-facing notices.
  • Advised international clients from various industries on legal issues, GDPR implications and requirements related to a personal data breach resulting from a hacking attack on the IT infrastructure of a payroll & HR service provider.
  • Working on a data protection compliance project in response to the introduction of two new data protection laws.

DWF Poland Jamka Sp.k

DWF Poland Jamka Sp.k has tripled its headcount at the practice, thus significantly expanding its advisory provision for matters concerning cybersecurity, cloud services and AI. The team accompanies its advisory services and assists with litigation resolving disputes and handling compensation claims. The ‘very impressiveGerard Karp leads the team, specialising in personal data protection, cybersecurity and IT, and advises both domestic and international entities on the aforementioned areas of interest.

Practice head(s):

Gerard Karp


Testimonials

‘We highly recommend this practice. They bring a unique combination of industry expertise and collaborative spirit, which is truly refreshing. Their innovative use of technology and commitment to client satisfaction ensures you get the best possible value. Their diverse team brings fresh perspectives and a commitment to exceeding expectations, setting them apart from the competition.’

‘The data protection team was thorough, practical and responsive. They helped us step back and form a strategy and explained nuanced areas of the law very clearly.’

‘Gerard Karp was very impressive. We formed a very strong trust in him to provide excellent guidance on complex privacy issues.’

Key clients

Integer Group Services sp. z o.o. (InPost)


The Insurance Guarantee Fund


Lyreco Polska sp. z o.o.


Adama Agricultural Solutions Ltd.


EnterAir


LeasePlan Fleet Management Polska sp. z o.o.


Paccar Financial Polska sp. z o.o.


Elavon Financial Services DAC


GSM Association (GSMA)


Polski Światłowód Otwarty sp. z o.o.


Work highlights


  • Involved in a strategic project for the insurance guarantee fund where we advised on the implementation of cloud and AI-based service.
  • Advised on complex technology and data protection matters for the InPost company.
  • Providing day-to-day data protection support on key projects for GSMA.

KWKR Konieczny Wierzbicki i Partnerzy

The team at KWKR Konieczny Wierzbicki i Partnerzy is well-placed to advise both domestic and international corporates, and is skilled at advising on personal data processing, compliance matters and projects concerning mobile apps and web platforms. Working across key sectors such as med-tech, finance and insurance, the team is well-regarded for assisting with specialised advice on products such as chatbots, facial recognition tools and medical diagnostic algorithms. Mariusz Purgał leads the practice, handling matters across domestic and international corporate environments.

Practice head(s):

Mariusz Purgał


Testimonials

‘It is a team of professionals practicing their profession with passion. Always prepared and versed in the latest legal issues.’

‘Huge diversity, flexibility and engagement.’

‘Very dedicated, extremely professional.’

‘KWKR Team is committed to protecting client interests. With more than a decade of legal experience, that commitment comes with a customised legal strategy that best suits our needs and goals as well as a promise, that they will zealously pursue a result that is in our best interest.’

‘KWKR Konieczny Wierzbicki i Partnerzy stands out in the legal landscape through its deep commitment to technological proficiency and a clear understanding of the tech industry’s nuances, making it a standout partner for GDPR compliance and broader data protection matters.’

‘What sets this team apart is their genuine enthusiasm for their work and their clients’ industries, coupled with a proactive approach to legal challenges. This synergy of passion and expertise not only fosters a deep trust with clients but also enhances the solutions provided, reflecting a deep dedication to not just meeting but exceeding client expectations. I’ve enjoyed simple and efficient cooperation with Mariusz Purgal.

‘’Each person in the team tries their best to solve the problems well and quickly. Their time management is exceptional, they are always ready to help and keep their deadlines.’

‘The individuals we work with stand out with their determination, work ethic and overall friendliness. They are very precise at their work, they try to not leave any problems left behind.’

Key clients

Hitachi Energy


Saventic Health Sp. z o.o.


Diagmatic Sp. z o.o.


Data4Cure Sp. z o.o.


Ailleron S.A.


Van der Vorm Vastgoed Groep Sp. z o.o.


Novobet Sp. z o.o.


PIRS Polska Sp. z o.o.


Polskie Sieci Elektroenergetyczne S.A.


Ministerstwo Finansów


People Force Ltd


Yggdrasil Sp. z o.o.


Trify Pożyczki Sp. z o.o.


Fitqbe sp. z o.o.


Woltair.pl Sp. z o.o.


Work highlights


  • Advising Hitachi Global Business Services on the processing of personal data complies with applicable regulations in the regions where the company operates.
  • Supporting the legal department and the Data Protection Officer of Polskie Sieci Elektroenergetyczne on issues related to RODO.
  • Provided a comprehensive audit and implementation of RODO.

Wardynski & Partners

Leading the practice at Wardynski & Partners, Krzysztof Wojdyło is well-placed to handle matters involving e-commerce, blockchain and privacy issues. The team takes a multidisciplinary team, providing expertise across a wide range of sectors, including tech and pharmaceuticals. The group also specialises in advising on new technology matters, offering guidance to tech startups on fintech, blockchain and AI products and services.

Practice head(s):

Krzysztof Wojdyło


Testimonials

‘The team is very competent and pays attention to details.’

‘We highly recommend attorney Karolina Romanowska, who is always there whenever needed. Always helpful and competent, provides the service on the highest level.’

‘The people We work with are characterised by openness, friendliness, a perceived desire to help and, above all, high-quality professionalism and precision. Feeling that we have the support of these people makes us feel more confident in what we do.’

A&O Shearman

The team at A&O Shearman is led by Krystyna Szczepanowska-Kozłowska, who directs the team in providing strategic advice to national and global clients on cross-border data privacy and protection matters. Utilising its wealth of specialists in complementary areas, such as employment, finance and IP. The team has also engaged with new trends in the market handling the deployment of generative AI for clients.

Practice head(s):

Krystyna Szczepanowska-Kozłowska


Testimonials

‘Highly skilled and competent team provides us with tailor-made solutions. We have never worked with better lawyers.’

APLaw Artur Piechocki

The team at APLaw Artur Piechocki is well-regarded for providing comprehensive advice on general data protection issues including GDPR compliance, while also providing more specialised guidance on privacy issues in the TMT sector in the areas of data donations, data tokenisation and big data. The firm’s strong international network allows it to take on cases both domestically and within the EU, despite its boutique size. Leading the team is Artur Piechocki, who specialises in ICT law and cyber security.

Practice head(s):

Artur Piechocki


Testimonials

‘Data privacy is a highly regulated field with constantly evolving laws. The team excels in this area, demonstrating a deep understanding of international, regional and local regulations.’

‘The individuals we work with stand out due to their exceptional combination of expertise, dedication and a client-focused approach. What truly sets them apart from competitors is their deep specialisation in data privacy and protection, combined with their ability to provide practical, commercially-relevant advice.’

‘The team is composed of individuals who have honed their expertise specifically in data privacy and related fields. This focused specialisation allows them to dive deep into complex legal matters, anticipate regulatory changes and provide tailored, cutting-edge solutions that generalist competitors often lack.’

Key clients

Supermedia


IQVIA


9Bits


Cloudity


Totalbet


Film Produkcja


Pattern


Domar


Data Lake


Supermedia


Sesderma


Magic Box International


Ediba


Work highlights


  • Advises Data Lake on personal data protection and GDPR compliance connected with data donation and data tokenisation on the Warsaw Stock Exchange.
  • Advises Supermedia on personal data protection issues and GDPR compliance.
  • Advising 9Bits on GDPR audit and compliance.

Kochanski & Partners

Providing ‘innovative solutions’, the team at Kochanski & Partners has substantial experience handling data privacy, protection and security matters, owing to its client base of leading multinational companies across key industries such as finance, fintech and medtech. The team also specialises in cross-border data transfers, data processing and transfer agreements, as well as cybersecurity audits and policies. The team is led by Piotr Kochański, who is well-versed in technology transfers, and Monika Maćkowska-Morytz,who has relevant experience in handling audits.

Practice head(s):

Piotr Kochański; Monika Maćkowska-Morytz


Testimonials

‘Our cooperation with the firm has been very positive. Their strengths include deep expertise, responsiveness and a collaborative approach.

‘The individuals we work with are reliable, knowledgeable and proactive. They stand out for their quick understanding of our needs and practical solutions. We especially value their strong communication and problem-solving skills.’

‘The team is well-organised, operates very efficiently and is well-versed in the new data protection regulations.’

‘The people we have had the pleasure of working with are extremely responsive, experienced and committed. We value them for their business agility and high competence.’

‘Monika Maćkowska-Morytz is a leading expert in data protection, guiding our firm through the complexities of this field.’

‘Kochański & Partners stands out for its client-focused approach and deep expertise across diverse legal areas. We appreciate the team’s ability to provide tailored solutions with strong communication and collaboration.’

‘The individuals we work with at Kochański & Partners truly stand out due to their deep expertise, professionalism and dedication to client service. What sets them apart from competitors is their proactive approach to problem-solving and their ability to think creatively when addressing complex legal matters.

‘We particularly value their responsiveness and commitment to clear communication.’

Key clients

Identt


Equinity Service Limited


Clininote


ERGO Hestia


mBank


Pandora Jewellery CEE


BOX Poland


SGI Group


Murapol S.A.


LOT Polish Airlines


Perfect Gym


PKO BP S.A.


Ringier Axel Springer Polska


TIDIO Poland


Havi Logistics


Idom


Savills


Work highlights


  • Advising and providing Clininote with process development advice and data privacy opinions on projects aimed at improving automation tools.
  • Advising Ringier Axel Springer Poland on issues at the intersection of media law and the right to privacy of individuals who are the characters of articles circulated by the publisher.
  • Advising and representing Polish Airlines in 13 court cases brought by the client against the Data Protection Authority.

PwC Legal Zelaznicki sp.k.

PwC Legal Zelaznicki sp.k. boasts a large domestic and multinational client base it advises on matters ranging from personal data law to GDPR compliance. The team also has a more specialised capability in advising on the global IT environment and cybersecurity. Leading the team is Paulina Komorowska-Mrozik, who handles all aspects of personal data protection, including compliance, documentation and data transfer impact assessments. She is also adept at representing clients in relevant proceedings before the Polish authorities.

Practice head(s):

Paulina Komorowska-Mrozik


Key clients

Benefit Systems S.A.


PKN Orlen S.A.


Fundacja Drzewo i Jutro


MUFG (Link Group)


Skivak sp. z o.o. / Grupa OLX sp. z o.o.


Work highlights


  • Continuing to provide on-going legal advice in the field of personal data protection for MUFG, concerning GDPR rules.
  • Provided a report for Grupa OLX sp. z o.o. on various pieces of legislation.
  • Provided essential legal counsel to BenefitSystems S.A. during their strategic acquisition of several gym clubs.

SSW

Displaying ‘extensive theoretical and practical knowledge‘, SSW’s practice covers cross-border matters across such industries as IT, tech and life sciences. The team handles GDPR implementation projects, compliance audits and international data transfers, in addition to representing clients before the Polish Data Protection Authority. Leading the team is Agnieszka Witaszek, with experience in all aspects of data privacy, particularly in mapping and managing data privacy processes.

Practice head(s):

Agnieszka Witaszek


Testimonials

‘The law firm has a team of lawyers with extensive theoretical and practical knowledge, which enables them to provide clients with good advice, even in difficult cases.’

‘The staff of the law firm stand out for their excellent communication skills and extensive knowledge. They are always approachable and respond quickly to requests for assistance. Their ability to explain even complex legal issues clearly and understandably makes working with them both easy and effective.’

‘We have valued Agnieszka Witaszek’s ability to navigate challenging situations with ease, always ensuring that the solutions she provides are practical and adhere to all regulatory requirements. Her dedication to maintaining high standards of compliance while addressing the practical needs is commendable.’

Key clients

Praucj Group


LX Pantos


Axpo Solar


Axpo


Work highlights


  • Designed new privacy rules for Axpo and contract review procedures.
  • Conducted a comprehensive privacy audit regarding all of LX Pantos’ business activities in Poland and relations with its parent company in South Korea.
  • Designed new privacy communications with its online users for Pracuj Group.

WKB Lawyers

WKB Lawyers assists clients in a variety of industries such as life sciences and IT, courtesy of its multi-disciplinary team of experts from the firm’s various sectors. The practice also notably encapsulates cybersecurity, offering advice on compliance with domestic and EU regulations. Jointly leading the team is Agnieszka Wiercińska-Krużewska , who specialises in new technologies and IT contracts, while Aleksandra Urbanowicz concerns herself with the e-commerce sector. Also leading the department, Piotr Filipowski focuses on cybersecurity matters and IT contracts.

Practice head(s):

 


Agnieszka Wiercińska-Krużewska; Aleksandra Urbanowicz; Piotr Filipowski


Testimonials

‘The team, known for their expertise and dedication, consistently goes above and beyond for their clients. What sets them apart is their deep understanding of both local and international legal landscapes, allowing them to provide comprehensive and tailored solutions.’

‘They are all compassionate, quick-witted, and motivated lawyers. It’s always an honor to be able to work with them.’

‘Proactive’

Key clients

Polski Bank Komórek Macierzystych sp. z o.o.


11bit Studios S.A.


Ekstraklasa S.A.


Work highlights


  • Providing Data Protection Officer, ongoing services relating to data protection and the medical sector.
  • Providing assistance to 11bit studios S.A. as DPO.
  • Advising Esktraklasa S.A. on personal data processing regarding their online services, mostly regarding cookie use.