Bird & Bird Szepietowski i wspólnicy sp. k.’s ‘very strong’ data privacy and protection team advises global, EU-based, and domestic clients on a broad range of mandates, including data breaches, proceedings before regulators, and data transfers. It also supports clients with cookie compliance matters and direct marketing. ‘Excellent lawyer’ and data protection specialist Izabela Kowalczuk-Pakuła leads the practice, and she also co-founded the Association of Data Protection Practitioners. Senior associate Marta Kwiatkowska-Cylke is a key name within the team, with significant expertise in data breaches and cross-border matters. Of counsel Emilia Stępień, who has previous experience as an in-house lawyer and data protection officer, is also noted.

The team at Dentons is ‘very knowledgable’ and has ‘great territorial coverage’. It is notably strong in representing international internet platforms, and another key area of growing expertise is the connected and autonomous car space. Karol Laskowski leads the team, and in May 2022, she was appointed to co-head of the Europe-wide TMT group. Laskowsi focuses on advising international media, technology and telecoms groups. Senior associate and data breach expert Aleksandra Danielewicz has substantial in-house experience. Dariusz Czuchaj left the firm.

For Kobylanska Lewoszewski Mednis, contentious and non-contentious work in the data privacy space for clients from the e-commerce, media, technology, video games, and finance sectors is a significant focus. Co-founders Anna Kobylańska, Marcin Lewoszewski and Arwid Mednis jointly head the practice. Kobylańska ‘has excellent knowledge of GDPR’, especially regarding its implementation at EU level, as well as the use of new technologies to collect and process personal data. Lewoszewski has substantial experience in supporting global media, gaming, and telecoms companies with regulatory mandates, and is also praised as ‘a heavyweight player in data protection litigation’. Mednis is an expert in personal data protection law, as well as the implementation of GDPR for financial institutions and public entities.

Rymarz Zdort Maruta‘s data privacy and security practice ‘offers experts in the field of personal data protection’ and has a strong IT and e-commerce focus, with the financial sector, retail, and media also being industries of strength. Its offering includes GDPR compliance and large-scale projects, such as data transfers involving multiple jurisdictions. It also represents companies before the Polish Data Protection Authority. The team is co-led by Marcin Serafin and Sławomir Kowalski; Serafin has experience in assisting clients with data breaches, and Kowalski, a previous member of the personal data protection working party at the Ministry of Digital Affairs, has a specific focus on technology, insurance, and e-commerce. Paweł Tobiczyk was promoted to partner in December 2021.

The personal data protection team at Traple Konarski Podrecki & Partners has a broad-ranging practice, from implementing and applying GDPR and representation before the Polish Data Protection Authority, to assisting with compliance audits and the cross-border transfer of data. Additionally, managing data breaches, data anonymisation, and matters involving biometric data are within the team’s capabilities. Co-founder Xawery Konarski and Grzegorz Sibiga jointly lead the team. In July 2022, Dominika Nowak and Katarzyna Syska were promoted to managing associate and counsel, respectively.

CMS Cameron McKenna Nabarro Olswang Posniak i Bejm sp.k.‘s data protection team sits within the firm's IT and TMT practices. Its offering extends across the full scope of data protection and GDPR mandates, including representation before the Data Protection Authority, support with cybersecurity and data breaches, and cross-border work. Tomasz Koryzma heads the practice and advises global technology companies. Recently promoted counsel Damian Karwala has ‘exceptional knowledge of cross-border transfer subjects’. Adriana Zdanowicz-Leśniak was appointed to senior associate in July 2022.

DLA Piper Giziński Kycia sp.’s team is praised as ‘one of the best in the GDPR space in Poland’; it handles GDPR implementation projects for domestic and international clients in the banking, insurance, pharmaceutical and media industries. Ewa Kurowska-Tober leads the team and is also the global co-chair of the firm’s data protection, privacy and security sub-group. She advises clients from highly regulated sectors on GDPR and privacy compliance mandates, as well as cross-border data transfers. Counsel Magdalena Koniarska is also notable and supports international companies with personal data protection matters.

The data privacy team at Domanski Zakrzewski Palinka is led by Bartosz Marcinkowski, who supports both domestic and foreign companies; he also has a strong academic background in data protection law. The practice undertakes GDPR compliance mandates and data transfers, and it also assists clients with the handling of data breaches. Marcinkowski is supported by Sylwia Kuca, who handles Polish and EU law compliance matters.

Kieltyka Gladkowski KG Legal’s data privacy and data protection team advises clients on the implementation of GDPR, assists with the drafting of data processing agreements, and handles data breaches. It also ‘handles international data transfer compliance and cross-border mandates within the new technology, life sciences and international trade sectors’. Additionally, it is increasingly involved in data protection matters regarding blockchain projects. Kraków-based Małgorzata Kiełtyka jointly leads the team with Kazimierz Jakub Gładkowski in Warsaw, and both are praised as ‘true experts in the field of data protection’.

The team at Lubasz i Wspólnicy - Kancelaria Radców Prawnych provides audits in the personal data protection space and advises on modern technologies as well as the implementation of data protection systems. Counsel Dominik Lubasz, Monika Namysłowska, and newly promoted managing partner Witold Chomiczewski lead on much of the work. Edyta Bielak-Jomaa brings her experience as former President of the Personal Data Protection Office to the group. Adam Szkurlat is praised as having ‘a great data protection practice’.

The data privacy and protection team at Olesinski & Wspolnicy operates in close tandem with the firm’s IP and TMT teams, chaired by Andrzej Boboli in Warsaw. Magdalena Kaleta-Maniak, also based in Warsaw, and Ludmiła Łuczak in Wrocław co-lead the data privacy team; Łuczak’s practice combines data protection, TMT, and employment law. Data protection in the sphere of e-commerce activities, which is a strong focus for Boboli, personal data in new technologies, and cybersecurity are all part of the regular workload.

Baker McKenzie Krzyzowski i Wspólnicy Sp.k.‘s data privacy practice sits within the firm’s IP and technology department and focuses predominantly on the financial, healthcare, and automotive sectors, servicing both local and international clients. Data transfers, employee privacy matters, and personal data breaches are all within the team’s capabilities, as are cybersecurity mandates. The wider team is led by Marcin Fijalkowski, with counsel Radoslaw Nozykowski overseeing the local privacy practice. Senior associate Marcin Fiałka focuses on the pharmaceutical and healthcare industries.

Gawroński & Partners S.K.A.’s technology and data protection practice is adept at advising clients in the banking and finance, energy and utilities, and telecoms and IT sectors. The team’s offering includes GDPR compliance audits, advice on data breaches, and representation in proceedings before the President of the Polish Data Protection Office. Maciej Gawroński and Michał Ćwiakowski jointly lead the team, and Čwiakowski ‘has extensive knowledge in the field of personal data protection in the financial market’.

The data protection and compliance team at the Kraków-based TMT boutique firm Konieczny, Wierzbicki Kancelaria Radców Prawnych sp.p. advises clients in the IT, fintech, med-tech, and financial spaces on personal data processing and transfer matters, as well as GDPR compliance. Michał Czuryło leads the group and assists clients with data privacy matters and regulatory mandates, as well as conducting audits. Managing partner Michał Konieczny is another active team member. In January 2022, Anna Dabrowska-Lipka joined the team from Sławomir Jaromin Kancelaria Adwokacka.

Katarzyna Szczudlik leads the data protection practice at SSW Pragmatic Solutions, which has a strong focus on assisting clients in the financial sector, as well as media and entertainment companies. The practice’s offering includes undertaking data processing projects and providing cybersecurity advice. Privacy-related support regarding NFTs is a growing area for the team. Szczudlik combines her knowledge of data protection and financial regulations in her practice, and she is supported by Marta Pasztalenie, who is notable in GDPR implementation matters.

Wardynski & Partners’ data protection team thrives in the financial services, new technologies, and HR arenas, advising on data protection regulations and projects involving personal data flow. In its day-to-day advice, it covers data subject requests and reviews of internal documentation. Representation before the Personal Data Protection Office is also part of the team’s offering. Krzysztof Wojdyło heads the practice and is skilled in new technologies law in particular. Karolina Romanowska is also notable.

The data privacy team at Allen & Overy, A. Pedzich sp. k. sits within the firm’s IP practice and is chaired by IP specialist Krystyna Szczepanowska-Kozlowska, who is strong in the telecoms, media, life sciences and pharmaceutical sectors. The team benefits from the firm’s strong local and international connections, allowing it to conduct cross-border projects for its clients. In May 2022, Justyna Ostrowska was promoted to counsel, and is praised for her ‘in-depth knowledge of IP and GDPR’.

Boutique law firm APLaw Artur Piechocki is dedicated to IT and TMT law, and it handles data privacy, protection, and GDPR compliance matters, as well as conducting due diligence audits. Founder and 'real star' Artur Piechocki heads the practice and has experience advising both Polish and international clients from the IT, telecoms, and media sectors.

DWF Poland Jamka Sp.k’s data protection team is an extension of the firm’s UK-based practice and handles data transfers and GDPR mandates. Gerard Karp leads the group, having joined the firm in October 2021 from PwC Legal Zelaznicki sp.k., and counsel Marian Giersz is also a notable team member. Karp’s practice encompasses personal data protection advice and GDPR implementation mandates for domestic and international companies, while Giersz is skilled in conducting GDPR audits.

Counsel Paulina Komorowska was promoted to head of the IP, TMT and data protection practice at PwC Legal Zelaznicki sp.k. in October 2021, and she brings her expertise in new technologies law to her new role. The team handles Polish GDPR implementation projects, data breaches, and data transfers, as well as data protection mandates concerning cloud-based solutions.

WKB Wiercinski, Kwiecinski, Baehr's data protection team provides day-to-day advice for its clients, and also conducts audits of personal data processes and represents clients in proceedings before the Polish Data Protection Authority. Practice head Agnieszka Wiercińska-Krużewska is active in advising TV content producers and broadcasters, and she is also strong in the cybersecurity space. Karolina Miksa departed in May 2022 for an in-house position at PayU.