Firms To Watch: Data privacy and data protection

EVERBERG‘s data protection team is led by Natalia Nader and is particularly noted for assisting clients from the retail sector with the creation of privacy and cookie policies, as well as for conducting GDPR audits.

Data privacy and data protection in Poland

Bird & Bird Szepietowski i wspólnicy sp. k.

Bird & Bird Szepietowski i wspólnicy sp. k.’s ‘very strong’ data privacy and protection team advises global, EU-based, and domestic clients on a broad range of mandates, including data breaches, proceedings before regulators, and data transfers. It also supports clients with cookie compliance matters and direct marketing. ‘Excellent lawyer’ and data protection specialist Izabela Kowalczuk-Pakuła leads the practice, and she also co-founded the Association of Data Protection Practitioners. Senior associate Marta Kwiatkowska-Cylke is a key name within the team, with significant expertise in data breaches and cross-border matters. Of counsel Emilia Stępień, who has previous experience as an in-house lawyer and data protection officer, is also noted.

Responsables de la pratique:

Izabela Kowalczuk-Pakuła

Autres avocats clés:

Marta Kwiatkowska-Cylke; Emilia Stępień; Izabela Tarlowska

Les références

‘The team has a very good market position, particularly internationally. Lots of big cases go via the Polish data protection team as they are well connected with the strongest peers in Europe, and thus in a position to provide cross-border advice.’

‘Bird & Bird’s Data Protection department is very professional with extensive knowledge of GDPR in marketing. Clients can rely on the lawyers’ opinions and advice as they are keeping their eyes on changing GDPR rules and regulations on the Polish market.’

‘They have an ability to understand the technology behind data protection and cybersecurity matters that is far superior to most peers. They do justice to Bird & Bird’s global reputation.’

Principaux clients

Samba TV

BBDO Warszawa Sp. z o.o.

Michael Page

Stock Polska

Principaux dossiers

  • Supporting Samba TV with its operations on a daily basis, advising on the content of consent and privacy notices, and helping to design intuitive UIs for expressing flexible choices by the users.
  • Advising Michael Page on the negotiation of agreements with its clients, including agreements involving data transfer to third countries such as India.
  • Supporting Stock Polska with various privacy and data protection issues.


The team at Dentons is ‘very knowledgable’ and has ‘great territorial coverage’. It is notably strong in representing international internet platforms, and another key area of growing expertise is the connected and autonomous car space. Karol Laskowski leads the team, and in May 2022, she was appointed to co-head of the Europe-wide TMT group. Laskowsi focuses on advising international media, technology and telecoms groups. Senior associate and data breach expert Aleksandra Danielewicz has substantial in-house experience. Dariusz Czuchaj left the firm.

Responsables de la pratique:

Karol Laskowski

Autres avocats clés:

Aleksandra Danielewicz; Anna Szczygieł; Karolina Cotronei

Les références

‘A very knowledgeable team with lots of experience.’

‘Dentons have great territorial coverage, delivering fast and accurate advice across many jurisdictions.’

‘The key benefit of working with the Polish team is their ability to support APAC in-region local counsels with a global, strategic view while going the extra mile to deliver high quality advice.’

Principaux clients

HERE Technologies




Principaux dossiers

  • Advising a major media and tech company on the use of AdTech data across multiple jurisdictions in the APAC region.

Kobylanska Lewoszewski Mednis

For Kobylanska Lewoszewski Mednis, contentious and non-contentious work in the data privacy space for clients from the e-commerce, media, technology, video games, and finance sectors is a significant focus. Co-founders Anna Kobylańska, Marcin Lewoszewski and Arwid Mednis jointly head the practice. Kobylańska ‘has excellent knowledge of GDPR’, especially regarding its implementation at EU level, as well as the use of new technologies to collect and process personal data. Lewoszewski has substantial experience in supporting global media, gaming, and telecoms companies with regulatory mandates, and is also praised as ‘a heavyweight player in data protection litigation’. Mednis is an expert in personal data protection law, as well as the implementation of GDPR for financial institutions and public entities.

Responsables de la pratique:

Anna Kobylańska; Marcin Lewoszewski; Arwid Mednis

Autres avocats clés:

Ewelina Kęciek

Les références

‘KLM is unique because it combines a business-oriented approach to legal advice with a reliable, strong, scientific position on the problems being solved. Cases that go to the law firm are always complicated and difficult, and the approach of the partners gives clients a sense of security.’

‘Great experts in data protection. Thorough knowledge and ready to deal with complex matters.’

‘Commitment, professionalism, willingness to help, and finding non-standard solutions are strengths of the team. This is a unique law firm on the market – the commitment and level of understanding of the business, as well as the need to become familiar with the entire process, puts this law firm above others.’

Principaux clients

Główny Geodeta Kraju

Principaux dossiers

  • Represented a global e-commerce company in a litigation case before the Polish Data Protection Authority and administrative court.

Rymarz Zdort Maruta

Rymarz Zdort Maruta‘s data privacy and security practice ‘offers experts in the field of personal data protection’ and has a strong IT and e-commerce focus, with the financial sector, retail, and media also being industries of strength. Its offering includes GDPR compliance and large-scale projects, such as data transfers involving multiple jurisdictions. It also represents companies before the Polish Data Protection Authority. The team is co-led by Marcin Serafin and Sławomir Kowalski; Serafin has experience in assisting clients with data breaches, and Kowalski, a previous member of the personal data protection working party at the Ministry of Digital Affairs, has a specific focus on technology, insurance, and e-commerce. Paweł Tobiczyk was promoted to partner in December 2021.

Responsables de la pratique:

Marcin Serafin; Sławomir Kowalski

Autres avocats clés:

Paweł Tobiczyk

Les références

‘The firm’s lawyers are experts whose knowledge goes far beyond traditional legal knowledge. Their unique and extensive experience in the field of new technologies allows them to meet even the most demanding projects.’

‘They are the pioneers and titans of IT legal work. The team has a very high level of expertise in the area in which it specialises; in particular, its many years of practice are evident.’

‘A law firm that is well know on the Polish market. They are perceived by clients as a law firm with extensive experience and their legal service is very effective. They proactively support clients in achieving their business goals and hire lawyers who are experts in their chosen fields.’

Principaux clients

Krajowy Operator Chmury Medycznej

Principaux dossiers

  • Advising Poland’s national cloud operator on various aspects of personal data protection, including negotiations and co-operation with Google and Microsoft to establish the Google Cloud and Microsoft Cloud regions in Poland.

Traple Konarski Podrecki & Partners

The personal data protection team at Traple Konarski Podrecki & Partners has a broad-ranging practice, from implementing and applying GDPR and representation before the Polish Data Protection Authority, to assisting with compliance audits and the cross-border transfer of data. Additionally, managing data breaches, data anonymisation, and matters involving biometric data are within the team’s capabilities. Co-founder Xawery Konarski and Grzegorz Sibiga jointly lead the team. In July 2022, Dominika Nowak and Katarzyna Syska were promoted to managing associate and counsel, respectively.

Responsables de la pratique:

Xawery Konarski; Grzegorz Sibiga

Autres avocats clés:

Dominika Nowak; Katarzyna Syska

Principaux clients

Polskie Sieci Elektroenergetyczne S.A

Gmina Miasta Tychy

Jastrzębska Spółka Węglowa S.A.

Canal + Polska S.A

National Research Institute

Provident Polska S.A.

Gmina Wrocław

RTB House

CMS Cameron McKenna Nabarro Olswang Posniak i Bejm sp.k.

CMS Cameron McKenna Nabarro Olswang Posniak i Bejm sp.k.‘s data protection team sits within the firm's IT and TMT practices. Its offering extends across the full scope of data protection and GDPR mandates, including representation before the Data Protection Authority, support with cybersecurity and data breaches, and cross-border work. Tomasz Koryzma heads the practice and advises global technology companies. Recently promoted counsel Damian Karwala has ‘exceptional knowledge of cross-border transfer subjects’. Adriana Zdanowicz-Leśniak was appointed to senior associate in July 2022.

Responsables de la pratique:

Tomasz Koryzma

Autres avocats clés:

Damian Karwala; Adriana Zdanowicz-Leśniak

Les références

‘The team’s strengths include in-depth knowledge around the subject matter, excellent understanding of the client’s business and limitations, and a unique ability to cover coordinated advice from different jurisdictions across the CEE.’

‘There is a willingness to go the extra mile to understand a client’s business, including a personal review of the operations and a proactive approach to getting knowledge of existing policies.’

‘What is unique while working with CMS, is not only that CMS may provide legal advice for many different jurisdictions within the EU, but clients are always receiving legal advice for different jurisdictions in one package, and answers are comprehensively coordinated internally within CMS and in the same format.’

Principaux clients


Komatsu Mining

Partner in Pet Food


Iron Mountain




Bausch + Lomb

In Post

International Paper


Principaux dossiers

  • Advising Box on the relocation of its binding corporate rules from the UK’s data protection authority to the Polish data protection authority.
  • Advising Iron Mountain on ongoing data protection matters, including fulfilling the role of a data protection expert in Poland.
  • Advising the Polish subsidiary of Partner in Pet Food on GDPR implementation, as well as providing day-to-day legal counselling in the context of GDPR requirements and local data privacy regulations.

DLA Piper Giziński Kycia sp.

DLA Piper Giziński Kycia sp.’s team is praised as ‘one of the best in the GDPR space in Poland’; it handles GDPR implementation projects for domestic and international clients in the banking, insurance, pharmaceutical and media industries. Ewa Kurowska-Tober leads the team and is also the global co-chair of the firm’s data protection, privacy and security sub-group. She advises clients from highly regulated sectors on GDPR and privacy compliance mandates, as well as cross-border data transfers. Counsel Magdalena Koniarska is also notable and supports international companies with personal data protection matters.

Responsables de la pratique:

Ewa Kurowska-Tober

Autres avocats clés:

Magdalena Koniarska

Les références

‘The team is very professional and always provides legal advice in a timely manner.’

‘DLA Piper is one of the best in the GDPR space in Poland with good professionalism, cooperation, and trust.’

‘The team has good knowledge and cooperation.’

Principaux clients






BNP Paribas


Cap Gemini


Credit Suisse


Dentsu Aegis



ING Bank


LEVI Strauss


Mid Europa

Moroccan Oil









UK Department of Digital Culture, Media and Sport




Principaux dossiers

  • Advising mBank on day-to-day data protection matters related to its operations in Poland and the CEE region, including analysis of applicable data retention policies in light of sectorial regulations, and advising on an alleged GDPR infringement in Slovakia.
  • Advising Audi on data protection issues relating to innovative tools offered to its clients.
  • Advising BNP Paribas on a range of data protection issues, as well as representing the client in proceedings before the Polish Data Protection Authority and administrative courts.

Domanski Zakrzewski Palinka

The data privacy team at Domanski Zakrzewski Palinka is led by Bartosz Marcinkowski, who supports both domestic and foreign companies; he also has a strong academic background in data protection law. The practice undertakes GDPR compliance mandates and data transfers, and it also assists clients with the handling of data breaches. Marcinkowski is supported by Sylwia Kuca, who handles Polish and EU law compliance matters.

Responsables de la pratique:

Bartosz Marcinkowski

Autres avocats clés:

Sylwia Kuca

Les références

‘Bartosz Marcinkowski with his team delivers a professional service.’

Kieltyka Gladkowski KG Legal

Kieltyka Gladkowski KG Legal’s data privacy and data protection team advises clients on the implementation of GDPR, assists with the drafting of data processing agreements, and handles data breaches. It also ‘handles international data transfer compliance and cross-border mandates within the new technology, life sciences and international trade sectors’. Additionally, it is increasingly involved in data protection matters regarding blockchain projects. Kraków-based Małgorzata Kiełtyka jointly leads the team with Kazimierz Jakub Gładkowski in Warsaw, and both are praised as ‘true experts in the field of data protection’.

Responsables de la pratique:

Małgorzata Kiełtyka; Kazimierz Jakub Gładkowski

Les références

‘They provide international customers with rapid, detailed, and customer-oriented support.’

‘The team has strong knowledge regarding legal regulation as well as practical insight into the market.’

‘The fact that the team at KG Legal is not only very knowledgeable, but also very flexible, makes them stand out. Technology wise, they are very modern.’

Principaux dossiers

  • Advised an American global entertainment industry network platform on software development procurement issues.
  • Advised a global financial institution, in co-operation with an American legal corporation, on the legal aspects of web-scraping and the extraction of economic data from global internet resources.
  • Advised a large telecoms company on the acquisition of a technology for the digitisation of analogue cable TV signals.

Lubasz i Wspólnicy - Kancelaria Radców Prawnych

The team at Lubasz i Wspólnicy - Kancelaria Radców Prawnych provides audits in the personal data protection space and advises on modern technologies as well as the implementation of data protection systems. Counsel Dominik Lubasz, Monika Namysłowska, and newly promoted managing partner Witold Chomiczewski lead on much of the work. Edyta Bielak-Jomaa brings her experience as former President of the Personal Data Protection Office to the group. Adam Szkurlat is praised as having ‘a great data protection practice’.

Autres avocats clés:

Dominik Lubasz; Monika Namysłowska; Witold Chomiczewski; Edyta Bielak-Jomaa; Adam Szkurlat

Les références

‘The strength of the firm is its experience and active participation in various bodies on an industry and country level. The support clients receive is of very high quality and their understanding of the business is very helpful to agreement negotiation – it simplifies the process a lot.’

‘The team developed an internal tool (GDPR Risk Tracker) which is available to the general market – it simplifies the process of managing processes and quality assurance around data protection.’

‘Both Dominik Lubasz and Witold Chomiczewski provide a deep understanding of the client’s business, which greatly increases the value and outcome of services; not only  are the recommendations relevant to the latest trends and possibilities, but they are very business-oriented.’

Principaux dossiers

  • Advised a consumer association on the design and operation of a device to analyse the space around it and generate statistical data of useable value.
  • Assisted a company offering financial services on the European market with a multi-faceted analysis related to the provision of data by a third party.
  • Advising a large Polish bulk service provider on the support of a data protection officer appointed by the client.

Olesinski & Wspolnicy

The data privacy and protection team at Olesinski & Wspolnicy operates in close tandem with the firm’s IP and TMT teams, chaired by Andrzej Boboli in Warsaw. Magdalena Kaleta-Maniak, also based in Warsaw, and Ludmiła Łuczak in Wrocław co-lead the data privacy team; Łuczak’s practice combines data protection, TMT, and employment law. Data protection in the sphere of e-commerce activities, which is a strong focus for Boboli, personal data in new technologies, and cybersecurity are all part of the regular workload.

Responsables de la pratique:

Ludmiła Łuczak; Andrzej Boboli; Magdalena Kaleta-Maniak

Autres avocats clés:

Lucyna Brayshaw; Bartosz Kolarz; Katarzyna Wężyk; Łukasz Pociecha; Zuzanna Prandecka-Walek

Les références

‘Practitioners demonstrated commitment and professional knowledge in the area of personal data protection. They confirmed their high legal qualifications, which they combine with understanding of solutions.’

‘The team is very strong and in fact one of the strongest in Poland.’

‘Ludmiła Łucza, Magdalena Kaleta-Maniak and Lucyna Brayshaw are an excellent support for all privacy matters.’

Principaux clients

Booksy International sp. z o.o.


DWS Draexlmaier Wyposażenie Wnętrz Samochodowych Sp. z o.o.



KIK Textil Sp. z o. o.

Limango Polska Sp. z o.o.

Brose Sitech Sp. z o.o.

Ten Square Games S.A.

Tidio Poland sp. z o.o.

Viessmann Technika Grzewcza Sp. z o.o.

Whirlpool Company Polska Sp. z o. o.

Gates Polska Sp. z o.o.

Deepsense.AI Sp. z o.o.

Sportano Sp. z o.o.


Umicore Poland Sp. z o.o.

Smulders Groep Poland Sp. z o.o.


Continental Opony Polska sp. z o.o.

Principaux dossiers

  • Assisted Tidio Poland with the adaptation of the company’s documentation taking into account recent and previous decisions of the European Commission.
  • Supported The Roads and City Maintenance Authority in Wrocław by carrying out a DPIA as part of an innovative project to automatically verify payment of fees by users of the paid parking zone.
  • Advised Umicore Poland on the regulation of personal data processing operations in connection with the launch of the new production site.

Baker McKenzie Krzyzowski i Wspólnicy Sp.k.

Baker McKenzie Krzyzowski i Wspólnicy Sp.k.‘s data privacy practice sits within the firm’s IP and technology department and focuses predominantly on the financial, healthcare, and automotive sectors, servicing both local and international clients. Data transfers, employee privacy matters, and personal data breaches are all within the team’s capabilities, as are cybersecurity mandates. The wider team is led by Marcin Fijalkowski, with counsel Radoslaw Nozykowski overseeing the local privacy practice. Senior associate Marcin Fiałka focuses on the pharmaceutical and healthcare industries.

Responsables de la pratique:

Marcin Fijałkowski; Radosław Nożykowski

Autres avocats clés:

Marek Rosiński; Marcin Fiałka

Principaux clients



Schneider Electric


RTB House

TUiR Warta




Principaux dossiers

  • Advising Schneider Electric on a variety of privacy and GDPR issues.
  • Advised JTI on the data protection aspects related to the implementation of whistleblowing procedures.

Gawronski & Partners S.K.A.

Gawroński & Partners S.K.A.’s technology and data protection practice is adept at advising clients in the banking and finance, energy and utilities, and telecoms and IT sectors. The team’s offering includes GDPR compliance audits, advice on data breaches, and representation in proceedings before the President of the Polish Data Protection Office. Maciej Gawroński and Michał Ćwiakowski jointly lead the team, and Čwiakowski ‘has extensive knowledge in the field of personal data protection in the financial market’.

Responsables de la pratique:

Maciej Gawroński; Michał Ćwiakowski

Autres avocats clés:

Piotr Biernatowski

Les références

‘Great expertise and strength in depth that is consistent with a much larger firm.’

‘Very professional and committed and have the ability to propose practical and business-oriented solutions to any possible issues.’

‘Combining in-depth legal knowledge with practical insight of applied technologies.’

Principaux clients


DPD Polska sp. z o.o.

Enea Centrum

Enea Innowacje

Giełda Papierów Wartościowych

Good Data Protection Standard



Millennium Bank


Phono Media


Plus Bank

Przedsiębiorstwo Państwowe Porty Lotnicze PPL


Polska Spółka Gazownictwa sp. z o.o.

Przedsiębiorstwo Wodociągów I Kanalizacji Jarocin

Rada Reklamy

Ringier Axel Springer Polska


TMS Brokers S.A.




4c Solutions

Bank Gospodarstwa Krajowego



EOS Poland

Keen Property Management

MDR Regulator


Operation Blessing International Relief and Development Corporation

ORM Trade

PGE Polska Grupa Energetyczna




Yatzex International LLC

ZGO Jarocin

Principaux dossiers

  • Advised Millenium Bank on the implementation of a SaaS video verification cloud solution with biometric identification.
  • Representing a Polish internet portal, owned by an international media group, in administrative proceedings triggered by a complaint brought before the Polish Data Protection Office by the NOYB Foundation concerning allegedly illegal use of the Google Analytics service by the client.
  • Assisting PGNiG OD with ongoing data protection matters.

Konieczny, Wierzbicki Kancelaria Radców Prawnych sp.p.

The data protection and compliance team at the Kraków-based TMT boutique firm Konieczny, Wierzbicki Kancelaria Radców Prawnych sp.p. advises clients in the IT, fintech, med-tech, and financial spaces on personal data processing and transfer matters, as well as GDPR compliance. Michał Czuryło leads the group and assists clients with data privacy matters and regulatory mandates, as well as conducting audits. Managing partner Michał Konieczny is another active team member. In January 2022, Anna Dabrowska-Lipka joined the team from Sławomir Jaromin Kancelaria Adwokacka.

Responsables de la pratique:

Michał Czuryło

Autres avocats clés:

Michał Konieczny; Anna Dabrowska-Lipka

Les références

‘Exceptional managing skills and a well organised team.’

‘Excellent communication, thorough knowledge on the subject, open-minded, and a focus on clients’ needs.’

‘Responsiveness, availability, niche expertise, and a good atmosphere.’

Principaux clients

Miquido sp. z o.o. sp. k.

Hitachi Energy Group

Saventic Health sp. z o. o.

Software Mind sp. z o.o.

Da Vinci Green Energy

Digital Ocean Ventures sp. z o.o.

Software Mind Sp. z o.o.

Ailleron S.A

ABB Group

GrapeUp sp. z o.o.

Diagmatic sp. z o.o.

AB InBev

Antigro sp. z o.o.

Andea Group

Quantum Qguar S.A.

Principaux dossiers

  • Advising Hitachi Energy Group on direct negotiations with counter-parties regarding agreements on the transfer of personal data, as well as preparing amendments and reviewing amendments to agreements prepared by counter-parties.
  • Advised Eepeer on a contract for provision of behavioural scoring services.
  • Advised Saventic Health on the creation of a platform for a clinical decision support system.

SSW Pragmatic Solutions

Katarzyna Szczudlik leads the data protection practice at SSW Pragmatic Solutions, which has a strong focus on assisting clients in the financial sector, as well as media and entertainment companies. The practice’s offering includes undertaking data processing projects and providing cybersecurity advice. Privacy-related support regarding NFTs is a growing area for the team. Szczudlik combines her knowledge of data protection and financial regulations in her practice, and she is supported by Marta Pasztalenie, who is notable in GDPR implementation matters.

Responsables de la pratique:

Katarzyna Szczudlik

Autres avocats clés:

Marta Pasztalenie; Aleksandra Czubek

Les références

‘The team has conceptual clarity and good attention to detail.’

‘The lawyers are dedicated and experienced.’

Principaux clients

iDeals Solutions Group Limited

Axpo Polska Sp. z o.o.

Clayton, Dubilier & Rice

Jeronimo Martins Polska S.A.

Lenovo Technology B.V. Oddział w Polsce


Principaux dossiers

  • Supporting a mass media and entertainment multinational with all aspects of its data breach management, including initial assessments, cooperation with internal and external entities, and representation before the Data Protection Authority.
  • Advising Axpo on all of its data protection issues, including employee-related matters, customer applications and platforms, data anonymisation, and data retention periods.
  • Advising iDeals on multiple privacy–related topics, including the implications of Brexit on data management structures, data handling procedures, data retention periods, compliance with the California Consumer Privacy Act, and China’s Personal Information Protection Law.

Wardynski & Partners

Wardynski & Partners’ data protection team thrives in the financial services, new technologies, and HR arenas, advising on data protection regulations and projects involving personal data flow. In its day-to-day advice, it covers data subject requests and reviews of internal documentation. Representation before the Personal Data Protection Office is also part of the team’s offering. Krzysztof Wojdyło heads the practice and is skilled in new technologies law in particular. Karolina Romanowska is also notable.

Responsables de la pratique:

Krzystof Wojdyło

Autres avocats clés:

Karolina Romanowska

Les références

‘The feature clients appreciate the most in the team is their responsiveness and the fact that they can always address queries to the right professionals quickly.’

‘The professionals are accessible at all times and clients are really well taken care of due to the team’s attitude, professional knowledge, and approach.’

Allen & Overy, A. Pedzich sp. k.

The data privacy team at Allen & Overy, A. Pedzich sp. k. sits within the firm’s IP practice and is chaired by IP specialist Krystyna Szczepanowska-Kozlowska, who is strong in the telecoms, media, life sciences and pharmaceutical sectors. The team benefits from the firm’s strong local and international connections, allowing it to conduct cross-border projects for its clients. In May 2022, Justyna Ostrowska was promoted to counsel, and is praised for her ‘in-depth knowledge of IP and GDPR’.

Responsables de la pratique:

Krystyna Szczepanowska-Kozłowska

Autres avocats clés:

Justyna Ostrowska

Les références

‘The team is diverse and understands the client’s needs well. They are always available and respond quickly. Their legal analysis and advice is thorough and sound.’

‘Justyna Ostrowska stands out with her very sensible, highly professional, and down-to-earth approach to client problems and advice. Solutions proposed by her are always tailored to the client’s needs and show her in-depth knowledge of IP and GDPR.’

‘Justyna Ostrowska creates a very collaborative environment and makes sure everything is taken care of in time.’

Principaux clients

The Sage Group plc

Cordiant Digital Infrastructure Limited

DoorDash, Inc.

APLaw Artur Piechocki

Boutique law firm APLaw Artur Piechocki is dedicated to IT and TMT law, and it handles data privacy, protection, and GDPR compliance matters, as well as conducting due diligence audits. Founder and 'real star' Artur Piechocki heads the practice and has experience advising both Polish and international clients from the IT, telecoms, and media sectors.

Responsables de la pratique:

Artur Piechocki

Les références

‘They know everything about data protection, privacy, and new technologies. Very sophisticated and niche technical knowledge combined with legal expertise.’

‘They meet all the requirements of a client with a unique business approach. They combine law with business.’

‘They have good knowledge and competence, but what distinguishes them from other advisors is the pursuit of the best possible understanding of the client’s specificity, needs, and expectations. It is also very important that when trying to solve the problem, they think about ensuring an appropriate level of customer security.’

Principaux clients









Data Lake

Human Biome Institute



ATS Technology


Magic Box International


NAJ International


Principaux dossiers

  • Advising Data Lake on personal data protection and GDPR compliance issues in the context of a pan-European project connected with data donation and data tokenisation on the Warsaw Stock Exchange.
  • Advising Matic on an international project connected with protection of personal data in implementation contracts in aviation software services under both Polish and French regulations.
  • Advising Supermedia on personal data protection issues and GDPR compliance, including the assessment of risks, duties, and liabilities under the transfer impact assessment guidelines, and opinions on The FAIR Data Principles.

DWF Poland Jamka Sp.k

DWF Poland Jamka Sp.k’s data protection team is an extension of the firm’s UK-based practice and handles data transfers and GDPR mandates. Gerard Karp leads the group, having joined the firm in October 2021 from PwC Legal Zelaznicki sp.k., and counsel Marian Giersz is also a notable team member. Karp’s practice encompasses personal data protection advice and GDPR implementation mandates for domestic and international companies, while Giersz is skilled in conducting GDPR audits.

Responsables de la pratique:

Gerard Karp

Autres avocats clés:

Marian Giersz; Pawel Dudojc

Les références

‘Sufficient expert knowledge and experience in different areas to be able to handle complex topics.’

‘Subject matter experts available from different areas, allowing usage of different perspectives on problems and issues. Involvement of specialists from all seniority levels depending on needs.’

‘The DWF team led by Gerard Karp is extraordinary in many ways. Gerard Karp is a business-oriented and experienced lawyer who provides tailored services. He always considers the unique needs of companies operating in different fields of the modern European market.’

Principaux clients

Elavon Financial Services DAC

The Insurance Guarantee Fund

Lyreco Polska sp. z o.o.

Adama Agricultural Solutions Ltd.

Samsung Electronics Polska sp. z o.o.

LeasePlan Fleet Management Polska sp. z o.o.

OLX Group Poland sp. z o.o.

Oknoplast Polska sp. z o.o.

Paccar Financial Polska sp. z o.o.

Ubezpieczenia Rankomat sp. z o.o. sp.k.

Principaux dossiers

  • Advised the Insurance Guarantee Fund on several issues relating to the design and implementation of a solution called the Electronic System for Central Risk Assessment, which aims to enable the online execution of matters related to the use of data collected in the IGF in the process of insurance risk assessment by creating e-services for insurance companies, citizens, and business entities.
  • Advised OLX Group Group Poland on a strategic project in the scope of the new EU legislation, the Digital Services Act.
  • Advising Lyreco Polska on a range of data protection matters, including building a unified data protection structure as a consequence of the merger between the client and Staples.

PwC Legal Zelaznicki sp.k.

Counsel Paulina Komorowska was promoted to head of the IP, TMT and data protection practice at PwC Legal Zelaznicki sp.k. in October 2021, and she brings her expertise in new technologies law to her new role. The team handles Polish GDPR implementation projects, data breaches, and data transfers, as well as data protection mandates concerning cloud-based solutions.

Responsables de la pratique:

Paulina Komorowska

Principaux clients

Polo Market

DH Business Services LLC

Merck KGaA

Billon Solutions

ADAMA Polska

ADAMA Agricultural Solutions Ltd.

PKN Orlen S.A. No

Benefit Systems S.A.

WKB Wiercinski, Kwiecinski, Baehr

WKB Wiercinski, Kwiecinski, Baehr's data protection team provides day-to-day advice for its clients, and also conducts audits of personal data processes and represents clients in proceedings before the Polish Data Protection Authority. Practice head Agnieszka Wiercińska-Krużewska is active in advising TV content producers and broadcasters, and she is also strong in the cybersecurity space. Karolina Miksa departed in May 2022 for an in-house position at PayU.

Responsables de la pratique:

Agnieszka Wiercińska-Krużewska

Les références

‘They have good knowledge of the industry, not just law. They know how to combine legal expertise with the business needs of the client.’

‘They are easy to cooperate with, delivering solutions and not complications.’

‘A responsive, proactive, and diligent data protection team that finds pragmatic solutions to tricky problems.’

Principaux clients

Pho3nix Foundation

Polski Bank Komórek Macierzystych

Centrum Rozliczeń Elektronicznych Polskie ePłatności S.A.

Fundacja PFR

Avallon MBO Fund

PIP Global Holdings andOddysey Investment Partners

Principaux dossiers

  • Advised Pho3nix Foundation on projects relating to international operations, including the transfer of personal data outside of the EEA.
  • Supporting Polski Bank Komórek Macierzystych by providing Data Protection Officer services.
  • Advised Polskie ePłatności S.A. on the acquisition of a majority stake in Team4U Sp. zo.o.