Next Generation Partners

Data privacy and data protection in Poland

Bird & Bird Szepietowski i wspólnicy sp. k.

The privacy and data protection practice at Bird & Bird Szepietowski i wspólnicy sp. k. is praised as a ‘premier consumer data protection law firm'. The team advises global, EU and Polish clients on data breaches, multi-jurisdictional strategic projects and data transfers, cookie compliance and direct marketing. Other recent work includes assisting clients with the national implementation of the European Electronic Communications Code and its consequences. ‘Outstanding’ and dedicated data protection lawyer Izabela Kowalczuk-Pakuła heads the practice. Senior associate Marta Kwiatkowska-Cylke is adept at coordinating data breaches and cross-border mandates, as well as having ‘very good knowledge of GDPR in marketing’. Counsel Emilia Stępień is an ‘excellent data privacy expert’.

Other key lawyers:

Marta Kwiatkowska-Cylke; Emilia Stępień; Paulina Jaraczewska


‘It’s my favourite data protection team to work with. They have profound knowledge of data protection issues which they use perfectly to provide always practical advice.’

‘The Bird & Bird team is very focused on delivering business-oriented advice. They can think out of the box and find business-friendly solutions. They respond and act quickly when needed.’

‘At times they have brought added value by going beyond the primary instructions and flagging issues that we ought to be aware of even if it is not within the strict premise of our instructions.’

‘Bird & Bird in my experience have proven to be the premier consumer data protection law firm in the world. They know the law and know how to accordingly guide business practices and solutions in a challenging multi-jurisdictional environment. Their billing is fair, and you always get high value.’

‘Izabela Kowalczuk-Pakuła is an outstanding privacy lawyer with deep knowledge of the subject matter. She is truly devoted to the common work and always updated in this fast-paced changing environment of privacy rules and provisions. Her remarks and suggestions have highly contributed to the project. Her understanding of the Internet and marketing industry is also exceptional in comparison to the other privacy leaders in Poland.’

‘Izabela Kowalczuk-Pakuła  is a person with high knowledge, I consider her as a highly professional advisor and at the same time as a good friend whose help and care I can always count on. Marta Kwiatkowska-Cylke is professional with a very good knowledge of GDPR in marketing, very helpful and dedicated to her clients. Emilia Stępieñ helps us periodically when her extensive experience and involvement is needed.’

‘Izabela Kowalczuk-Pakuła is just brilliant and Paulina Jaraczewska is highly motivated and reliable’

‘Emilia Stępieñ she is also an excellent data privacy expert, very thorough and business-oriented at the same time. You can feel safe, when you ask for her for advice and rely on it.’

Key clients

Samba TV

BBDO Warszawa Sp. z o.o.

Michael Page

Benefit Systems



Stock Polska

Work highlights

  • Advising Samba TV on its personalised TV experiences and tailored, preference-based ads as well as acting as a DPO for its European operations, advising on the content of consents and privacy notices, and helping design intuitive UIs for users to express flexible choices.
  • Supporting BBDO with organising digital marketing activities and providing comprehensive legal assistance on a variety of issues related to the implementation of the GDPR requirements.
  • Assisting Benefit Systems on various privacy and data protection issues.

Kobylanska Lewoszewski Mednis

Data and privacy is a core part of Kobylanska Lewoszewski Mednis' offering in both contentious and non-contentious mandates, especially in e-commerce, media, technology, video games and finance. The team also counts international law firms in its client roster.  Co-founders Anna Kobylańska, Marcin Lewoszewski and Arwid Mednis lead the team. Kobylañska has substantial experience in handling projects regarding internet domain names protection as well as cases before the Polish data protection authority; Lewoszewski is skilled in handling regulation matters for companies on the global media and telecoms market; and Mednis is active in GDPR implementation projects for financial institutions and public entities.


‘Kobylańska Lewoszewski Mednis sp.j. is a great team of professionals with a deep knowledge in the field of personal data protection. They take into account the particular needs of the client and deliver substantiated advice with proper risk assessments. They have great experience in GDPR proceedings and are the go-to firm in Poland in that regard. They always deliver their advice on time.’

‘The most unique thing about this team is the collaboration; they are very close to the client and do as much as possible to understand the client’s case. What is more, they are always available and ready to support.’

‘They try to wear the client’s shoes; the way they understand the client’s needs is incredible. Opinions are always suited to clients’ structures.’

‘Great relationship with the client, advice based on in-depth knowledge and understanding of the topic. Significant practical experience that allows them to easily estimate risks and evaluate the correct business approach.’

‘Excellent knowledge on the side of prof. Mednis who has outstanding know-how of GDPR and privacy issues.’

‘The practice is composed of specialists in their fields – with great knowledge of the law, market trends and jurisprudence of the courts and GDPR authority. I work with Anna Kobylanska on a daily basis, and the cooperation with her, her knowledge and the information provided by her are exceptional.’

‘Anna Kobylanska’s answers regarding personal data protection and copyright law are always at the highest level. She has a lot of knowledge about the conditions and nature of our business, cooperating with us in the preparation of solutions that best meet business needs, but within the framework of applicable law.’

‘Prof. Mednis is, in our opinion, the best expert on GDPR issues in Poland.’

Rymarz Zdort Maruta assists both Polish and European clients with data protection projects involving multiple jurisdictions and cross-border data transfers. Other core areas of focus for the group include privacy protection, GDPR compliance, profiling, cookies, real-time bidding and AI across the retail, IT, media and financial services sectors. Data protection expert Marcin Serafin and Sławomir Kowalski, who was previously a member of the personal data protection working party at the Ministry of Digital Affairs, jointly lead the practice. Paweł Tobiczyk, who is skilled in the implementation of GDPR, was recently promoted to the partnership.

Other key lawyers:

Paweł Tobiczyk


‘Provides multiple solutions with pros and cons descriptions.’

‘They have mastered their niche and are the go to place for IT projects.’

‘A broad view of the problem, high level of understanding of business problems and effectiveness in finding solutions which apply to me.’

‘The team has a high competence of personal data processing and protection, the team has its own working methods, proven operating patterns and templates.’

‘The people I work with have high competences, their own proprietary working methods, proven operating patterns and templates in the field of personal data protecting. They are open minded and also flexible in terms of new innovative forms of cooperation. They have a high personal culture, which translates into a professional approach to the customer.’

‘Rymarz Zdort Maruta is one of the best law firms we have worked with. We value Rymarz Zdort Maruta for their accessibility and out-of-the-box approach to difficult topics. The firm provides us with comprehensive support on large projects. In addition to typical service, the firm also provides us with in-house lawyer development opportunities. This ability to share knowledge is something that sets Rymarz Zdort Maruta apart from others.’

‘I am very satisfied with the cooperation with the lawyers from Rymarz Zdort Maruta. Each person is very well prepared for the matters Rymarz Zdort Maruta entrusts to them. In addition to the obvious things such as transparent settlements, huge knowledge of lawyers (including practical knowledge), Rymarz Zdort Maruta is distinguished by knowledge of the e-commerce and IT industry.’

‘Marcin Serafin is hands down the best data privacy lawyer in Poland.’

Key clients



Circle K



Inter Cars

NTT Poland

Perła – Browar Lubelski



Work highlights

  • Advised InPost on setting up data protection framework and privacy programmes.
  • Advising Operator Chmury Krajowej on various aspects of personal data protection, including setting up a subsidiary and negotiating and cooperating with Microsoft and Google
  • Advised Główny Geodeta Kraju in administrative and court cases regarding the qualification of the number of the Land and Mortgage Register as personal data and in a charge of obstruction of the investigation by the DPA.

Traple Konarski Podrecki & Partners

The team at specialist TMT firm Traple Konarski Podrecki & Partners has a core focus on all three disciplines and is particularly active in matters regarding internet, e-commerce and telecoms regulations and contentious matters. Kracow-based co-founder Xawery Konarski and Grzegorz Sibiga in Warsaw, who has expertise in personal data protection and GDPR implementation, are the practice heads. Jan Byrski, who has strengths in financial innovation law, and senior associate Katarzyna Syska are also names of note.

Other key lawyers:

Jan ByrskiKatarzyna Syska


‘The People, technology and collaboration are strengths of the team.’


CMS Cameron McKenna Nabarro Olswang Posniak i Bejm sp.k.

‘Outstanding’ IT and data protection specialist Tomasz Koryzma leads the team at CMS Cameron McKenna Nabarro Olswang Posniak i Bejm sp.k., which handles IT system implementation projects and related disputes, data protection and GDPR advisory services, including representing clients before the data protection authorities, telecoms projects and cybersecurity support. Damian Karwala specialises in TMC law and fellow senior associate Paulina Komorowska is skilled in new technologies and cybersecurity.

Practice head(s):

Tomasz Koryzma


‘Individual approach to the client with a business approach to the problem. A broader understanding of the problem while providing concrete support.’

‘They are always available and ready to solve your problems.’

‘High availability of the team, always prepared, always ready to give advice, thorough analysis of the case, exceptional knowledge of the market and data privacy issues, in-depth knowledge of Polish DPA decisions and practice; and able to prepare complex documentation on the basis of information given by the client, no matter how limited this information is.’

‘Tomasz Koryzma is an outstanding person in this area. He’s always very professional and involved. What is also very important he has comprehensive knowledge and experience.’

‘Damian Karwala has broad knowledge of international data transfers – I always take part in webinars, conferences if his speech is in the agenda. Excellent understanding of the Polish and international data privacy environment and always available to consult on difficult/urgent issues.’

Key clients

International Paper

Partner in Pet Food

Apo Discounter



eBay. Inc.

Iron Mountain


Ubezpieczenia Pocztowe

Grid Dynamics


Work highlights

  • Advising International Paper on various compliance and data-protection issues, including verification of GDPR implementation in a Polish subsidiary of International Paper and assistance in full-scope GDPR implementation in another International Paper subsidiary.
  • Advising the Polish subsidiary of Partner in Pet Food with regard to GDPR implementation.
  • Advising Diageo in relation to data privacy issues, including preparation of a model of cooperation with external marketing agencies and on the fulfilment of data protection notices.

DLA Piper Giziński Kycia sp.

Data protection and data privacy law, including data breach responses, audit and data mapping and compliance, are key areas of focus for the team at DLA Piper. In particular, the group acts for domestic and international clients in highly regulated sectors, such as banking, insurance, pharmaceutical and media. The group also handles complex GDPR implementation projects. Ewa Kurowska-Tober leads the practice and is also firm's global co-chair in this area; she has expertise in IT and advanced technologies law, and is particularly active in highly regulated sectors. Senior associate Magdalena Koniarska advises clients on personal data protection and data transfer.

Practice head(s):

Ewa Kurowska-Tober

Other key lawyers:

Magdalena Koniarska


‘The team understands the client’s needs very well and responds very quickly to the changing realities of the particular case they are handling.’

‘Each member of the team is an outstanding professional, each of them is characterised by very large knowledge supported by many years of experience, which is visible in the actions of the team.’

‘High competence of lawyers, rich experience in legal issue. Understanding client needs and business.’

‘The team is dependable.’

‘They are always well organised and professional.’

‘Their workshops are very useful, informative and valuable. I am always very content.’

‘They give short, clear, specific opinions, their opinions are good and professional and they have substantive knowledge.’

Key clients

Allegro (with Cinven, Permira, and Mid Europa Partners as the majority owners)





BNP Paribas


Cap Gemini


Credit Suisse


Dentsu Aegis



ING Bank


LEVI Strauss


Mid Europa

Moroccan Oil









UK Department of Digital Culture, Media and Sport


Żabka (a CVC Partners company)

Work highlights

  • Advised mBank on day-to day data protection matters related to its operations in Poland and Central and Eastern Europe, including analysis of applicable data retention policies in light of sectorial regulations and advising on a potential GDPR infringement in Slovakia which resulted in administrative proceedings being initiated before the local data protection authority.
  • Advising ING Bank on building and developing an innovative payment platform – Moje Usługi – for its clients, including guidance regarding privacy regulations, relevant notices and data flows.
  • Advising Audi on several IT and data protection projects relating to new services offered to its customers, including an app.

Domanski Zakrzewski Palinka

Domanski Zakrzewski Palinka‘s data privacy group is led by Warsaw-based Bartosz Marcinkowski, one of the founders of the Association of Data Protection Practitioners. Marcinkowski also has an academic background in data protection law. The team’s impressive client roster includes both Polish and international corporates, which it advises on GDPR implementation and compliance. Michał Kluska  has left the firm.

Practice head(s):

Bartosz Marcinkowski


‘Constructive remedies giving a clear course of action.’

Work highlights

  • Advised a global packaging manufacture on a global project involving the assessment of a personal data breach on client units in more than 30 countries around the world.
  • Advising an online sales platform on a regular basis, carrying out complex legal audits but primarily developing recommendations for the business in key areas such as changing the legal basis for processing the personal data of millions of users for marketing purposes.
  • Advising Mercedes Benz Polska on projects related to personal data.

Kieltyka Gladkowski KG Legal

The data privacy and data protection department at Kieltyka Gladkowski KG Legal  handles international data transfer compliance and cross-border mandates within the new technology and life sciences sectors. Data security in blockchain projects, cybersecurity and AI, as well as data breaches and projects involving data firewalls, outsourced security and crypto defence are also handled by the team. Małgorzata Kiełtyka in Kraków and Kazimierz Jakub Gładkowski in Warsaw jointly lead the team.


‘What makes KG Legal unique is the fact that the firm is small, yet applies the highest standards to the services provided. The partners are always available and are very knowledgeable in their fields, which is something other – mostly bigger – firms often lack. With regard to technology, for example regarding communication (calling, video conferences, etcetera), they are totally up to date.’

‘We are happy to have professionals like them on our sides. Communication is prompt and professional, all necessary technologies are used, billing is very comfortable and clear.’

‘KG Legal is one of our preferred partners in Poland for data protection matters, in particular in data protection matters relating to life-science/health care sector. They are always available, super reliable and provide extremely competent but still pragmatic advice which is easy to understand for the client.’

‘Their practice is dedicated, responsive and proactive. we regularly receive newsletters with updates.’

‘Mr. Gladkowski, who combines extensive legal knowledge with an approachable attitude to clients and a positive, proactive attitude. In the context of our cooperation, he is characterised by outstanding knowledge and knowledge of cross-border legal regulations, which enabled him to solve complicated cases many times. In our opinion, Mr. Gladkowski, as an IT and new technologies enthusiast, stands out with his knowledge in mentioned areas compared to the Polish competition.’

‘The partners Malgorzata and Jakub are extremely professional, easy and pleasant to work with and provide their competent advice reliably and on time. Both are highly recommended.’

‘Małgorzata Kiełtyka has been providing legal advice which has been clear and concise.’

‘What makes the partners from KG Legal and Mr. Gładkowski and Ms. Kiełtyka, both experts in data privacy and data protection, stand out and different from the rest, is apart from the fact that the quality they provide is among the best, they are flexible, responsible and go all the way in their cases and for their clients. It is difficult not to recommend them to others.’

Work highlights

  • Advised the client operating in cryptocurrency exchanges on the new protocol on processing data in compliance with Know Your Customer for monitoring client transactions and reporting suspicious activity, in accordance with the 5AMLD Directive of the cryptocurrency exchange procedures related to data protection and cybersecurity.
  • Advised an international client concerning operations in renewable energy electric cars and how to prepare and create privacy policy so the client can safely accept communication and data from end customers with the use of dispersed protocol technology and smart contracts that additionally generates legal challenges in determining the applicable Polish jurisdiction in assessing the privacy policy.
  • Assisted the client in respect of a sensitive data transfer from Europe to the US, based on the recommendations after Schrems II judgment, taking into consideration guidelines regarding data encryption and data anonymisation.

Lubasz i Wspólnicy - Kancelaria Radców Prawnych

Personal data protection, providing audits and the development of IT and modern technologies in this area are core parts of the data practice at Lubasz i Wspólnicy – Kancelaria Radców Prawnych. The team also represents clients before the Polish data protection supervisory authority and administrative courts. Managing partner Dominik Lubasz, Monika Namysłowska and Witold Chomiczewski lead the group from Łódź. Edyta Bielak-Jomaa, former President of the Personal Data Protection Office, joined the firm in January 2021.

Other key lawyers:

Edyta Bielak-Jomaa


‘The team consists of specialists in their field. The company offers comprehensive service of the issues, but also adapts to the expectations and financial capabilities of the client.’

‘True data privacy, data protection, and GDPR experts. Data privacy is a dealbreaker subject in my company services and Lubasz i Wspólnicy – Kancelaria Radców Prawnych sp.k. delivers outstanding support in this field.’

‘A talented team, a very professional approach to clients and very good specialists.’

‘Very good reputation backed with publications and with joining of the ex-President of the Polish Data Protection Office – Mrs Edyta Bielak-Jomaa. Cost sensitive, business oriented, practical, easy to cooperate with and good response times.’

‘When I work with their lawyers I do not feel that they are from an external company. They act like team members and participate in face-to face meetings with our business to thoroughly understand the details of the case/project. At the same time, when advising, they do not focus solely on the legal aspects but as fast as possible indicate possible business consequences when we do not notice them.’

‘When we talk about new ideas, we can always count on the support of Dominik Lubasz, the partner, who analyses each issue on many levels, sometimes seemingly unrelated to the issue being analysed.’

‘Dominik Lubasz is an absolute expert in his field, and at the same time a great person, offering substantive advice at the highest level, is flexible and adapts to the needs of your business.’

‘Dominik Lubasz is practical, optimistic and a top expert in data protection. Witold Chomiczewski is an excellent fit to Dominik.’

Key clients

Fundacja Panoptykon, Mr. Wojciech Klicki

Work highlights

  • Representing Mr Wojciech Klicki in a case regarding personal data protection and the assessment of the legality of processing of personal data from the PESEL register by Poczta Polska S.A. for the purposes of presidential elections which were to be conducted by correspondence but were ultimately not.

Olesinski & Wspolnicy

The team at Olesinski & Wspolnicy focuses on data privacy and data protection, including GDPR implementation and compliance projects. The group coordinates with the firm’s TMT team, led by Andrzej Boboli, to provide advice to the e-commerce industry. Another core focus of the practice includes projects involving new technologies, such as the acquisition and implementation of IT systems and the development of IT solutions and mobile applications. The practice is co-led by new technologies and e-commerce expert Magdalena Kaleta-Maniak and Ludmiła Łuczak who has a focus on data protection within HR departments.

Other key lawyers:

Justyna Korycka; Katarzyna Serwatka; Bartosz Kolarz; Lucyna Brayshaw


‘Very good and efficient communication, professional knowledge at the highest level, partners always available and ready to help, professional and reliable advice, all in a friendly and pleasant atmosphere of cooperation.’

‘Very thorough in analysing all aspects of the particular matter and identifying all potential risks, are capable of using modern communication strategies and invest a reasonable amount of time in communicating with the client in order to establish the understanding of a problem and discussing potential solutions’

‘At O&W, they understand business, they act agilely, using modern project management methods and are constantly cooperating with the client, thanks to which they achieve faster and better results.’

‘Quick turnaround on requests and flexible for urgent matters. They have significant experience in data/privacy, which speaks volumes when working with them on any given issue. Their responses allow for advice that is not only rooted in well-researched legal advice but also actionable advice.’

‘I appreciate the direct approach to the customer from Ludmiła łuczak, who has a very wide range of knowledge. The service is also always provided with 100% commitment, availability, quick contact, very constructive and concrete opinions’

‘As our direct contact in all data protection cases, Magdalena Kaleta-Maniak is a great partner for business. She understands the business perspective, thinks fast, looks for a most practical solutions that allows securing legal compliance while allowing maximum flexibility for business processes. She is a great communicator, asking the right questions to get to the bottom of problem, understanding status quo and business needs.’

‘Andrzej Boboli is a recognised data protection expert, as one of the very few on the market also in the gaming area. Publishing books and interesting articles, his advice is based on extensive experience and solid legal analysis.’

‘I am very satisfied with the cooperation with Mrs Katarzyna Serwatka. She is a very competent, committed person who is available to help you at any time. She explains the legal issues with patience and clearness.’

Key clients

AI Busters Sp. z o.o.

Aneks Polska Sp. z o.o. sp.k.


AKS Precision Ball Polska Sp. z o.o.

ATM Grupa S.A.

Black Swan sp. z o.o. ASI SKA

Booksy International sp. z o.o.

bValue sp. z o.o. ASI sp. k.


Curaden Polska Sp. z o.o.

DEVnet High Performance Solutions Sp. z o.o.

DIP Draexlmaier Engineering Polska Sp. z o.o.

DSV International Shared Services sp. z o.o.

DWS Draexlmaier Wyposażenie Wnętrz Samochodowych Sp. z o.o. S.A.

Exlabesa Building Systems Sp. z o. o.

“ERBUD – Wspólne wyzwania” Fundacja im. Eryka Grzeszczaka

Fidiasz EVC

Gigaset Communications Polska Sp. z o.o.

GKN Driveline Polska Sp. z o.o.

GOK Regler und Armaturen Polska Sp. z o.o.



JOST Polska Sp. z o.o.

Karmar S.A.

KIK Textil Sp. z o. o.

Kolej Gondolowa Jaworzyna Krynicka S.A.

Leoni Kabel Polska sp. z o.o

Limango Polska Sp. z o.o.

Omega Meble sp. z o.o.

Patronad sp. z o.o. Sp. zo.o.

Polskie Koleje Linowe S.A.

SFC-Solutions Piotrków Sp. z o.o.

SI-Consulting Sp. z o. o.

Sika Automotive Złotoryja Sp. z o.o.


Sitech Sp. z o.o.

Swimstone Sp. z o.o.

Ten Square Games S.A.

Tidio Poland sp. z o.o.

Tiny Dragon Adventure Games Sp. z o.o.

Tristone Flowtech Poland Sp. z o. o.

Versum sp. z o.o.

Viessmann Technika Grzewcza Sp. z o.o.

VOSS Automotive Polska Sp. z o. o.

Whirlpool Company Polska Sp. z o. o.

Whirlpool Polska Appliances Sp. z o.o.

WSP Polska Sp. z o.o.


ZREW Transformatory S.A.

Transfer Multisort Elektronik Sp. z o.o.

Work highlights

  • Advised Booksy International on its integration with Versum sp. z o.o. (
  • Advised Tidio on building and maintaining a legal compliance model in selected markets.
  • Supported CCC.S.A. on processing personal data in the HR department and with a particular focus on the circumstances arising from the COVID-19 pandemic.

Konieczny, Wierzbicki Kancelaria Radców Prawnych sp.p.

Michał Czuryło heads up the data protection and compliance department at Konieczny, Wierzbicki Kancelaria Radców Prawnych sp.p., which is a Kraków-based TMT boutique. Czuryło has expertise in implementing innovative systems for clients in the finance, telecoms, hospitality and entertainment sectors. More generally, the team handles multi-jurisdictional matters and GDPR compliance, and is active in projects involving innovative mobile applications and web platforms, mobile and internet banking systems, chatbots and facial recognition and algorithms for medical diagnosis.

Practice head(s):

Michał Czuryło

Other key lawyers:

Mariusz Purgał


‘The team is focused on the business needs of clients which are not always easy to deal with when it comes to privacy requirements. They are able to find balance for both sides on a contract level. Always open to help with implementing an improvement regarding personal data processes at the firm.’

‘Konieczny Wierzbicki Kancelaria Radców Prawnych provides professional legal advice. In its activities, it is guided by the agile approach, which guarantees a quick response to changing conditions.

‘The solutions proposed by the law firm are effective and always in line with expectations. The law firm follows market trends on an ongoing basis and very quickly implements those that help it provide its legal services in an even better way. A characteristic feature of the office’s operation is high flexibility and quick response to changing conditions – the agile approach.’

‘The law firm’s employees have extensive legal knowledge, especially in the field of data privacy and data protection, which they combine with technical knowledge. As a result, they offer solutions perfectly suited to each customer.’

‘The law firm’s employees have extensive and up to date legal knowledge. As a result, they inspire great trust among customers. They thoroughly analyse each case and, thanks to their competences in the field of technical knowledge, especially in the IT area, propose solutions customize to the client’s business. These solutions are effective and always prove themselves in practice.’

‘The team supported us in a big project, with a tight time schedule. The team was very flexible, both in the resources that were made available, as well as supporting the business across different time zones and in different languages. With KWKR’s support and great efforts, we managed to complete the project in time.’

‘Michał Czuryło is an exceptional specialist in data protection and data privacy. He draws attention to all the formalities that need to be fulfilled by the company to provide its employees and customers with the highest level of security. Data protection issues are not only his job but also his passion. This can be seen, for example, when he tries to make the employees aware of why the protection of personal or company data is so important. He is a lawyer we can rely on and we turn to him whenever we need an expert legal opinion on data protection.’

‘We recommend Mariusz Purgał for his excellent knowledge of foreign law – and Michał Czuryło for his above-average ability to adapt the company to foreign conditions. During their work, the gentlemen are characterized by accuracy and professionalism. With their help, formal requirements become much clearer and possible to meet.’

Key clients

Hitachi ABB Power Grids

ABB Power Grids Poland

Saventic Health Sp. z o.o.

Zurich Insurance

Superbet Zakłady Bukmacherskie Sp. z o.o.

Grape Up Sp. z o.o.

Antigro Sp. z o.o. Sp.k.

FindAir Sp. z o.o.

Diagmatic Sp. z o.o.

BIMPROQR Sp. z o.o.

Pro-Eco-Investment Sp. z o.o.

Ailleron S.A. Sp. z o.o.

Work highlights

  • Advised a group of companies on the process of spinning off part of the business and transferring it to another owner.
  • Assisted ABB Power Grids Poland in responding to a complaint regarding the observance of the right to process employees’ data in connection with the introduction of video surveillance.
  • Advising Ailleron on a major project involving the implementation of cloud-based banking application software in Asia.

SSW Pragmatic Solutions

The data protection practice at SSW Pragmatic Solutions advises clients on regulations and outsourcing in the banking sector, as well as providing cross-border advice on processing data in a HR and employment context and GDPR implementation. The team has also represented clients in administrative proceedings before the Polish data protection authority. Practice head Katarzyna Szczudlik joined the firm in September 2020 from Deloitte Legal, Ostrowski, Gizicki i Wspólnicy sp.k.Joanna Tomaszewska left the firm.

Practice head(s):

Katarzyna Szczudlik


‘We have great client experience with SSW. They are always responsive, responsible and professional.’

‘Timely response and efficient management of matters with a 100% ratio of successful assessments on privacy related issues. They are able to deliver good trainings to privacy teams on complex matters.’

‘Very professional attorneys, excellent knowledge, excellent communication. Very quick to answer questions and solve tasks. They know our business and the nature of our work which makes them unique.’

‘Very good expertise, good identification of legal risks and finding creative solutions.’

‘Good, practical and responsive advice.’

‘Katarzyna Szczudlik has exceptional expertise.’

Key clients

Jeronimo Martins Polska S.A.

Lenovo Technology B.V.  Oddział w Polsce


Sun Investment Group Polska Sp. z o.o.

iDeals Solutions Group Limited


Work highlights

  • Advised a Polish company operating in food distribution and specialised retail on privacy implications of its key business and marketing initiatives.
  • Assisted a technology company on various privacy-related issues in the context of its commercial agreements, marketing initiatives and internal data protection procedures.
  • Advised a newly created Polish branch of a European full service digital bank on launching its operations and offering products on the Polish market.

Wardynski & Partners

Wardynski & Partners‘ team advises on data protection laws and regulations in a HR context, in addition to new technologies and financial services. The group also provides day-to-day support on data subject’s requests, introducing  new marketing activities and reviewing internal documentation. Krzysztof Wojdyło leads the group, which is composed of lawyers from employment, regulatory, pharmaceutical and new technology backgrounds.

Practice head(s):

Krzysztof Wojdyło


‘Wardynski is a truly local Polish law firm, yet one that maintains the standards expected of global giants. Managing its services locally gives it a unique ability to adapt to the Polish market, to respond quickly, to be supported by the most experienced lawyers with strong commitment, and to be flexible in adapting to clients’ needs.’

‘The firm’s lawyers have an unrivalled knowledge of Polish law, while being able to place it in an international or cross-country context. This skill is essential when offering services to organisations operating in many countries where the recipients of advice or other legal services may, because of different customs, legal environments, etc., find it difficult to use services provided in the Polish tradition.’

‘Wardynski’s lawyers are always knowledgeable not only about law, but also quickly learn about clients’ businesses, market conditions etc. This allows them to identify their needs even more quickly and accurately.’

‘The firm’s lawyers are very courteous and take a deeply ethical approach to performing their duties. They are extremely knowledgeable, not only about the law, but also about the environment that this law is connected to. The opinions or information presented are always formulated concisely, clearly and comprehensibly.’

‘The company’s employees are characterized by professionalism, reliability and timeliness in carrying out cases. There is always a nice and constructive atmosphere during online meetings and conferences. The quality of the services provided was satisfactory and the price was within our budget. I consider the work of the team to be complex and it requires knowledge and experience.’

Key clients

Salling Group

Work highlights

  • Advised a global online marketplace on structuring processing of personal data.
  • Assisted an international corporation in handling a data breach.
  • Advised a fintech start-up in relation to an innovative cloud-based KYC solution dedicated to the financial sector.

WKB Wiercinski, Kwiecinski, Baehr

The data protection department at WKB Wiercinski, Kwiecinski, Baehr is part of thefirm's IP and TMT practice and is headed up by Agnieszka Wiercińska-Krużewska, who handles litigation and arbitration proceedings. The team provides the full spectrum of data protection advice and daily support as well as conducting audits of personal data processes and preparing policies. Senior associate Karolina Miksa has GDPR implementation expertise.

Other key lawyers:

Karolina Miksa


‘Very good cooperation on various levels. In addition, very high substantive quality.’

‘Very proactive approach. Smooth execution of the project with no delays. Consistent and comprehensive services.’

‘Project delivered on time. The services were consistent and comprehensive, great knowledge in GDPR.’

‘This practice is unique in its approach to clients from extremely fast paced sectors. Their cutting edge advice is very elastic: one can always count on receiving detailed advice.’

‘Highly personal culture as well as substantive knowledge. Business approach to solving problems.’

Key clients


Innova Capital

Eins Polska



Polski Bank Komórek Macierzystych


Alpha Solar

Fundacja TVN “Nie jesteś sam”

FremantleMedia Polska


Bank Gospodarstwa Krajowego

Miejskie Wodociągi i Kanalizacja w Bydgoszczy sp. z o.o.

Miejskie Przedsiębiorstwo Wodociągów i Kanalizacji w Warszawie Spółka Akcyjna

Work highlights

  • Advised TVN on several projects regarding data protection including the processing of cookies, Dynamic Ads Insertion and transfer of data to the United States after the Schrems II decision.
  • Supported EINS Polska to implement internal documentation compliant with the GDPR requirements.
  • Drafted external communication with participants of several programmes to ensure GDPR compliant data processing, including the processing of health data.

Allen & Overy, A. Pedzich sp. k.

IP lawyer Krystyna Szczepanowska-Kozlowska  heads up the data protection practice in Warsaw at Allen & Overy, A. Pedzich sp. k.. The team’s expertise spans across the financial, life sciences, manufacturing and industrial, telecoms and retail sectors. Along with strong domestic connections allowing the group to support clients in matters with local regulators, the firm’s international network ensures the practice can support cross-border mandates too. Senior associate Justyna Ostrowska is also a key name of note, with one client praising her ‘exceptional excellence in data protection matters’ as well as ‘her ability to give complex cross sector advice'.

Other key lawyers:

Justyna Ostrowska


‘The team is characterised by excellent legal skills and understanding of the client’s needs. The valuable advantages are very high quality service and agile working.’

‘Engaging, answered mostly on a fast basis questions regarding GDPR.’

‘Compared to other firms, A&O presented a service offering with high competency/seniority, continuity (2 senior lawyers) and fast turnaround with the ability to cover a wide array of topics in an independent manner, and extensive geography understanding.’

‘The A&O team works well individually and also as a team to ensure the continuity of the service in a seamless way; they stand by their principles, values & arguments to defend the best interests of the firm, without compromising them to secure a sizeable deal or extreme legal gatekeeping disregarding commercial interests.’

‘They are thoughtful, proactive & creative. The individuals are also conscious of budget/hour consumption.’

‘Krystyna Szczepanowska- Kozlowska is a leading expert in this field. You can always count on her deep understanding of legal issues and client needs.’

‘Justyna Ostrowska is appreciated for her exceptional excellence in data protection matters and for her ability to give complex cross sector advice. She is a client oriented lawyer with innovative approach. She always provides very high quality advice you can really rely on.’

‘Justyna Ostrowska has very good availability and is open to discuss different legal views of the GDPR. She provided information on the practice in the market and experiences from the relevant market.’

Key clients

OLX Group

Sumo Group


Sage Group


Work highlights

  • Advised OLX Group on the data protection angle of the investment in Carsmile, a fintech start-up offering car leasing and long-term rental services.
  • Advised Sumo Group on the acquisition of PixelAnt Games.
  • Advised Ørsted on a joint venture with PGE Polska Grupa Energetyczna S.A. for the development, construction and operation of two offshore wind projects in the Baltic Sea.

APLaw Artur Piechocki

APLaw Artur Piechocki is a boutique law firm dedicated to IT and TMT law with both local and international projects, especially regarding e-commerce and legal audits. The group also represents clients before the President of the Personal Data Protection Office. Founder Artur Piechocki leads the team alongside Ireneusz Matusiak, who has been re-elected as president of the Internet Domain Arbitration Court at the Polish Chamber of Information Technologies and Telecommunications.


‘APLAW team’s business understanding, in particular on the data protection side of business, is unique and reaches beyond skills of other law firms we have had opportunity to work with. Their data protection knowledge is combined with their understanding of technology, what makes their services extraordinary.’

‘I value their reliability, conscientiousness and the willingness to cooperate and help in dynamic situations.’

‘This practice is unique due to the individual approach to every client. Open-mindedness is one of the important assets shared with clients.’

‘The firm combines TMT legal expertise with a deep understanding of technological issues.’

‘Artur Piechowski is an expert in legal knowledge of technology law with a deep understanding of technical issues.’

‘Artur Piechocki is an expert in the data privacy field with more than 20 years of experience. There are very few lawyers with an equal length of work in data protection in Poland. Experience is added value to his knowledge.’

‘Artur Piechocki has been working with personal data protection from the early years of 2000 and he has used his experience in every case since then. Clients appreciate it and use his experience and knowledge for their benefit since it is unique in comparison with other lawyers.’

‘Working with Artur Piechocki was easy; he understands our business and it is of utmost importance for us to work with lawyers who are able to understand our decisions and check if they can be applied in relations with our clients.’

Key clients

United Entertainment Enterprises






Bridge Solutions HUB


ATS Technology

Azeta UAB



Magic Box International


Casinos Poland

Work highlights

  • Advising ZPR Group on numerous GDPR audits and implementation of GDPR procedures.
  • Advising on complex personal data protection and privacy matters: drafting website privacy documents, consents, privacy notices and verifying Data Processing Agreements with Aftermarket’s clients.
  • Advising Casinos Poland on conducting several GDPR audits in casinos throughout Poland and implementing GDPR policy.

Baker McKenzie Krzyzowski i Wspólnicy Sp.k.

The IP and technology department at Baker McKenzie Krzyżowski i Wspólnicy Sp.k. is led by Marcin Fijalkowski  and includes the privacy and data protection practice, which has a focus on digitalisation, cybersecurity and privacy. The team also advises local and international clients on technological developments in the financial, healthcare and automotive sectors. Radoslaw Nozykowski leads the local privacy practice, and previous practice head Marek Rosiński is senior of-counsel in the IP and technology group.

Practice head(s):

Marcin Fijalkowski; Radosław Nożykowski


‘A very well-managed team comprising of counsels with complementary skillset, extremely agile and always there to support, able to juggle multiple time zones while maintaining top notch creativity and ability to grasp issues of top complexity on the move.’

Key clients

Schneider Electric



Lingaro sp. z o. o.




CSL Behring Beteiligungs- und Verwaltungs GmbH & Co. KG

RTB House


Work highlights

  • Supporting Skanska on a wide range of privacy-related matters, in particular concerning employees privacy, international data transfers and privacy implications of implementing new IT solutions.
  • Advising Schneider Electric in the area of privacy and the personal data protection within EEA area, including privacy contracting and data transfers.
  • Supporting CSL Behring in the area of privacy in the context of the Pharma business, including preparation of the client-facing documents.

Gawronski & Partners S.K.A.

Gawroński & Partners S.K.A.'s practice acts for clients in the banking and finance, energy & utilities, communication services, IT and professional services sectors. The team handles data protection in addition to cloud computing, cybersecurity and media-related matters. Maciej Gawroński is the practice head.

Practice head(s):

Maciej Gawroński


‘Gawroński & Partners team is great; they helped us creating legal collateral for our newly created brands. Very responsive and reacting ad-hoc for required changes from our side.’

‘Recognised as top experts by both business and regulators with true understanding of data protection and technology, that goes beyond just regulations. The excellence of the whole team from juniors to heads, exceptionally multi-dimensional lawyers, fluent in various fields, complementing each other as a team and understanding the global privacy legal landscape are strengths of the team.’

‘Gawroński & Partners Spk has unique approach to their clients. They posses huge expertise and experience in this field. Moreover, they are dynamic and agile in the way that can satisfy even global entities.’

‘A very approachable, client-friendly practice. Always looking to be good value for money for the client and only do what is necessary. Delivered pragmatic, no-nonsense advice.’

‘We highly value Maciej Gawroński’s professionalism, availability and responsiveness.’

‘Maciej Gawronski is client-oriented, transparent, has an ethical approach with concrete, short answers in the least complicated way possible, good time organisation even in demanding cases, quick responses, a practical approach, business-oriented and a practical approach of the owner or manager in important aspects to prevent escalation or problems.

‘Mr Maciej Gawroński is an excellent and experienced lawyer, a prominent expert and very good practitioner in the field of personal data protection, both in Poland and abroad. He is an authority dealing with the issues of personal data processing in the cloud (cloud computing), cybersecurity, IT and intellectual property, whose importance is appreciated by national and international legal rankings, listing him among the leading law specialists in these areas.’

‘We worked primarily with Maciej Gawroński, who is very approachable and responsive.’

Key clients


House Med

Polish Airports

Sensations English

Polish Bar of Attorneys-at-law

Polkomtel, Grupa Cyfrowy Polsat

Plus Pay


Good Data Protection Standard

Data Protectors


OneTrust Data Guidance

Bank Polskiej Spoldzielczosci

Enea Centrum

Plus Bank


PKO Bank Hipoteczny S.A.

Cloud Ferro

Polish Advertising Board

Ringier Axel Springer

Warsaw Stock Exchange

DnB Bank




Gąsior Sebastian

Med Systems Group


Millennium Bank

Towarzystwo Ubezpieczeń Wzajemnych „TUW”



Work highlights

  • Providing PGNiG OD with ongoing data protection advice.
  • Representing a Polish internet portal owned by an international media group in administrative proceedings triggered by a complaint brought before the Polish Data Protection Office by the NOYB Foundation (Schrems) concerning allegedly illegal use of the Google Analytics service.
  • Representing House Med in proceedings before the Polish Data Protection Authority after a cyberattack and complaint by one of its clients whose personal data was affected.