Firms To Watch: Data privacy and data protection

EVERBERG‘s data protection team is led by Natalia Nader and is particularly noted for assisting clients from the retail sector with the creation of privacy and cookie policies, as well as for conducting GDPR audits.

Data privacy and data protection in Poland

Bird & Bird Szepietowski i wspólnicy sp. k.

Bird & Bird Szepietowski i wspólnicy sp. k.’s ‘very strong’ data privacy and protection team advises global, EU-based, and domestic clients on a broad range of mandates, including data breaches, proceedings before regulators, and data transfers. It also supports clients with cookie compliance matters and direct marketing. ‘Excellent lawyer’ and data protection specialist Izabela Kowalczuk-Pakuła leads the practice, and she also co-founded the Association of Data Protection Practitioners. Senior associate Marta Kwiatkowska-Cylke is a key name within the team, with significant expertise in data breaches and cross-border matters. Of counsel Emilia Stępień, who has previous experience as an in-house lawyer and data protection officer, is also noted.

Practice head(s):

Izabela Kowalczuk-Pakuła

Other key lawyers:

Marta Kwiatkowska-Cylke; Emilia Stępień; Izabela Tarlowska


‘The team has a very good market position, particularly internationally. Lots of big cases go via the Polish data protection team as they are well connected with the strongest peers in Europe, and thus in a position to provide cross-border advice.’

‘Bird & Bird’s Data Protection department is very professional with extensive knowledge of GDPR in marketing. Clients can rely on the lawyers’ opinions and advice as they are keeping their eyes on changing GDPR rules and regulations on the Polish market.’

‘They have an ability to understand the technology behind data protection and cybersecurity matters that is far superior to most peers. They do justice to Bird & Bird’s global reputation.’

‘Izabela Kowalczuk-Pakuła is the heart and soul of the data protection team. She is extremely hard working and focussed. She has stong connections and is capable to steer big international projects.’

‘Izabela Kowalczuk-Pakuła is clearly a standout partner; she is tech-savvy and brilliantly able to bridge cultural gaps.’

‘Izabela Tarlowska is very professional, with very good knowledge of GDPR in marketing, and she is very helpful and dedicated to the client.’

‘Emilia Stępień has extensive experience.’

‘Izabela Kowalczuk-Pakuła, Marta Kwiatkowska-Cylke, and Emilia Stępień all create a unique client-legal counsel connection, providing spot-on and easy-to-apply advice in uncertain regulatory environments. Outstanding team overall.’

Key clients

Samba TV

BBDO Warszawa Sp. z o.o.

Michael Page

Stock Polska

Work highlights

  • Supporting Samba TV with its operations on a daily basis, advising on the content of consent and privacy notices, and helping to design intuitive UIs for expressing flexible choices by the users.
  • Advising Michael Page on the negotiation of agreements with its clients, including agreements involving data transfer to third countries such as India.
  • Supporting Stock Polska with various privacy and data protection issues.


The team at Dentons is ‘very knowledgable’ and has ‘great territorial coverage’. It is notably strong in representing international internet platforms, and another key area of growing expertise is the connected and autonomous car space. Karol Laskowski leads the team, and in May 2022, she was appointed to co-head of the Europe-wide TMT group. Laskowsi focuses on advising international media, technology and telecoms groups. Senior associate and data breach expert Aleksandra Danielewicz has substantial in-house experience. Dariusz Czuchaj left the firm.

Practice head(s):

Karol Laskowski

Other key lawyers:

Aleksandra Danielewicz; Anna Szczygieł; Karolina Cotronei


‘A very knowledgeable team with lots of experience.’

‘Dentons have great territorial coverage, delivering fast and accurate advice across many jurisdictions.’

‘The key benefit of working with the Polish team is their ability to support APAC in-region local counsels with a global, strategic view while going the extra mile to deliver high quality advice.’

‘The team is well specialised on AdTech privacy issues.’

‘Karolina Cotronei is a commercial lawyer who has a great understanding of business and works tirelessly for her clients’ objectives.’

‘Karolina Cotronei is brilliant.’

Key clients

HERE Technologies




Work highlights

  • Advising a major media and tech company on the use of AdTech data across multiple jurisdictions in the APAC region.

Kobylanska Lewoszewski Mednis

For Kobylanska Lewoszewski Mednis, contentious and non-contentious work in the data privacy space for clients from the e-commerce, media, technology, video games, and finance sectors is a significant focus. Co-founders Anna Kobylańska, Marcin Lewoszewski and Arwid Mednis jointly head the practice. Kobylańska ‘has excellent knowledge of GDPR’, especially regarding its implementation at EU level, as well as the use of new technologies to collect and process personal data. Lewoszewski has substantial experience in supporting global media, gaming, and telecoms companies with regulatory mandates, and is also praised as ‘a heavyweight player in data protection litigation’. Mednis is an expert in personal data protection law, as well as the implementation of GDPR for financial institutions and public entities.

Practice head(s):

Anna Kobylańska; Marcin Lewoszewski; Arwid Mednis

Other key lawyers:

Ewelina Kęciek


‘KLM is unique because it combines a business-oriented approach to legal advice with a reliable, strong, scientific position on the problems being solved. Cases that go to the law firm are always complicated and difficult, and the approach of the partners gives clients a sense of security.’

‘Great experts in data protection. Thorough knowledge and ready to deal with complex matters.’

‘Commitment, professionalism, willingness to help, and finding non-standard solutions are strengths of the team. This is a unique law firm on the market – the commitment and level of understanding of the business, as well as the need to become familiar with the entire process, puts this law firm above others.’

‘Offering business-oriented solutions and possible legal frameworks is something that distinguishes this company from others.’

‘Anna Kobylańska has excellent knowledge of GDPR, outstanding business understanding, and the will to understand the processes and issues clients are addressing, also indicating the potential effects of the action from the point of view of other areas of law, such as competition law or copyright law.’

‘Anna Kobylańska is friendly, to the point, and helpful.’

‘Marcin Lewoszewski is friendly and has a good approach to data protection.’

‘Marcin Lewoszewski stands out. He gives quality, he works more than a client could imagine, and he delivers what he promises. He is a heavyweight player in data protection litigation.’

Key clients

Główny Geodeta Kraju

Work highlights

  • Represented a global e-commerce company in a litigation case before the Polish Data Protection Authority and administrative court.

Rymarz Zdort Maruta

Rymarz Zdort Maruta‘s data privacy and security practice ‘offers experts in the field of personal data protection’ and has a strong IT and e-commerce focus, with the financial sector, retail, and media also being industries of strength. Its offering includes GDPR compliance and large-scale projects, such as data transfers involving multiple jurisdictions. It also represents companies before the Polish Data Protection Authority. The team is co-led by Marcin Serafin and Sławomir Kowalski; Serafin has experience in assisting clients with data breaches, and Kowalski, a previous member of the personal data protection working party at the Ministry of Digital Affairs, has a specific focus on technology, insurance, and e-commerce. Paweł Tobiczyk was promoted to partner in December 2021.

Practice head(s):

Marcin Serafin; Sławomir Kowalski

Other key lawyers:

Paweł Tobiczyk


‘The firm’s lawyers are experts whose knowledge goes far beyond traditional legal knowledge. Their unique and extensive experience in the field of new technologies allows them to meet even the most demanding projects.’

‘They are the pioneers and titans of IT legal work. The team has a very high level of expertise in the area in which it specialises; in particular, its many years of practice are evident.’

‘A law firm that is well know on the Polish market. They are perceived by clients as a law firm with extensive experience and their legal service is very effective. They proactively support clients in achieving their business goals and hire lawyers who are experts in their chosen fields.’

Key clients

Krajowy Operator Chmury Medycznej

Work highlights

  • Advising Poland’s national cloud operator on various aspects of personal data protection, including negotiations and co-operation with Google and Microsoft to establish the Google Cloud and Microsoft Cloud regions in Poland.

Traple Konarski Podrecki & Partners

The personal data protection team at Traple Konarski Podrecki & Partners has a broad-ranging practice, from implementing and applying GDPR and representation before the Polish Data Protection Authority, to assisting with compliance audits and the cross-border transfer of data. Additionally, managing data breaches, data anonymisation, and matters involving biometric data are within the team’s capabilities. Co-founder Xawery Konarski and Grzegorz Sibiga jointly lead the team. In July 2022, Dominika Nowak and Katarzyna Syska were promoted to managing associate and counsel, respectively.

Practice head(s):

Xawery Konarski; Grzegorz Sibiga

Other key lawyers:

Dominika Nowak; Katarzyna Syska

Key clients

Polskie Sieci Elektroenergetyczne S.A

Gmina Miasta Tychy

Jastrzębska Spółka Węglowa S.A.

Canal + Polska S.A

National Research Institute

Provident Polska S.A.

Gmina Wrocław

RTB House

CMS Cameron McKenna Nabarro Olswang Posniak i Bejm sp.k.

CMS Cameron McKenna Nabarro Olswang Posniak i Bejm sp.k.‘s data protection team sits within the firm's IT and TMT practices. Its offering extends across the full scope of data protection and GDPR mandates, including representation before the Data Protection Authority, support with cybersecurity and data breaches, and cross-border work. Tomasz Koryzma heads the practice and advises global technology companies. Recently promoted counsel Damian Karwala has ‘exceptional knowledge of cross-border transfer subjects’. Adriana Zdanowicz-Leśniak was appointed to senior associate in July 2022.

Practice head(s):

Tomasz Koryzma

Other key lawyers:

Damian Karwala; Adriana Zdanowicz-Leśniak


‘The team’s strengths include in-depth knowledge around the subject matter, excellent understanding of the client’s business and limitations, and a unique ability to cover coordinated advice from different jurisdictions across the CEE.’

‘There is a willingness to go the extra mile to understand a client’s business, including a personal review of the operations and a proactive approach to getting knowledge of existing policies.’

‘What is unique while working with CMS, is not only that CMS may provide legal advice for many different jurisdictions within the EU, but clients are always receiving legal advice for different jurisdictions in one package, and answers are comprehensively coordinated internally within CMS and in the same format.’

‘The effort, energy, and professionalism of all lawyers is highly appreciated. Strengths include collaboration, a can-do attitude, a willingness to listen, and support.’

‘Damian Karwala is responsive and precise with a practical approach. He has exceptional knowledge of cross-border transfer subjects.’

‘Tomasz Koryzma and Damian Karwala have both earned a lot of trust by being responsive and delivering products that are beyond high expectations. They clearly have in-depth knowledge of the tech industry and can easily be plugged into many different regulatory or commercial challenges.’

‘Tomasz Koryzma is an excellent organiser of the team, allowing it to respond quickly and effectively.’

‘Adriana Zdanowicz-Leśniak provides uniquely business-oriented advice and has a very professional attitude, presenting open communication, willingness to help, discuss different perspectives, and share best practices.’

Key clients


Komatsu Mining

Partner in Pet Food


Iron Mountain




Bausch + Lomb

In Post

International Paper


Work highlights

  • Advising Box on the relocation of its binding corporate rules from the UK’s data protection authority to the Polish data protection authority.
  • Advising Iron Mountain on ongoing data protection matters, including fulfilling the role of a data protection expert in Poland.
  • Advising the Polish subsidiary of Partner in Pet Food on GDPR implementation, as well as providing day-to-day legal counselling in the context of GDPR requirements and local data privacy regulations.

DLA Piper Giziński Kycia sp.k.

DLA Piper Giziński Kycia sp.k.’s team is praised as ‘one of the best in the GDPR space in Poland’; it handles GDPR implementation projects for domestic and international clients in the banking, insurance, pharmaceutical and media industries. Ewa Kurowska-Tober leads the team and is also the global co-chair of the firm’s data protection, privacy and security sub-group. She advises clients from highly regulated sectors on GDPR and privacy compliance mandates, as well as cross-border data transfers. Counsel Magdalena Koniarska is also notable and supports international companies with personal data protection matters.

Practice head(s):

Ewa Kurowska-Tober

Other key lawyers:

Magdalena Koniarska


‘The team is very professional and always provides legal advice in a timely manner.’

‘DLA Piper is one of the best in the GDPR space in Poland with good professionalism, cooperation, and trust.’

‘The team has good knowledge and cooperation.’

Key clients






BNP Paribas


Cap Gemini


Credit Suisse


Dentsu Aegis



ING Bank


LEVI Strauss


Mid Europa

Moroccan Oil









UK Department of Digital Culture, Media and Sport




Work highlights

  • Advising mBank on day-to-day data protection matters related to its operations in Poland and the CEE region, including analysis of applicable data retention policies in light of sectorial regulations, and advising on an alleged GDPR infringement in Slovakia.
  • Advising Audi on data protection issues relating to innovative tools offered to its clients.
  • Advising BNP Paribas on a range of data protection issues, as well as representing the client in proceedings before the Polish Data Protection Authority and administrative courts.

Domanski Zakrzewski Palinka

The data privacy team at Domanski Zakrzewski Palinka is led by Bartosz Marcinkowski, who supports both domestic and foreign companies; he also has a strong academic background in data protection law. The practice undertakes GDPR compliance mandates and data transfers, and it also assists clients with the handling of data breaches. Marcinkowski is supported by Sylwia Kuca, who handles Polish and EU law compliance matters.

Practice head(s):

Bartosz Marcinkowski

Other key lawyers:

Sylwia Kuca


‘Bartosz Marcinkowski with his team delivers a professional service.’

Kieltyka Gladkowski KG Legal

Kieltyka Gladkowski KG Legal’s data privacy and data protection team advises clients on the implementation of GDPR, assists with the drafting of data processing agreements, and handles data breaches. It also ‘handles international data transfer compliance and cross-border mandates within the new technology, life sciences and international trade sectors’. Additionally, it is increasingly involved in data protection matters regarding blockchain projects. Kraków-based Małgorzata Kiełtyka jointly leads the team with Kazimierz Jakub Gładkowski in Warsaw, and both are praised as ‘true experts in the field of data protection’.

Practice head(s):

Małgorzata Kiełtyka; Kazimierz Jakub Gładkowski


‘They provide international customers with rapid, detailed, and customer-oriented support.’

‘The team has strong knowledge regarding legal regulation as well as practical insight into the market.’

‘The fact that the team at KG Legal is not only very knowledgeable, but also very flexible, makes them stand out. Technology wise, they are very modern.’

‘The team is very skilled and clever, and clients are always very satisfied when working with them.’

‘Małgorzata Kiełtyka has very practically-oriented solutions. She is a brilliant lawyer and is very responsive and attentive to client’s needs.’

‘Kazimierz Jakub Gładkowski is an experienced and seasoned lawyer who is fast and smart. He is very experienced in both data protection and life science matters.’

‘The intelligent and ambitious Kazimierz Jakub Gładkowski and Małgorzata Kiełtyka stand out from the competition because they are very good lawyers, and are also very kind people and very practical in their advice. They are excellent lawyers and understand technical matters very well.’

‘Both Kazimierz Jakub Gładkowski and Małgorzata Kiełtyka are not only true experts in the field of data protection, but they are also very flexible and available any time. Their advice is concise, prompt and proactive.’

Work highlights

  • Advised an American global entertainment industry network platform on software development procurement issues.
  • Advised a global financial institution, in co-operation with an American legal corporation, on the legal aspects of web-scraping and the extraction of economic data from global internet resources.
  • Advised a large telecoms company on the acquisition of a technology for the digitisation of analogue cable TV signals.

Lubasz i Wspólnicy - Kancelaria Radców Prawnych

The team at Lubasz i Wspólnicy - Kancelaria Radców Prawnych provides audits in the personal data protection space and advises on modern technologies as well as the implementation of data protection systems. Counsel Dominik Lubasz, Monika Namysłowska, and newly promoted managing partner Witold Chomiczewski lead on much of the work. Edyta Bielak-Jomaa brings her experience as former President of the Personal Data Protection Office to the group. Adam Szkurlat is praised as having ‘a great data protection practice’.

Other key lawyers:

Dominik Lubasz; Monika Namysłowska; Witold Chomiczewski; Edyta Bielak-Jomaa; Adam Szkurlat


‘The strength of the firm is its experience and active participation in various bodies on an industry and country level. The support clients receive is of very high quality and their understanding of the business is very helpful to agreement negotiation – it simplifies the process a lot.’

‘The team developed an internal tool (GDPR Risk Tracker) which is available to the general market – it simplifies the process of managing processes and quality assurance around data protection.’

‘Both Dominik Lubasz and Witold Chomiczewski provide a deep understanding of the client’s business, which greatly increases the value and outcome of services; not only  are the recommendations relevant to the latest trends and possibilities, but they are very business-oriented.’

Work highlights

  • Advised a consumer association on the design and operation of a device to analyse the space around it and generate statistical data of useable value.
  • Assisted a company offering financial services on the European market with a multi-faceted analysis related to the provision of data by a third party.
  • Advising a large Polish bulk service provider on the support of a data protection officer appointed by the client.

Olesinski & Wspolnicy

The data privacy and protection team at Olesinski & Wspolnicy operates in close tandem with the firm’s IP and TMT teams, chaired by Andrzej Boboli in Warsaw. Magdalena Kaleta-Maniak, also based in Warsaw, and Ludmiła Łuczak in Wrocław co-lead the data privacy team; Łuczak’s practice combines data protection, TMT, and employment law. Data protection in the sphere of e-commerce activities, which is a strong focus for Boboli, personal data in new technologies, and cybersecurity are all part of the regular workload.

Practice head(s):

Ludmiła Łuczak; Andrzej Boboli; Magdalena Kaleta-Maniak

Other key lawyers:

Lucyna Brayshaw; Bartosz Kolarz; Katarzyna Wężyk; Łukasz Pociecha; Zuzanna Prandecka-Walek


‘Practitioners demonstrated commitment and professional knowledge in the area of personal data protection. They confirmed their high legal qualifications, which they combine with understanding of solutions.’

‘The team is very strong and in fact one of the strongest in Poland.’

‘Ludmiła Łucza, Magdalena Kaleta-Maniak and Lucyna Brayshaw are an excellent support for all privacy matters.’

‘Extremely flexible team who will do their best to meet tight schedules and provide a fast turnaround.’

‘Bartosz Kolarz has a broad and unique legal knowledge in data protection and TMT. He is able to clearly explain even the most complex legal issues. He also has an outstanding business approach.’

‘Katarzyna Wężyk provides very skilful explanations and translations of legal terms and language to make them easier to understand.’

‘Andrzej Boboli, Bartosz Kolarz, and Łukasz Pociecha are individuals that are masters in their field.’ 

‘Andrzej Boboli is great to work with as he combines data protection knowledge with expertise in technology and IT, which enables him to guide through complex processes such as database migrations or implementing new IT systems. He is visible in the market and his commentaries are noted and taken as reference for in-house lawyers.’

Key clients

Booksy International sp. z o.o.


DWS Draexlmaier Wyposażenie Wnętrz Samochodowych Sp. z o.o.



KIK Textil Sp. z o. o.

Limango Polska Sp. z o.o.

Brose Sitech Sp. z o.o.

Ten Square Games S.A.

Tidio Poland sp. z o.o.

Viessmann Technika Grzewcza Sp. z o.o.

Whirlpool Company Polska Sp. z o. o.

Gates Polska Sp. z o.o.

Deepsense.AI Sp. z o.o.

Sportano Sp. z o.o.


Umicore Poland Sp. z o.o.

Smulders Groep Poland Sp. z o.o.


Continental Opony Polska sp. z o.o.

Work highlights

  • Assisted Tidio Poland with the adaptation of the company’s documentation taking into account recent and previous decisions of the European Commission.
  • Supported The Roads and City Maintenance Authority in Wrocław by carrying out a DPIA as part of an innovative project to automatically verify payment of fees by users of the paid parking zone.
  • Advised Umicore Poland on the regulation of personal data processing operations in connection with the launch of the new production site.

Baker McKenzie Krzyzowski i Wspólnicy Sp.k.

Baker McKenzie Krzyzowski i Wspólnicy Sp.k.‘s data privacy practice sits within the firm’s IP and technology department and focuses predominantly on the financial, healthcare, and automotive sectors, servicing both local and international clients. Data transfers, employee privacy matters, and personal data breaches are all within the team’s capabilities, as are cybersecurity mandates. The wider team is led by Marcin Fijalkowski, with counsel Radoslaw Nozykowski overseeing the local privacy practice. Senior associate Marcin Fiałka focuses on the pharmaceutical and healthcare industries.

Practice head(s):

Marcin Fijałkowski; Radosław Nożykowski

Other key lawyers:

Marek Rosiński; Marcin Fiałka

Key clients



Schneider Electric


RTB House

TUiR Warta




Work highlights

  • Advising Schneider Electric on a variety of privacy and GDPR issues.
  • Advised JTI on the data protection aspects related to the implementation of whistleblowing procedures.

GP Partners Gawroński, Biernatowski Sp.K.

Gawroński & Partners S.K.A.’s technology and data protection practice is adept at advising clients in the banking and finance, energy and utilities, and telecoms and IT sectors. The team’s offering includes GDPR compliance audits, advice on data breaches, and representation in proceedings before the President of the Polish Data Protection Office. Maciej Gawroński and Michał Ćwiakowski jointly lead the team, and Čwiakowski ‘has extensive knowledge in the field of personal data protection in the financial market’.

Practice head(s):

Maciej Gawroński; Michał Ćwiakowski

Other key lawyers:

Piotr Biernatowski


‘Great expertise and strength in depth that is consistent with a much larger firm.’

‘Very professional and committed and have the ability to propose practical and business-oriented solutions to any possible issues.’

‘Combining in-depth legal knowledge with practical insight of applied technologies.’

‘Maciej Gawroński and Piotr Biernatowski are truly engaged in resolving customer challenges, applying their creativity and unique expertise.’

‘Michał Ćwiakowski has extensive knowledge in the field of personal data protection in the financial market. Cooperation with him is a great pleasure.’

‘Maciej Gawroński has particular data privacy expertise. His client care and understanding of what they actually need is second-to-none. He provides great value.’

Key clients


DPD Polska sp. z o.o.

Enea Centrum

Enea Innowacje

Giełda Papierów Wartościowych

Good Data Protection Standard



Millennium Bank


Phono Media


Plus Bank

Przedsiębiorstwo Państwowe Porty Lotnicze PPL


Polska Spółka Gazownictwa sp. z o.o.

Przedsiębiorstwo Wodociągów I Kanalizacji Jarocin

Rada Reklamy

Ringier Axel Springer Polska


TMS Brokers S.A.




4c Solutions

Bank Gospodarstwa Krajowego



EOS Poland

Keen Property Management

MDR Regulator


Operation Blessing International Relief and Development Corporation

ORM Trade

PGE Polska Grupa Energetyczna




Yatzex International LLC

ZGO Jarocin

Work highlights

  • Advised Millenium Bank on the implementation of a SaaS video verification cloud solution with biometric identification.
  • Representing a Polish internet portal, owned by an international media group, in administrative proceedings triggered by a complaint brought before the Polish Data Protection Office by the NOYB Foundation concerning allegedly illegal use of the Google Analytics service by the client.
  • Assisting PGNiG OD with ongoing data protection matters.

Konieczny, Wierzbicki Kancelaria Radców Prawnych sp.p.

The data protection and compliance team at the Kraków-based TMT boutique firm Konieczny, Wierzbicki Kancelaria Radców Prawnych sp.p. advises clients in the IT, fintech, med-tech, and financial spaces on personal data processing and transfer matters, as well as GDPR compliance. Michał Czuryło leads the group and assists clients with data privacy matters and regulatory mandates, as well as conducting audits. Managing partner Michał Konieczny is another active team member. In January 2022, Anna Dabrowska-Lipka joined the team from Sławomir Jaromin Kancelaria Adwokacka.

Practice head(s):

Michał Czuryło

Other key lawyers:

Michał Konieczny; Anna Dabrowska-Lipka


‘Exceptional managing skills and a well organised team.’

‘Excellent communication, thorough knowledge on the subject, open-minded, and a focus on clients’ needs.’

‘Responsiveness, availability, niche expertise, and a good atmosphere.’

Key clients

Miquido sp. z o.o. sp. k.

Hitachi Energy Group

Saventic Health sp. z o. o.

Software Mind sp. z o.o.

Da Vinci Green Energy

Digital Ocean Ventures sp. z o.o.

Software Mind Sp. z o.o.

Ailleron S.A

ABB Group

GrapeUp sp. z o.o.

Diagmatic sp. z o.o.

AB InBev

Antigro sp. z o.o.

Andea Group

Quantum Qguar S.A.

Work highlights

  • Advising Hitachi Energy Group on direct negotiations with counter-parties regarding agreements on the transfer of personal data, as well as preparing amendments and reviewing amendments to agreements prepared by counter-parties.
  • Advised Eepeer on a contract for provision of behavioural scoring services.
  • Advised Saventic Health on the creation of a platform for a clinical decision support system.

SSW Pragmatic Solutions

Katarzyna Szczudlik leads the data protection practice at SSW Pragmatic Solutions, which has a strong focus on assisting clients in the financial sector, as well as media and entertainment companies. The practice’s offering includes undertaking data processing projects and providing cybersecurity advice. Privacy-related support regarding NFTs is a growing area for the team. Szczudlik combines her knowledge of data protection and financial regulations in her practice, and she is supported by Marta Pasztalenie, who is notable in GDPR implementation matters.

Practice head(s):

Katarzyna Szczudlik

Other key lawyers:

Marta Pasztalenie; Aleksandra Czubek


‘The team has conceptual clarity and good attention to detail.’

‘The lawyers are dedicated and experienced.’

Key clients

iDeals Solutions Group Limited

Axpo Polska Sp. z o.o.

Clayton, Dubilier & Rice

Jeronimo Martins Polska S.A.

Lenovo Technology B.V. Oddział w Polsce


Work highlights

  • Supporting a mass media and entertainment multinational with all aspects of its data breach management, including initial assessments, cooperation with internal and external entities, and representation before the Data Protection Authority.
  • Advising Axpo on all of its data protection issues, including employee-related matters, customer applications and platforms, data anonymisation, and data retention periods.
  • Advising iDeals on multiple privacy–related topics, including the implications of Brexit on data management structures, data handling procedures, data retention periods, compliance with the California Consumer Privacy Act, and China’s Personal Information Protection Law.

Wardynski & Partners

Wardynski & Partners’ data protection team thrives in the financial services, new technologies, and HR arenas, advising on data protection regulations and projects involving personal data flow. In its day-to-day advice, it covers data subject requests and reviews of internal documentation. Representation before the Personal Data Protection Office is also part of the team’s offering. Krzysztof Wojdyło heads the practice and is skilled in new technologies law in particular. Karolina Romanowska is also notable.

Practice head(s):

Krzystof Wojdyło

Other key lawyers:

Karolina Romanowska


‘The feature clients appreciate the most in the team is their responsiveness and the fact that they can always address queries to the right professionals quickly.’

‘The professionals are accessible at all times and clients are really well taken care of due to the team’s attitude, professional knowledge, and approach.’

Allen & Overy, A. Pedzich sp. k.

The data privacy team at Allen & Overy, A. Pedzich sp. k. sits within the firm’s IP practice and is chaired by IP specialist Krystyna Szczepanowska-Kozlowska, who is strong in the telecoms, media, life sciences and pharmaceutical sectors. The team benefits from the firm’s strong local and international connections, allowing it to conduct cross-border projects for its clients. In May 2022, Justyna Ostrowska was promoted to counsel, and is praised for her ‘in-depth knowledge of IP and GDPR’.

Practice head(s):

Krystyna Szczepanowska-Kozłowska

Other key lawyers:

Justyna Ostrowska


‘The team is diverse and understands the client’s needs well. They are always available and respond quickly. Their legal analysis and advice is thorough and sound.’

‘Justyna Ostrowska stands out with her very sensible, highly professional, and down-to-earth approach to client problems and advice. Solutions proposed by her are always tailored to the client’s needs and show her in-depth knowledge of IP and GDPR.’

‘Justyna Ostrowska creates a very collaborative environment and makes sure everything is taken care of in time.’

Key clients

The Sage Group plc

Cordiant Digital Infrastructure Limited

DoorDash, Inc.

APLaw Artur Piechocki

Boutique law firm APLaw Artur Piechocki is dedicated to IT and TMT law, and it handles data privacy, protection, and GDPR compliance matters, as well as conducting due diligence audits. Founder and 'real star' Artur Piechocki heads the practice and has experience advising both Polish and international clients from the IT, telecoms, and media sectors.

Practice head(s):

Artur Piechocki


‘They know everything about data protection, privacy, and new technologies. Very sophisticated and niche technical knowledge combined with legal expertise.’

‘They meet all the requirements of a client with a unique business approach. They combine law with business.’

‘They have good knowledge and competence, but what distinguishes them from other advisors is the pursuit of the best possible understanding of the client’s specificity, needs, and expectations. It is also very important that when trying to solve the problem, they think about ensuring an appropriate level of customer security.’

Key clients









Data Lake

Human Biome Institute



ATS Technology


Magic Box International


NAJ International


Work highlights

  • Advising Data Lake on personal data protection and GDPR compliance issues in the context of a pan-European project connected with data donation and data tokenisation on the Warsaw Stock Exchange.
  • Advising Matic on an international project connected with protection of personal data in implementation contracts in aviation software services under both Polish and French regulations.
  • Advising Supermedia on personal data protection issues and GDPR compliance, including the assessment of risks, duties, and liabilities under the transfer impact assessment guidelines, and opinions on The FAIR Data Principles.

DWF Poland Jamka Sp.k

DWF Poland Jamka Sp.k’s data protection team is an extension of the firm’s UK-based practice and handles data transfers and GDPR mandates. Gerard Karp leads the group, having joined the firm in October 2021 from PwC Legal Zelaznicki sp.k., and counsel Marian Giersz is also a notable team member. Karp’s practice encompasses personal data protection advice and GDPR implementation mandates for domestic and international companies, while Giersz is skilled in conducting GDPR audits.

Practice head(s):

Gerard Karp

Other key lawyers:

Marian Giersz; Pawel Dudojc


‘Sufficient expert knowledge and experience in different areas to be able to handle complex topics.’

‘Subject matter experts available from different areas, allowing usage of different perspectives on problems and issues. Involvement of specialists from all seniority levels depending on needs.’

‘The DWF team led by Gerard Karp is extraordinary in many ways. Gerard Karp is a business-oriented and experienced lawyer who provides tailored services. He always considers the unique needs of companies operating in different fields of the modern European market.’

Key clients

Elavon Financial Services DAC

The Insurance Guarantee Fund

Lyreco Polska sp. z o.o.

Adama Agricultural Solutions Ltd.

Samsung Electronics Polska sp. z o.o.

LeasePlan Fleet Management Polska sp. z o.o.

OLX Group Poland sp. z o.o.

Oknoplast Polska sp. z o.o.

Paccar Financial Polska sp. z o.o.

Ubezpieczenia Rankomat sp. z o.o. sp.k.

Work highlights

  • Advised the Insurance Guarantee Fund on several issues relating to the design and implementation of a solution called the Electronic System for Central Risk Assessment, which aims to enable the online execution of matters related to the use of data collected in the IGF in the process of insurance risk assessment by creating e-services for insurance companies, citizens, and business entities.
  • Advised OLX Group Group Poland on a strategic project in the scope of the new EU legislation, the Digital Services Act.
  • Advising Lyreco Polska on a range of data protection matters, including building a unified data protection structure as a consequence of the merger between the client and Staples.

PwC Legal Zelaznicki sp.k.

Counsel Paulina Komorowska was promoted to head of the IP, TMT and data protection practice at PwC Legal Zelaznicki sp.k. in October 2021, and she brings her expertise in new technologies law to her new role. The team handles Polish GDPR implementation projects, data breaches, and data transfers, as well as data protection mandates concerning cloud-based solutions.

Practice head(s):

Paulina Komorowska

Key clients

Polo Market

DH Business Services LLC

Merck KGaA

Billon Solutions

ADAMA Polska

ADAMA Agricultural Solutions Ltd.

PKN Orlen S.A. No

Benefit Systems S.A.

WKB Lawyers

WKB Lawyers's data protection team provides day-to-day advice for its clients, and also conducts audits of personal data processes and represents clients in proceedings before the Polish Data Protection Authority. Practice head Agnieszka Wiercińska-Krużewska is active in advising TV content producers and broadcasters, and she is also strong in the cybersecurity space. Karolina Miksa departed in May 2022 for an in-house position at PayU.

Practice head(s):

Agnieszka Wiercińska-Krużewska


‘They have good knowledge of the industry, not just law. They know how to combine legal expertise with the business needs of the client.’

‘They are easy to cooperate with, delivering solutions and not complications.’

‘A responsive, proactive, and diligent data protection team that finds pragmatic solutions to tricky problems.’

Key clients

Pho3nix Foundation

Polski Bank Komórek Macierzystych

Centrum Rozliczeń Elektronicznych Polskie ePłatności S.A.

Fundacja PFR

Avallon MBO Fund

PIP Global Holdings andOddysey Investment Partners

Work highlights

  • Advised Pho3nix Foundation on projects relating to international operations, including the transfer of personal data outside of the EEA.
  • Supporting Polski Bank Komórek Macierzystych by providing Data Protection Officer services.
  • Advised Polskie ePłatności S.A. on the acquisition of a majority stake in Team4U Sp. zo.o.