Bird & Bird Koremba, Dziedzic i Wspólnicy sp.k.‘s data privacy and protection practice is deemed ‘an absolute standout’ in handling a vast range of data-related matters, including both contentious and non-contentious mandates across Poland and the EU. Its offering covers assistance with such matters as data breaches, regulatory proceedings and data transfers. The team is also brings strength to advising on the regulations surrounding the ever-changing AI landscape. The ‘dedicated’ Izabela Kowalczuk-Pakuła leads the practice, specialising in retail, fintech and pharmaceutical sector matters, and excelling at strategically handling cybersecurity incidents, investigations and proceedings before national DPAs. Other key members of the team include Marta Kwiatkowska-Cylke, who represents clients in proceedings before the Polish supervisory authority and handles contentious matters, while Emilia Stępień works in GDPR regulation.

CMS operates on a multidisciplinary basis with a merged TMT and EU trade mark and design team, engaging in a wealth of cross-border work spanning such sectors as IT, education and the automotive industry. The practice's comprehensive offering covers matters ranging from data transfers and contracts to representation before various authorities, including the Polish Data Protection Authority. The practice is led by Tomasz Koryzma, an expert in tech, media and data privacy law, who advises clients on digital businesses, e-commerce and cloud contracts. Damian Karwala assists the team with cross-border data transfer matters.

The team at Dentons is ‘motivated and engaged in finding the best solutions’. It operates on a single legal hub basis and in collaboration with its other offices worldwide, allowing for a wealth of cross-border work spanning various industries such as fintech, telecoms and energy. The practice encompasses a full spectrum of services including data transfers, security measures and data breaches. Karol Laskowski leads the team with copious experience advising multinational and domestic corporations on compliance with GDPR, ePrivacy and other data regulations. Singled out for his ‘deep expertise’, Paweł Gruszecki acts as counsel at the firm, assisting clients in large-scale projects involving cybersecurity and personal data protection.

 ‘Providing clear guidance on compliance challenges’ and ‘crafting tailored solutions’, the team at DLA Piper Giziński Kycia sp.k., offers a comprehensive advisory service to a robust client base of domestic and multinational businesses spanning such sectors as banking, insurance and media, on matters concerning cross-border data transfers, data security breaches, big data and profiling. The firm’s day-to-day work consists of handling GDPR implementation projects and providing full-service data protection support. Leading the practice is Ewa Kurowska-Tober, who focuses on IT, data protection and advanced technologies, advising clients in highly regulated areas such as cloud computing, e-commerce, and content and distribution.

The team at Kobylanska Lewoszewski Mednis handles a range of contentious and non-contentious work, including advising on personal data regulations for new technologies, implementing GDPR and representing clients in proceedings before the supervisory authority. The team is jointly headed by Anna Kobylańska, who assists clients with cases concerning internet domain name protection, the use of new technologies to collect and process personal data, as well as projects concerning the implementation of NFT and AI solutions in wearable devices; Arwid Mednis, who represents various entities in disputes with the Polish DPA; and Marcin Lewoszewski, who advises on personal data issues and assists corporations with data breaches.

Sporting a ‘unique combination of deep theoretical knowledge and a practical, business-oriented approach’, the team at Rymarz Zdort Maruta handles data protection, transfers and tech projects for their client roster of large multinationals and domestic companies.  The firm also represents clients in proceedings before the relevant authorities, including the DPA and Supreme Administrative Court. The practice is headed by Marcin Serafin, who advises clients such regulations as GDPR, and who also acts in disputes; Paweł Tobiczyk, who has advised on domestic and European legislation, particularly within the banking and finance and insurance fields; and Piotr Kalina, who assists clients with compliance and regulation, with a focus on AI-related matters.

Described as ‘highly competent, responsive and practical’, the team at Traple Konarski Podrecki & Partners is noted for assisting organisations with the application and implementation of GDPR, and for the branching out of its advisory service cover AI systems, cloud computing and biometric data. Outside of providing advice, the firm also regularly represents clients before the Polish Data Protection Authority in both judicial and administrative proceedings. The practice is jointly led by Xawery Konarski, an expert in the field of new technologies who assists clients in providing online services for projects involving the implementation of the Digital Services Act; and Grzegorz Sibiga, who specialises in personal data protection and other matters of administrative law, including access to public information, re-use of public sector information and data opening, in addition to providing strategic advice in innovative areas such as data governance, AI governance and incident response.

The team at Domanski Zakrzewski Palinka advises clients in at the domestic and global levels on the implementation of GDPR, data transfers and the management of data leaks. The firm handles projects across a wide range of industries including energy, finance and healthcare, in addition to assisting IT and technology sector businesses with implementation matters. Leading the practice is Bartosz Marcinkowski, a specialist in personal data protection, whose wide network supports the team’s international outreach.

The technology and data protection practice at GP Partners Gawroński, Biernatowski Sp.K. is best known for its capabilities in assisting clients working in key sectors such as banking and finance, energy and telecoms. The practice also brings strength to cybersecurity and IT disputes and displays capability in handling GDPR compliance audits and implementations, data breach management and proceedings before the Polish Data Protection Office. The practice is jointly headed by Maciej Gawroński, who works across personal data protection, IT and cybersecurity; and Michał Ćwiakowski, who, in addition to data protection, assists with the implementation of new technologies.

With its cross-border capabilities, the team at Kieltyka Gladkowski KG Legal handles a vast range of matters, including data protection, transfers and processing mandates, most notably for the defence sector. The firm has also expanded its horizons to work involving crypto wallets and useTOR. The team is headed by Małgorzata Kiełtyka, who regularly represents international entities operating across such sectors as pharmaceuticals, tech and media; and Kazimierz Jakub Gładkowski, who advises clients involved in fintech, blockchain and transport matters.

The team at Lubasz i Wspólnicy - Kancelaria Radców Prawnych handles a variety of data issues including compliance, risk analysis and security, while also specialising in handling data in the marketing and social media industries. The team is led by Dominik Lubasz, who specialises in handling litigation proceedings across the practice space; Witold Chomiczewski, who draws on extensive experience assisting entities from the e-commerce sector; Monika Susałko, who handles IT industry matters; Polish and EU data protection laws and regulations specialist Edyta Bielak-Jomaa; and Monika Namysłowska, who advises on new technology projects.

Olesinski & Wspolnicy is jointly led by Ludmiła Łuczak, an expert in data protection, who advises international clients on GDPR compliance; and Bartosz Kolarz, who provides strategic legal advice on projects concerning data security, particularly matters concerning international data transfers. Assisting clients both domestically and within the EU, the team adopts a multidisciplinary approach, drawing on the expertise of its TMT and litigation teams to provide advice and representation on data protection, cybersecurity and DPO outsourcing matters.

The team at Baker McKenzie Krzyzowski i Wspólnicy Sp.k. advises clients operating across a wide range of industries such as tech, finance and healthcare, on matters involving digital media, data privacy and cybersecurity. The practice is jointly led by Radosław Nożykowski, an expert in cybersecurity and the regulatory aspects of new technologies, who draws on extensive litigation experience in disputes across the practice area; and Marcin Fijałkowski, who specialises in gaming and metaverse matters.

DWF Poland Jamka Sp.k has tripled its headcount at the practice, thus significantly expanding its advisory provision for matters concerning cybersecurity, cloud services and AI. The team accompanies its advisory services and assists with litigation resolving disputes and handling compensation claims. The ‘very impressive’ Gerard Karp leads the team, specialising in personal data protection, cybersecurity and IT, and advises both domestic and international entities on the aforementioned areas of interest.

The team at KWKR Konieczny Wierzbicki i Partnerzy is well-placed to advise both domestic and international corporates, and is skilled at advising on personal data processing, compliance matters and projects concerning mobile apps and web platforms. Working across key sectors such as med-tech, finance and insurance, the team is well-regarded for assisting with specialised advice on products such as chatbots, facial recognition tools and medical diagnostic algorithms. Mariusz Purgał leads the practice, handling matters across domestic and international corporate environments.

Leading the practice at Wardynski & Partners, Krzysztof Wojdyło is well-placed to handle matters involving e-commerce, blockchain and privacy issues. The team takes a multidisciplinary team, providing expertise across a wide range of sectors, including tech and pharmaceuticals. The group also specialises in advising on new technology matters, offering guidance to tech startups on fintech, blockchain and AI products and services.

The team at A&O Shearman is led by Krystyna Szczepanowska-Kozłowska, who directs the team in providing strategic advice to national and global clients on cross-border data privacy and protection matters. Utilising its wealth of specialists in complementary areas, such as employment, finance and IP. The team has also engaged with new trends in the market handling the deployment of generative AI for clients.

The team at APLaw Artur Piechocki is well-regarded for providing comprehensive advice on general data protection issues including GDPR compliance, while also providing more specialised guidance on privacy issues in the TMT sector in the areas of data donations, data tokenisation and big data. The firm’s strong international network allows it to take on cases both domestically and within the EU, despite its boutique size. Leading the team is Artur Piechocki, who specialises in ICT law and cyber security.

Providing ‘innovative solutions’, the team at Kochanski & Partners has substantial experience handling data privacy, protection and security matters, owing to its client base of leading multinational companies across key industries such as finance, fintech and medtech. The team also specialises in cross-border data transfers, data processing and transfer agreements, as well as cybersecurity audits and policies. The team is led by Piotr Kochański, who is well-versed in technology transfers, and Monika Maćkowska-Morytz,who has relevant experience in handling audits.

PwC Legal Zelaznicki sp.k. boasts a large domestic and multinational client base it advises on matters ranging from personal data law to GDPR compliance. The team also has a more specialised capability in advising on the global IT environment and cybersecurity. Leading the team is Paulina Komorowska-Mrozik, who handles all aspects of personal data protection, including compliance, documentation and data transfer impact assessments. She is also adept at representing clients in relevant proceedings before the Polish authorities.

Displaying ‘extensive theoretical and practical knowledge‘, SSW’s practice covers cross-border matters across such industries as IT, tech and life sciences. The team handles GDPR implementation projects, compliance audits and international data transfers, in addition to representing clients before the Polish Data Protection Authority. Leading the team is Agnieszka Witaszek, with experience in all aspects of data privacy, particularly in mapping and managing data privacy processes.

WKB Lawyers assists clients in a variety of industries such as life sciences and IT, courtesy of its multi-disciplinary team of experts from the firm’s various sectors. The practice also notably encapsulates cybersecurity, offering advice on compliance with domestic and EU regulations. Jointly leading the team is Agnieszka Wiercińska-Krużewska , who specialises in new technologies and IT contracts, while Aleksandra Urbanowicz concerns herself with the e-commerce sector. Also leading the department, Piotr Filipowski focuses on cybersecurity matters and IT contracts.