Data Protection

We advise on:

  • current issues regarding processing and protection of personal data,
  • compliance of the activities of businesses and public bodies with the requirements of EU regulations, and on the day-to-day problems related to personal data processing,
  • legal audits of personal data protection procedures (including post-implementation),
  • legal due diligence on personal data processing together with the production of risk reports,
  • monitoring documentation to keep it up-to-date,
  • activities of the data protection officer/person responsible for actions regarding data protection, including with regard to requests for the exercise of data subjects’ rights, application of the relevant provisions of law and the implementation of required or recommended solutions, verification of agreements with third-party organisations,
  • the process of developing a service or product (privacy by design) by actively partaking in the design process (including risk assessment, presenting recommendations, and drafting or providing opinions on documents such as rules and terms of sale),
  • representation in the course of inspections by the supervisory authorities or at the stage of court proceedings.

Our competitive advantage:

  • understanding of our clients’ business needs,
  • clear recommendations, easily applicable in practice,
  • a team supported by WKB experts in regulated industries (such as the banking and financial sector, insurance and energy industries) and coordinating its efforts,
  • an offer including tailor-made workshops and newsletters through which we share our expertise and know-how,
  • providing assistance in the implementation of risk-management tools in the ever-changing regulatory environment.

Practice managers



‘WKB is the best firm we have worked with. They are responsive, diligent, practical and thorough. They provide excellent and timely advice.’
Legal 500 EMEA 2024 | Data Privacy and Data Protection
They have good knowledge of the industry, not just law. They know how to combine legal expertise with the business needs of the client.
Legal 500 EMEA 2023 | Data Privacy and Data Protection
This practice is unique in its approach to clients from extremely fast paced sectors. Their cutting edge advice is very elastic: one can always count on receiving detailed advice.
Legal 500 EMEA 2022 | Data Privacy and Data Protection

Selected experiences

Some of our recent clients include:

  • Samsung Electronics Poland Manufacturing
  • Bank Gospodarstwa Krajowego (BGK)
  • Apart
  • Bank Zachodni WBK
  • UBER
  • PZU group
  • PGNiG OD
  • Allegro
  • MyBenefit
  • PZU Zdrowie
  • Poczta Polska
  • Fremantlemedia Polska
  • Polski Bank Komórek Macierzystych (Polish Stem Cell Bank)
  • ENEA Operator
  • Wielkopolska Region Development Fund
This site is registered on as a development site.