Data protection and compliance
Documentation is not enough where the operating process differs. This collection focuses on where data goes, who decides, how long it is retained and what happens if an incident occurs.
Practical questions
A business should not wait for a final forensic report before acting. Containment, evidence preservation, role allocation, risk assessment and the notification decision need to proceed in parallel.
Read the guide ↗Filing an application for a Polish e-Delivery address is not the end of the implementation. The mailbox must be activated, access must be allocated and incoming official correspondence must be monitored.
Read the article ↗The CRA reporting regime starts before most other requirements under the Regulation. Businesses marketing software or hardware under their own name should map their products, reporting thresholds, escalation routes and supplier obligations before 11 September 2026.
Read the article ↗A DPA is required where a supplier processes personal data on a company’s behalf and for its purposes. Access to data alone is not enough; the parties’ roles must first be classified correctly.
Read the article ↗Businesses in sectors covered by Poland’s amended Cybersecurity Act must assess their own status. For some entities, registration is due by 3 October 2026.
Read the article ↗How to allocate controller and processor roles, verify the source and permitted use of databases, manage suppliers, objections and campaign evidence.
Read the article ↗A business does not have to certify every AI tool merely because 2 August 2026 has passed. It must classify use cases, implement applicable disclosures, support AI literacy and prepare a roadmap for high-risk systems.
Read the article ↗A practical audit of processing activities, legal bases, suppliers, security, retention, incidents and data-subject rights.
Read the article ↗Seller information, checkout, terms, pricing, withdrawal, complaints, GDPR, reviews and product-safety issues for Polish e-commerce.
Read the article ↗Need advice?