Employee monitoring and business email in Poland: when may an employer use it?
A legitimate business concern is not enough. Monitoring must be necessary, proportionate, documented in workplace rules and communicated to employees before it starts.
Data & compliance
1-9 of 10
Personal data breach in Poland: what should a business do within the first 72 hours?
A business should not wait for a final forensic report before acting. Containment, evidence preservation, role allocation, risk assessment and the notification decision need to proceed in parallel.
Data processing agreements in Poland: when is a DPA required and what should it cover?
A data processing agreement is required where a supplier processes personal data on a controller’s behalf. A standard DPA is not enough: the parties must first identify their real roles and then document the service, security, sub-processors and exit arrangements.
Polish e-Deliveries for pre-2025 sole traders from 1 October 2026: what needs to be prepared?
Filing an application for a Polish e-Delivery address is not the end of the implementation. The mailbox must be activated, access must be allocated and incoming official correspondence must be monitored.
Cyber Resilience Act reporting is now mandatory: the 24- and 72-hour deadlines
CRA reporting already applies. Manufacturers need a working classification process, access to ENISA's reporting platform and contracts enabling timely escalation.
NIS2 in Poland: KSC registration and what to do next
KSC registration is one stage of implementation. Review your company’s classification, filing details and remaining duties, including IT supplier arrangements.
GDPR and direct marketing in a Polish agency: databases, mailing and campaigns
How to allocate controller and processor roles, verify the source and permitted use of databases, manage suppliers, objections and campaign evidence.
Building your own SaaS: what to put in place before your first paying customer
Building a small SaaS? Learn what to address before your first paid subscription: terms, recurring payments, code ownership, GDPR and customer exit.
GDPR audit for a small or medium-sized business in Poland
A practical audit of processing activities, legal bases, suppliers, security, retention, incidents and data-subject rights.
Need to apply this to your business?
Tell me about your situationLet’s talk about your matter.
Describe your goal and deadline. I will suggest the next step and we will agree the scope and fee before work begins.