Insights
Stay up to date
Practical explanations of the rules our clients deal with.
Personal data breach – what to do within 72 hours
An e-mail sent to the wrong recipient, a lost laptop, a ransomware attack – each may be a personal data breach. The GDPR gives the controller 72 hours to notify the breach to the supervisory authority, in Poland the President of UODO.
The AI Act after the Digital Omnibus – new deadlines for high-risk systems
On 27 July 2026, amendments to the AI Act adopted as part of the Digital Omnibus entered into force. They postponed the application of the high-risk rules but did not change the obligations that already apply.
How to obtain a Polish industrial security certificate – step by step
The industrial security certificate (świadectwo bezpieczeństwa przemysłowego, ŚBP) – the Polish facility security clearance – is a precondition for performing contracts that require access to information classified as CONFIDENTIAL or higher. Below we outline how a company prepares and how the proceedings work.