Personal data protection
We are a trusted partner of entrepreneurs who process personal data as part of their business. Our experts help companies meet the challenges of RODO and the European Digital Decade. We have extensive experience of working in many sectors, including finance and IT.
Continuous process to ensure compliance with RODO
Personal data is called “new oil” – it enables the development of new products and services and allows for improvements to the existing ones through, among other things, customizing them better to the client or ensuring better user experience. Therefore, processing personal data is necessary to be competitive in the market. Although the regulation on personal data protection has already been in force for several years, collecting, processing and storing personal data in accordance with these regulations is not an easy task. It is important to remember that compliance with RODO is an ongoing process, and any lapses in compliance will result in hefty financial penalties.
The EY Law team helps Clients find their way in this complex environment. Our advice is not limited to stating that "measures must be adequate" - we say exactly what that means.
Our offer concerning personal data includes:
RODO audits – review of compliance with personal data protection regulations, due diligence, post-implementation audits, analysis of compliance in specific areas and assessment of specific systems.
RODO implementations – ensuring compliance of new entities and companies after transformations with RODO, implementing the required documents, policies and procedures, and providing training.
Protecting privacy on the Internet and marketing – advice on the protection of personal data in websites, social media, applications, IT systems, in the process of acquiring databases, and implementing systems that aggregate data from cookies and many other independent sources.
Risk analyses – legal support (with the possibility of obtaining synergy from collaboration with the technology team) in analyzing processing risks, adequacy of the implemented security measures and examining the effects of processing in the area of data protection.
Selection of the legal basis for processing – support in determining the right legal basis for processing, in conducting the legitimate interest test, determining the maximum data range and retention period, designing the necessary consent clauses for personal data processing.
Transfers outside the EEA – analyzing the risk of data transfer outside the EEA and providing support in ensuring appropriate safeguards for the operation in question, including the drafting of contracts based on standard contractual clauses approved by the European Commission or developing binding corporate rules.
Data Protection Officer (DPO) – serving as the so-called external DPO / providing outsourced services in the field of personal data within flexible working hours packages offered as part of the consultancy in question.
Why EY Law Poland?
Individual approach to the customer
We accompany clients at every stage of project implementation, supporting them in achieving their goals. We always find the most effective and pragmatic solutions that minimize all risks at the same time. We have the opportunity to consult technical teams on an ongoing basis, which allows us to advise in a practical and comprehensive way.
Areas of practice
We successfully handle even the most complex cases and advise on the effective use of state-of-the-art solutions related to personal data protection and GDPR implementation. We run multi-jurisdictional projects in which we advise clients on the implementation of coherent solutions covering entire regions (e.g. CESA, CEE and Nordics).
Comprehensive solutions
We provide not only legal advisory services, but also concrete and durable solutions. Working closely with EY Cybersecurity, Business and Tax Advisory teams, our advice is comprehensive and more understandable to the client.
Team of experts
Our team consists of attorneys and legal advisors who are distinguished by comprehensive experience and in-depth knowledge of business principles.
International and recognized brand
EY Law's Digital Team and its Leader are regularly recognized in prestigious rankings: Chambers Global, Chambers Europe, Legal 500, IFLR 1000, WTR 1000, IAM Patent.
Think globally, act locally
EY offers its services in 150 countries, and thanks to our extensive network of contacts and extensive exchange of experience, we create custom solutions.
European Digital Map
EY Law Poland will prepare your business for the ongoing digital transformation in Europe.
Digital Regulatory Check
Check your digital compliance with just one click using Digital Regulatory Check.
We are recommended in prestigious international rankings. Legal500 wrote about us: ‘Wide range of specialists, strong technical knowledge and ability available for support in the most complex and innovative projects.’
Justyna Wilczyńska-Baraniak
EY Partner, Intellectual Property, Technology and Personal Data Team Leader
Our strength is comprehensive and top-quality advice.
We are one of the most dynamically developing international legal practices in Poland.
We combine many years of experience of legal advisors and attorneys with knowledge of the business principles of our clients. Thanks to this, we increase the efficiency of their work, while reducing the costs of their business. We go far beyond the classic understanding of consulting in the field of intellectual property and personal data protection.
We offer comprehensive, cross-sectoral and multidisciplinary legal advice at every stage of project implementation. We provide practical solutions to help you achieve your goals as effectively as possible.
EY Law Poland Team
Previous
Next
Contact us
Interested in the changes we have made here,
contact us to find out more.
