Compliance

Compliance800x420 v2

CJEU: Bank must first return money after unauthorized transaction

The CJEU judgment of 15 October 2026 in Case C‑70/25, Tukowiecka, clearly separates the obligation to promptly refund funds from the subsequent determination of who ultimately bears the loss. A bank cannot withhold a refund simply because it accuses the customer of gross negligence. The case concerned a customer of a Polish bank who fell victim to a phishing scam. The fraudster, posing as an interested purchaser of an item listed on the platform […]
Read more...
Compliance800x420 v2

AI Act – what do the new regulations mean for entrepreneurs and institutions?

Artificial intelligence has become a common tool used by entrepreneurs, employers, and public institutions. AI systems now support document analysis, recruitment, marketing, customer service, and decision-making, among other things. At the same time, employees are increasingly using publicly available generative AI tools independently. However, the development of this technology has created new threats. The European Union's response is the AI ​​Act – a regulation (EU) […]
Read more...
Compliance800x420 v2

Assets under scrutiny by law enforcement. New confiscation rules from November 2026.

Depriving the perpetrator of the proceeds of crime has long been a fundamental instrument in combating economic and organized crime. Conviction alone may prove insufficient if the assets obtained through crime remain at the perpetrator's disposal, are hidden, or transferred to third parties. The European Union's response to this problem is Directive (EU) 2024/1260 of the European Parliament and of the Council of […]
Read more...
Compliance800x420 v2

Cryptoassets Without a Law. Regulatory Loophole Doesn't Mean Impunity

As of July 1, 2026, the provision of crypto-asset services in the European Union requires CASP authorization. Poland still lacks a law designating a supervisory authority and specifying sanctions. Many conclude that the Polish crypto market currently operates outside the reach of criminal law. This conclusion is incorrect. Below, we explain what the current state of affairs actually means […]
Read more...
Compliance800x420 v2

GDPR in practice – review of case law and positions of the Personal Data Protection Office

The turn of August and September 2026 brought several important decisions and announcements regarding personal data protection. The Supreme Administrative Court's ruling regarding the disclosure of PESEL numbers, the UODO's position regarding the MyDr incident, and the fine for the lack of independence of the data protection officer demonstrate the types of errors that can expose an organization to liability. For entrepreneurs, medical facilities, and property managers, the common conclusion is practical: […]
Read more...
Compliance800x420 v2

Can playing with an illegal bookmaker have legal consequences?

The online betting market in Poland is heavily regulated, yet alongside legal bookmakers, there's a vast gray market—services offering bets without the required permit from the Polish Minister of Finance. Many bettors assume that just because a site "has a foreign license," "is Polish," or "pays out winnings," its operations are legal. However, none of […]
Read more...

Latest posts

Our cycles

Most important topics

x
Graś and Partners Law Firm, Warsaw

Contact us!

Graś and Partners Law Firm

Bieniewicka 26 Street
01-632 Warsaw

Monday - Friday
9:00 a.m. - 5:00 p.m.