compliance

Compliance800x420 v2

NIS2 – new responsibilities of members of governing bodies in 2026

Analysis of the Directive and the Draft Act: The NIS2 Directive introduces a fundamental change in the approach to cybersecurity in the European Union. For the first time, it explicitly assigns personal responsibility for cybersecurity to members of management bodies, including company management boards. This means that cybersecurity is no longer the exclusive domain of IT or compliance departments, but rather an area of ​​direct management oversight. In […]
Read more...
Compliance800x420 v2

Digital Omnibus and GDPR, AI Act and Data Act – what will change in practice for companies?

The Digital Omnibus is a forthcoming package of legislative changes at the EU level that aims to streamline and simplify the increasingly complex regulatory landscape surrounding data, artificial intelligence, and digital responsibility. Its goal is not to weaken personal data protection, but to reduce compliance costs, particularly for smaller and medium-sized enterprises, while maintaining high security standards. In this article, […]
Read more...
Compliance800x420 v2

Record GDPR fines in 2025 – what do they teach entrepreneurs?

The year 2025 will bring a significant tightening of GDPR enforcement practices by the President of the Personal Data Protection Office (UODO). Already in the first months of the year, decisions were made demonstrating that personal data protection is not just a matter of formal documentation, but also of real organizational and technical measures. The record-breaking GDPR fines in 2025 are a clear warning sign for businesses and entities […]
Read more...
Compliance800x420 v2

AML risk assessment in obligated institutions – a practical guide for 2025

Assessing money laundering and terrorist financing risk is a key responsibility of every obligated institution – from accounting firms to insurers and banks. In 2025, this requirement will become even more important due to growing expectations from regulators and updated EU and national guidelines. This guide explains how to properly develop an AML risk assessment, what factors should be considered […]
Read more...
Compliance800x420 v2

Cybercrime and criminal law in 2025 – how companies can effectively defend themselves

In 2025, cybercrime has become one of the most serious threats to businesses in Poland and Europe. With the entry into force of the amendment to the Act on the National Cybersecurity System (implementing the NIS2 directive), companies' responsibility for protecting data, IT systems, and responding to incidents is growing. From a criminal law perspective, a cyberattack is not only a technical threat but also a potential crime […]
Read more...

Latest posts

Our cycles

Most important topics

x
Graś and Partners Law Firm, Warsaw

Contact us!

Graś and Partners Law Firm

Bieniewicka 26 Street
01-632 Warsaw

Monday - Friday
9:00 a.m. - 5:00 p.m.