Data protection
GDPR programmes your team can actually run: records, policies, DPIAs, an outsourced DPO, data processing agreements and representation before the Polish DPA.
Law, data protection and AI governance in Warsaw
Use data and AI with confidence.
Legal advice and compliance built on our own published method.
We help organisations turn GDPR, NIS2 and the EU AI Act into clear decisions, practical processes and contracts that work. Our approach comes from more than 40 implementations and three books published by C.H. Beck.
The 16-step method
From the first question to a system that runs every day
1
Identify
Map your data, systems, vendors and AI use.
2
Assess
Find the risks, gaps and legal requirements that matter.
3
Implement
Put policies, contracts, controls and training in place.
4
Apply
Keep it working with monitoring, audits and updates.
Published in “Ochrona danych osobowych od A do Z w 16 krokach”, C.H. Beck.
What we help with
Regulation is only useful when it turns into decisions people can act on. That is where we work.
AI governance
Clear rules for using AI: EU AI Act readiness, ISO/IEC 42001, AI risk and impact assessments with ARIA, and AI contracts that allocate responsibility.
Cybersecurity and NIS2
NIS2 and the Polish KSC Act, ISO/IEC 27001 and an external CISO, so security is managed, documented and tested.
Technology contracts and IP
IT, SaaS and AI contracts, intellectual property and e-commerce, drafted and negotiated in English or Polish.
Disputes and authorities
Representation before courts and authorities when a matter becomes contentious, including data protection proceedings.
Training and AI in practice
Training that changes how teams work, and AI tools and automation implemented with compliance built in from day one.
Method
Two methods developed by Dr Paweł Mielniczek and published by C.H. Beck. They turn regulation into a sequence of decisions your team can follow.
16-step method
- 1Identify
- 2Assess
- 3Implement
- 4Apply
Sixteen steps in four phases take an organisation from the first data map to a data protection system that works day to day. Used in more than 40 organisations.
About the book →ARIA: AI Risk and Impact Assessment
A structured review of every AI use case: where AI creates risk, which controls and data boundaries are needed, and who approves what before deployment. It gives boards and teams one shared language for AI decisions.
About the book →
Founder
Dr Paweł Mielniczek
- Advocate, Warsaw Bar
- President of the Management Board, Get Compliant sp. z o.o.
- Founder, SkillsSurf LLC
Advocate and doctor of law (University of Warsaw), with doctoral research on the human right to privacy. He has worked at the Legal Office of NATO HQ SACT, the United Nations Office at Geneva, a financial institution, a data protection supervisory authority, an antitrust authority, a data protection consulting firm and an international law firm.
He created the 16-step method and the ARIA framework, is editor-in-chief of Vademecum AI Officera (C.H. Beck, 2026) and teaches data protection and AI governance to thousands of learners on Coursera, Udemy, LinkedIn Learning, Starweaver and Beck Akademia.
- PhD in law
- Advocate
- C.H. Beck author
Team
Lawyers, compliance specialists and engineers who work on data, security and AI every day.
gclawyers.eu
Legal services
Witold Masionek
Advocate
Intellectual property, IT and new technologies law, data protection, e-commerce.
LinkedIn
Piotr Liwszic
Lawyer
Data protection and new technologies law, ISO/IEC 27001 auditor, founder of judykatura.pl.
LinkedIn
Justyna Mielniczek
AI implementation specialist
Technical support for AI tools and automation in legal work.
LinkedIn
Get Compliant
Compliance consultingDr Paweł Mielniczek
President of the Management Board
Data protection officer, AI governance and compliance systems.
LinkedInJustyna Mielniczek
AI implementation specialist
ISO/IEC 42001 internal auditor. AI compliance processes, no-code and low-code tools, workflow automation.
LinkedIn
Marcin Mroczkowski
AI solutions architect, partner
Founder and CTO of OptFor.AI, Oracle Certified Master Java Developer.
LinkedIn
Claude Baudoin
Strategic IT advisor, partner (USA)
Owner of cébé IT & Knowledge Management LLC, co-chair of OMG groups on AI and cloud.
LinkedIn
Books, courses and talks
We write and teach what we practise. Our books and courses are the same methods we use with clients.
Vademecum AI Officera
Editor-in-chief: Dr Paweł Mielniczek. 28 chapters by 19 authors on AI strategy, law, technology and management. Co-authors include Justyna Mielniczek, Marcin Mroczkowski and Piotr Liwszic.
Pre-order at C.H. Beck
Wdrażanie AI w organizacji
Legal analysis, risk assessment and compliance methodology for AI in organisations. English edition, Implementing AI in an Organisation, forthcoming.
View at C.H. Beck
Ochrona danych osobowych od A do Z w 16 krokach
The 16-step method for building a complete data protection system in an organisation.
View at C.H. BeckOnline courses
Coursera, Udemy, LinkedIn Learning and Starweaver: GDPR, corporate governance, generative AI for legal teams and contract management. More than 31,600 enrolments.
Beck Akademia
AI Officer: strategia, prawo, technologia, zarządzanie. Online course in six modules, taught by Dr Mielniczek and co-authors of the Vademecum. Autumn 2026 edition: 14 October to 8 December.
Lectures and talks
Lecturer at Akademia Zarządzania Sztuczną Inteligencją (IT Leader Club Polska). Speaker at LegalTech Forum 2026 on choosing AI tools for law firms.
AI in practice with SkillsSurf
Our sister company SkillsSurf LLC helps teams put AI tools and automation to work in everyday tasks, learning and processes.
Who does what
Two providers work side by side under one contact point. You can engage one of them or both.
Legal services, gclawyers.eu
Compliance consulting, Get Compliant
Provider
Law Office of Dr Paweł Mielniczek, Advocate (Usługi Prawne Paweł Mielniczek), with cooperating advocates and lawyers
Get Compliant sp. z o.o.
Services
Legal advice and opinions
IT, SaaS and AI contracts, IP and e-commerce
GDPR, AI Act and cybersecurity law
Courts, the Polish DPA (UODO) and other authorities
Outsourced DPO and EU representative
ISO/IEC 27001, NIS2 and external CISO
ISO/IEC 42001, AI Act readiness and ARIA
Audits, training and AI implementation
Rules
Advocate's professional secrecy and compulsory professional liability insurance
Contractual confidentiality. Get Compliant does not provide legal advice.
Legal services, gclawyers.eu
ProviderLaw Office of Dr Paweł Mielniczek, Advocate (Usługi Prawne Paweł Mielniczek), with cooperating advocates and lawyers
ServicesLegal advice and opinions
IT, SaaS and AI contracts, IP and e-commerce
GDPR, AI Act and cybersecurity law
Courts, the Polish DPA (UODO) and other authorities
RulesAdvocate's professional secrecy and compulsory professional liability insurance
Compliance consulting, Get Compliant
ProviderGet Compliant sp. z o.o.
ServicesOutsourced DPO and EU representative
ISO/IEC 27001, NIS2 and external CISO
ISO/IEC 42001, AI Act readiness and ARIA
Audits, training and AI implementation
RulesContractual confidentiality. Get Compliant does not provide legal advice.
One proposal shows the scope, fees and timeline for each provider. Each provider invoices and is responsible for its own work. The full rules are in our Terms and Conditions.
Frequently asked questions
Do you work in English?
Yes. We work in English and Polish with clients in Poland, the EU and beyond.
Can you act as our data protection officer?
Yes. Get Compliant acts as outsourced data protection officer and as EU representative under Article 27 GDPR.
How do you use AI in your work?
AI tools support our work. Professional judgment and responsibility stay with us, and on request we tell you which tools we use in your matter.
Is my information confidential?
Yes. The law office is bound by advocate's professional secrecy and Get Compliant by confidentiality. We share information between us only on your instruction.
How are fees set?
Fees are agreed in each proposal: hourly, fixed or monthly. Each provider invoices its own services.
Where are you based?
Poetów 8c, 03-147 Warsaw, Poland. We work on site and online.
Book a consultation
Tell us briefly what you need. We will reply with a time for a call and then a clear proposal with scope, fees and timeline.
Please do not send confidential details before we confirm that we can take on your matter. We process your data as described in our Privacy Policy.
- office@gclawyers.eu
- Phone
- +48 792 294 379
- Address
- Poetów 8c, 03-147 Warsaw, Poland
- Languages
- English, Polish