Contact
Back to the team
  • Precise
  • Technology-focused
  • Pragmatic

Łukasz Bojarski

Senior Associate

Since 2017, I have been working in the field of personal data protection and privacy, helping companies design processes that comply with the GDPR, sector-specific regulations, and business requirements. I work primarily with organizations in the IT, game development, e-commerce, finance, manufacturing, and healthcare sectors. I help clarify legal roles, data flows, data processing agreements, DPIA, data transfers, and internal documentation. I’m particularly interested in technology projects where data protection must function not only on paper but also within the product, the system, and day-to-day processes. I focus on practical solutions: ones that are feasible, understandable to teams, and proportionate to the actual risk. After work, you'll most often find me at a Muay Thai training session, listening to metal music, or at MMA events.

Contact

What I Do

I specialize in

From launch through day-to-day operations to decisions that demand precision, we guide businesses through each stage of growth with legal support in these areas.

Personal data protection and the GDPR

I help businesses build GDPR-compliant processes, from analysing roles and legal bases to preparing documentation, procedures and ongoing advice.

Audits and compliance programmes

I conduct data protection audits, identify risks and translate the findings into concrete actions, documents and implementation priorities.

Privacy by design and technology projects

I help product, IT and business teams design solutions that meet privacy requirements from the concept and architecture stages through implementation.
Specializations

From Challenge to Solution

How I Work

Once a business is up and running, the greatest risks often come not from individual decisions but from everyday friction: delays, uncertainty and operational disarray. Legal support should work quietly in the background, keeping pace with the business, not holding it back.

Situation

A technology company was implementing a new digital product based on processing user data and working with external technology service providers.

Action

I analysed legal roles, data flows, legal bases for processing, documentation requirements and privacy-by-design requirements. I prepared recommendations that could be implemented without holding up product work.

Outcome

The client clarified its data-processing model and could develop the product with greater control over legal and operational risk.

Situation

The organisation processed personal data across multiple systems and processes, but its documentation and procedures did not reflect how it actually operated.

Action

I conducted an audit, identified gaps, organised the registers, procedures and documentation, and prepared a plan for further implementation.

Outcome

The company gained a more coherent data protection system, better control over its processes and clear priorities for further action.

Situation

An international project required an assessment of the risks associated with processing data outside the EEA and working with foreign entities.

Action

I analysed the transfer model, the parties' roles, legal bases and required safeguards, including contractual documentation and a risk assessment.

Outcome

The client could continue the project with a clearly defined allocation of responsibilities and reduced regulatory risk.

From Challenge to Solution, Step by Step

The Principles That Guide Me

Once a business is up and running, the greatest risks often come not from individual decisions but from everyday friction: delays, uncertainty and operational disarray. Legal support should work quietly in the background, keeping pace with the business, not holding it back.

Effectiveness

I value solutions that can genuinely be implemented, rather than documents created solely in anticipation of an inspection.

Clear communication

I explain complex legal matters in a way that is clear to management and to IT, HR, sales and operations teams.

Risk-based approach

Not every risk requires a company-wide reorganisation. I help determine what is critical, what can be simplified and what is merely formal noise.

BLOG

Articles by Me

Selected examples of projects in which we supported businesses with legal matters, from regulatory advice and compliance to technology projects, transactions and ongoing business support.

Read all articles