Information security management and personal data protection

Experience / 06.10.2025

The Law Firm’s lawyers provided legal support to the Client in the process of drafting a comprehensive Information Security Policy document for the Company.

The project included, in particular, verification of the Client’s existing documents concerning information protection, trade secret protection, personal data protection, and analysis of the Client’s information protection needs in the context of the IT systems introduced at the Client’s premises for the processing of information and personal data.

The Client received the necessary support in determining the list of information constituting its trade secrets, which was precisely tailored to all areas of the Client’s business activity. The Law Firm’s lawyers supported the Client in creating an information classification policy, including the creation of a catalogue of basic information in the Company and the categorisation of information used in the Company. For the purposes of the Personal Data Protection Policy, the Client also received support in preparing a risk analysis of personal data breaches, a register of personal data processing activities in the Company, and templates of all necessary authorisations and agreements concerning the processing of personal data and information constituting trade secrets.

The introduction of a comprehensive Information Security Policy document, which also covers personal data protection rules, allowed the Client to adapt the Company’s information protection rules in a transparent, complementary and understandable manner, not only to the applicable legal regulations, but also to the technical and organisational safeguards in place at the Client’s premises.