Home / People / Damian Karwala
Portrait of Damian Karwala

Damian Karwala


CMS Cameron McKenna Nabarro Olswang Pośniak i Bejm sp.k.
Warsaw Financial Centre
ul. Emilii Plater 53
00-113 Warsaw
Languages English, Polish

Damian Karwala is a qualified legal advisor and a counsel in the IP/TMT Group at CMS. Damian specialises in advising international digital businesses on all aspects of TMT law.

For the last 17 years, Damian has advised clients on data privacy, cybersecurity, IT, internet, e-commerce and digital transformation. His clients include leading mobile operators, internet and e-commerce companies, banks, insurers, software developers and media companies. Over the last few years he has focused on GDPR-related advisory. Recently he participated in due diligence/gap analysis exercises and GDPR awareness trainings for leading insurance and debt collection sector companies.

Damian has authored several academic and specialist publications and practical commentaries relating to data privacy, IT and e-commerce regulations. He also regularly gives presentations on topics related to IT, technology and data protection. He has been recognised by Chambers Europe as an Associate to watch in their TMT – Data Protection legal ranking for the years 2015-2017. 

more less

Relevant experience

  • A leading European debt recovery capital group with offices in over 15 countries - coordinating a General Data Protection Regulation (GDPR) implementation programme;
  • One of the world’s leading online retailers - on various aspects of the GDPR, including processing HR data, background checks, use of CCTV, etc.;
  • A leading global social media provider - in relation to data privacy and providing services by electronic means;
  • Polish subsidiary of a large global web-hosting provider - on website terms of use and privacy policies;
  • A major Polish mobile operator - on various aspects of personal data protection and telecommunication laws, including telecommunication secrecy, protection of users’ services, etc.;
  • Several financial groups of companies - on various aspects of data protection, including cross-selling strategies, CRM companies, client segmentation, data processing notifications, privacy notices;
  • Several Polish software houses that provide IT solutions to, e.g. the aviation and telecommunications industries – in relation to day-to-day legal counselling;
  • One of the most innovative Polish online/mobile e-book platforms – in relation to day-to-day legal counselling. 
more less

Memberships & Roles

  • District Chamber of Legal Advisors in Warsaw
  • IAPP (International Association of Privacy Professionals)
more less


  • 2006 – Jagiellonian University in Cracow, Faculty of Law and Administration;
  • 2004 – Jagiellonian University in Cracow, European Studies;
  • 2004 – Tilburg University, Faculty of Law
more less
CMS strengthens its data pro­tec­tion prac­tice
CMS’ grow­ing data pro­tec­tion prac­tice has been strengthened by Dami­an Kar­wala, leg­al coun­sel with more than 12 years of ex­per­i­ence in the field of data pro­tec­tion and new tech­no­lo­gies law. Since the...
CMS con­tin­ues to in­vest in its in­tel­lec­tu­al prop­erty and tech­no­logy prac­tice
Warsaw,15 Novem­ber 2017 – CMS is com­mit­ted to the de­vel­op­ment of its in­tel­lec­tu­al prop­erty and tech­no­logy prac­tice and strength­en­ing the team by hir­ing ex­perts and ex­per­i­enced law­yers, as well as ju­ni­or...


Re­cord high GDRP re­lated fine in Po­land
The Pol­ish Data Pro­tec­tion Au­thor­ity (Urząd Ochrony Da­nych Osobow­ych; the “UODO”) has re­cently im­posed a sub­sequent fine for a fail­ure to im­ple­ment suf­fi­cient tech­nic­al and or­gan­isa­tion­al se­cur­ity...
New Act on Open Pub­lic Data in Po­land
On 8 Decem­ber 2021 the pro­vi­sions of the Act on Open Data and the Re-use of Pub­lic Sec­tor In­form­a­tion entered in­to force (“Open Data Act”). This Act, passed on 11 Au­gust 2021, has in­tro­duced in­to...
The Auto­mot­ive In­dustry Re­port 2021/22
The Auto­mot­ive In­dustry Re­port 2021/2022 pub­lished by the Pol­ish Auto­mot­ive In­dustry As­so­ci­ation and co-au­thored by CMS takes a look at some of the key areas af­fect­ing the auto­mot­ive sec­tor. Our cross-prac­tice...
CMS Net­work Shar­ing 4.5
On the brink of a new gen­er­a­tion
5G reg­u­la­tion and law in Po­land
1. What is the state of 5G de­ploy­ment in your coun­try? In March 2020 the Of­fice of Elec­tron­ic Com­mu­nic­a­tions (Urząd Komunikacji Elektron­icznej, UKE) an­nounced an auc­tion for four fre­quency re­ser­va­tions...
The Auto­mot­ive In­dustry Re­port 2020/21
The Auto­mot­ive In­dustry Re­port 2020/2021 pub­lished by the Pol­ish Auto­mot­ive In­dustry As­so­ci­ation and co-au­thored by CMS takes a look at some of the key areas af­fect­ing the auto­mot­ive sec­tor. Our cross-prac­tice...
Pol­ish pub­lic sec­tor moves to the Cloud
The Min­istry of Di­git­al Af­fairs has re­cently is­sued “Cloud Com­put­ing Cy­ber­se­cur­ity Stand­ards” (SCCO), which is part of a broad­er ini­ti­at­ive called “Com­mon State IT In­fra­struc­ture” (WIIP). The...
Par­tial im­ple­ment­a­tion of the European Elec­tron­ic Com­mu­nic­a­tions Code in...
As part of the works on the sub­sequent Anti-crisis Shield aimed at coun­ter­act­ing the eco­nom­ic ef­fects of the coronavir­us, Po­land de­cided to par­tially im­ple­ment the European Elec­tron­ic Com­mu­nic­a­tions Code...
Po­land is work­ing on the im­ple­ment­a­tion of the European Elec­tron­ic...
21 Decem­ber 2020 is the dead­line for EU Mem­ber States to im­ple­ment the European Elec­tron­ic Com­mu­nic­a­tions Code (EECC) to their leg­al sys­tems, which was in­tro­duced un­der the EU dir­ect­ive of 2018 es­tab­lish­ing...
CMS ad­vised on in­vest­ments in the new tech­no­logy sec­tor
CMS ad­vised a lis­ted com­pany, MZN Prop­erty S.A., and some of its share­hold­ers in the pro­cess of ac­quir­ing a stra­tegic in­vestor. MZN Prop­erty is the own­er of In­ter­net plat­forms such as Mo­ri­zon.pl, one...
Po­land: Banks un­der GDPR scru­tiny
Po­land’s data pro­tec­tion watch­dog (“Per­son­al Data Pro­tec­tion Of­fice”) pub­lished its audit plan for 2020. Ac­cord­ing to that plan – this year sec­tor audits will be car­ried out, amongst oth­ers, in...
KNF’s draft com­mu­niqué on cloud com­put­ing
Re­cently, the Pol­ish Fin­an­cial Su­per­vi­sion Au­thor­ity (“KNF”) presen­ted a draft com­mu­niqué on cloud com­put­ing op­er­a­tions in­volving leg­ally pro­tec­ted in­form­a­tion (“Draft”). The Draft relates to...