Associate

Magdalena Zajęcka

Languages

Polish
English
Italian

Social media

Magdalena Zajęcka is an attorney-at-law and an associate in the Intellectual Property and Technology, Media & Telecommunications practice at CMS Poland.

Magdalena specialises in personal data protection, with hands-on experience supporting both local and international clients across highly regulated sectors, including banking, fintech, insurance, pharma, energy, automotive and television. She advises on a wide range of data privacy matters – from drafting and auditing GDPR-compliant documentation (including privacy policies, consent forms, DPIA, record of processing activities), negotiating data processing agreements to supporting large-scale GDPR implementation and mapping projects.

She also gained experience working directly for a client in the information management services sector as part of a global team responsible for compliance with personal data regulations.

Her day-to-day practice includes strategic advice on employee and customer data processing, as well as launching new data-driven products and functionalities. Magdalena also has a proven track record in handling data breach incidents and representing clients in proceedings before the Polish Data Protection Authority and administrative courts.

She currently supports a major global cloud provider on secondment.

Relevant experience

Canon Europe Ltd., on analysing whether a new service falls under the scope of the newly adopted EU regulation – i.e. the Digital Services Act (“DSA”), and in particular whether the service qualifies as an intermediary service under the DSA.
Better Energy A/S, on implementing its new HR platform, contract negotiations with an external HR platform provider and implementation partner, following a detailed contract analysis and privacy risk assessment. Our Transfer Impact Assessment and Data Protection Impact Assessment identified key data protection risks, prompting follow-up actions to ensure regulatory compliance.
International Paper, on its update of internal GDPR records and data mapping within its Polish shared service company. We analysed internal processes and prepared revised records of processing activities across the Group, ensuring accurate documentation of data handling in line with regulatory requirements.
Iron Mountain, on its Global Data Residency project and development of Binding Corporate Rules, enabling compliant cross-border data transfers. We coordinated work across 25+ jurisdictions, advised on implementation of new SCCs, and supported formal proceedings with the Lead Authority—crucial for Iron Mountain’s global data-driven operations across regulated sectors.

Publications

The Legal Industry: NIS2 in Poland: Essential Insights and Implemention Highlights
ISBTech: Cybersecurity strengthened by law – what does this mean for entrepreneurs?
ODO Magazine (number 32): Pseudonymisation under scrutiny: new EDPB Guidelines and Opinion of the Advocate General
ODO Magazine (number 30): Act on Counteracting Sexual Crime Threats – Challenges for Employers with Regard to Personal Data

Memberships & Roles

Warsaw Bar Association of Attorneys-at-Law

Lectures list

Must Read Media: XV Polish Congress on Personal Data Protection Law, Panel: “Trusted recipient” in light of the decision of the President of the Personal Data Protection Office and the case law of administrative courts
CMS & Microsoft joint conference “The Lawyer in the Age of AI”, focused on using AI in everyday legal one of the speaker

Education

SGH Warsaw School of Economics, Postgraduate Programme, Artificial Intelligence Applications in Business and the Public Sector (2024)
Jagiellonian University, Faculty of Law and Administration, M. A. (2018)
Jagiellonian University, Krakow and Columbus School of Law the Catholic University in Washington (D.C.); American Law Programme (2018)
University of Ferrara; Erasmus+ Programme (2017)

Practice Areas

Intellectual Property

sectors

TMT - Technology, Media & Telecommunications Data Protection

Select your region