Guide “Cybersecurity. NIS2 in Poland – Corporate Obligations under the National Cybersecurity System”

16.06.2026 Publications Compliance Personal data Special projects / Risk & Support

The implementation of the NIS2 Directive and the amendments to the Polish National Cybersecurity System Act significantly expand the range of entities subject to cybersecurity obligations. For many organisations, one of the key challenges will be determining whether they fall within the scope of the new regulations and understanding the steps required to achieve compliance.

In response to these developments, GESSEL experts have prepared a guide entitled “Cybersecurity. NIS2 in Poland – Corporate Obligations under the National Cybersecurity System”, providing a practical overview of the new regulatory framework and its implications for businesses.

The publication is intended for board members, business owners, compliance officers, information security professionals, as well as legal and IT teams supporting organisations in adapting to the new regulatory environment.

“For many organisations, the real challenge will not be the implementation of technical safeguards itself, but determining whether they fall within the scope of the new framework and understanding the obligations associated with their status. An incorrect assessment may expose businesses to significant regulatory and organisational risks, which is why preparations should begin well in advance,” says Adam Kraszewski, Partner at GESSEL.

The guide covers, among others:

  • identifying entities subject to NIS2 and the Polish National Cybersecurity System regulations,
  • obligations of essential and important entities,
  • cybersecurity risk management and information security governance,
  • incident response and management liability.

The guide highlights that cybersecurity is becoming an increasingly important element of corporate governance and enterprise risk management. As a result, preparation for NIS2 and National Cybersecurity System requirements should be viewed not solely as a technology initiative, but as an organisation-wide compliance and governance process.

We invite you to explore the guide, available for download here.

Related people

Guide “Cybersecurity. NIS2 in Poland – Corporate Obligations under the National Cybersecurity System”

Adam Kraszewski

Partner
Attorney-at-law

Labour law, management contracts | Intellectual property law | Life Sciences and Health Care

Adam Kraszewski

Adam Kraszewski

Partner
Attorney-at-law

Adam joined GESSEL in 2006, and became a partner in 2021. He is often called upon in complex matters which depart beyond the obvious, requiring an original approach rooted in many legal specialisations. He helps to devise effective employment mechanisms (also for senior management) and internal regulations. Adam’s calm demeanour and ability to communicate difficult truths make him a valuable partner in dispute resolution. His employment law ex...

Guide “Cybersecurity. NIS2 in Poland – Corporate Obligations under the National Cybersecurity System”

Daria Golus

Senior Associate
Advocate

Personal data | Intellectual property law

Daria Golus

Daria Golus

Senior Associate
Advocate

Daria joined GESSEL in 2022. She represents clients before the civil, administrative, and criminal courts, before the Patent Office of the Republic of Poland, and the European Union Intellectual Property Office (EUIPO). Her experience encompasses registration and annulment of industrial property rights as well as drafting and negotiation of contracts concerning intellectual property rights, e-commerce, and personal data. She has applied her...

Guide “Cybersecurity. NIS2 in Poland – Corporate Obligations under the National Cybersecurity System”

Wiktoria Bednarska-Busz

Associate
Advocate

Intellectual property law

Wiktoria Bednarska-Busz

Wiktoria Bednarska-Busz

Associate
Advocate

Wiktoria supports Clients in the area of copyright law, industrial property law, as well as fair competition principles. She prepares license agreements, agreements transferring rights, and reviews Clients' activities from the perspective of fair competition. He also participates in litigation in cases of infringement of personal rights. Wiktoria has experience in litigation before the Polish Patent Office and the European Union Intellectual Prop...

Guide “Cybersecurity. NIS2 in Poland – Corporate Obligations under the National Cybersecurity System”

Dominika Kowalska

Junior Associate

Labour law, management contracts | Intellectual property law | Life Sciences and Health Care

Dominika Kowalska

Dominika Kowalska

Junior Associate

Dominika Kowalska is a Junior Associate in the interdisciplinary Labour law, management contracts, Intellectual property law, and Life Sciences and Health Care team at GESSEL law firm. She participates in projects involving the review and preparation of employment documentation and supports employers in day-to-day employment law matters. She supports both private and public market clients in matters related to employment relationships and mana...

You may also like

14.07.2026

Comprehensive guide to real estate due diligence by GESSEL experts

The book “Real Estate Due Diligence”, prepared by GESSEL’s real estate practice experts under the scientific editorship of Maciej Boryczko in cooperation with Iwona Giel...

Publications
Comprehensive guide to real estate due diligence by GESSEL experts

24.06.2026

GESSEL represents Nałęczów Zdrój in landmark litigation against the State Treasury of Poland

An article published by Wyborcza.biz discusses landmark proceedings involving Nałęczów Zdrój and the State Treasury of Poland. The matter concerns tax measures which, ac...

Publications
GESSEL represents Nałęczów Zdrój in landmark litigation against the State Treasury of Poland
All publications

Do you want to be up to date?

Subscribe to the newsletter!

Guide “Cybersecurity. NIS2 in Poland – Corporate Obligations under the National Cybersecurity System”