Zuzanna Prandecka-Walek

She supports organizations in building secure operating models in the cybersecurity space. She helps companies adapt to the requirements of the DORA Regulation by conducting compliance audits and developing implementation documentation. She advises businesses on how to adapt their operations to the provisions of the NIS2 Directive, including supporting companies in self-verification of their compliance with these regulations and conducting training and webinars.

She has experience as a lead auditor of the ISO/IEC 27001 standard, enabling her to combine legal and technical perspectives in information security projects.

She supports companies in the areas of personal data protection and consumer regulations, helping them design processes compliant with the GDPR and the requirements for online marketing, e-commerce, and digital services. She advises companies in the technology sectors, including game development, finance, and automotive, combining a practical business perspective with a deep understanding of data and privacy regulations. As part of her e-commerce specialization, she leads projects that include website and application audits, documentation preparation (terms and conditions, privacy policies, cookies), implementation of consent mechanisms, and work related to digital regulations—including the Omnibus Directive, DSA, and DMA. As a member of the DPO teams, she participated in risk analyses, incident assessments, process reviews, and represented clients in proceedings before the Personal Data Protection Office (UODO).

In her work, she prioritizes transparency, methodical approach, and collaboration with legal, IT, and marketing teams, ensuring that her advice provides real support for business operations.