WILIŃSKI LEGAL
Technology changes faster than internal procedures. A legal problem often begins before management even learns that a new tool is being used or that an incident has occurred.
We advise on the legal aspects of artificial intelligence, cybersecurity and KSC/NIS2. Our work covers regulatory obligations, contracts, incident response and cooperation with technical teams.
Practice leadership
We work with businesses on legal questions arising from the use of AI and other technologies. Advice may include contractual terms, regulatory responsibilities and steps to take following a cybersecurity incident.
Who we support
Accountability, oversight, post-incident decisions, risk acceptance and organisational readiness.
Policies, registers, roles, escalation procedures and compliant use of AI.
Translating a technical incident into legal obligations, organisational decisions and communication.
Rules for tool use, confidentiality, data, copyright and human oversight.
Products
Assessment of roles, procedures, decision paths and communication. Result: a list of gaps, priorities and an action plan for management.
Assessment of the organisation's obligations, accountability and documentation, together with an adaptation plan.
Rules for permitted use, data classification, human control, confidentiality and employee accountability.
Review of how AI is used in the organisation, allocation of roles, approval procedures and documentation of decisions.
A practical workshop: what management is responsible for, what it should know and which questions it should ask technical teams.
Support in assessing obligations, communication, documenting decisions and coordinating with IT and people responsible for data.
How we work
We establish where technology is actually being used and who makes the relevant decisions.
We assess the regulations and accountability framework applicable to the organisation.
We identify what is missing organisationally, legally or in the documentation.
We prepare procedures and materials that employees and management can realistically use.
No. We focus on the legal and organisational layer, accountability and procedures. Where needed, we work with the client's technical specialists or external experts.
Not if the organisation does not know where and how AI is being used. The document should reflect the real model of tool use and allocation of responsibility.
Before an incident occurs. After an attack, time is consumed by operational decisions, so roles, contacts and escalation paths should be established in advance.
Insights
Cyber
The most important decisions should be made while everything is still working.
AI
Risks involving confidentiality, personal data and trade secrets.
Governance
How to assign roles and control the use of tools within the organisation.