{"id":3821,"date":"2026-07-31T23:56:09","date_gmt":"2026-07-31T21:56:09","guid":{"rendered":"https:\/\/www.lablogic.pl\/home\/"},"modified":"2026-08-17T08:42:03","modified_gmt":"2026-08-17T06:42:03","slug":"home","status":"publish","type":"page","link":"https:\/\/www.lablogic.pl\/en\/","title":{"rendered":"Home"},"content":{"rendered":"
\n\t\n
\n\t\n
\n\t\n\n

MICHA\u0141 RUTKOWSKI<\/p>\n\n\n\n

DPO, GDPR, NIS2 and Cybersecurity for Medium and Large Organizations<\/h1>\n\n\n\n

I help management boards and teams responsible for data and security to organize risks, obligations and actions. I combine DPO and GDPR support, NIS2, incident handling and training. <\/p>\n\n\n\n

\n
Schedule a diagnostic conversation<\/a><\/div>\n\n\n\n
Explore Services<\/a><\/div>\n<\/div>\n\n<\/div>\n\n\n
\n\t\n\n
\"Micha\u0142<\/figure>\n\n<\/div>\n\n<\/section>\n\n\n
\n\t\n
\n\t\n
\n\t\n\n

Over 20 years of experience<\/strong><\/p>\n\n\n\n

Technology experience, data protection, and cybersecurity since 2004.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n

DPO + IT + Cybersecurity<\/strong><\/p>\n\n\n\n

Combining legal, organizational, technical and operational perspectives.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n

Medium and Large Organizations<\/strong><\/p>\n\n\n\n

Support for management boards and legal, compliance, IT and security teams.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n

From Assessment to Action<\/strong><\/p>\n\n\n\n

Audits, incident handling, and implementations translated into decisions, actions, and organized evidence.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n

\n\t\n\n

How can I help?<\/h2>\n\n\n\n

Choose the area that corresponds to your organization’s current situation. If you don’t know where to start, a diagnostic conversation can be the first step. <\/p>\n\n\n

\n\t\n
\n\t\n
\n\t\n\n

DPO and GDPR<\/h3>\n\n\n\n

External DPO, support for the current officer, GDPR audit and ongoing advice for management and teams.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\n
Learn about DPO and GDPR services<\/a><\/div>\n<\/div>\n\n<\/div>\n\n<\/div>\n\n\n
\n\t\n
\n\t\n\n

NIS2 and local law KSC<\/h3>\n\n\n\n

NIS2 and local law KSC qualification, gap and risk analysis, plan, and support for implementation and audit readiness.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\n
Learn about NIS2 and KSC implementation<\/a><\/div>\n<\/div>\n\n<\/div>\n\n<\/div>\n\n\n
\n\t\n
\n\t\n\n

Incidents and Breaches<\/h3>\n\n\n\n

Situation and risk assessment, decisions regarding notifications, communication, and remedial actions.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\n
See incident support<\/a><\/div>\n<\/div>\n\n<\/div>\n\n<\/div>\n\n\n
\n\t\n
\n\t\n\n

Training and Workshops<\/h3>\n\n\n\n

Practical GDPR and NIS2 training for management boards, executives, employees and IT and compliance teams.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\n
Learn about training and workshops<\/a><\/div>\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n
\n\t\n
\n\t\n
\n\t\n\n

When is it worth talking?<\/h2>\n\n\n\n

It’s worth talking when obligations, risks, or business expectations require organization and concrete decisions.<\/p>\n\n\n\n

You don’t need a ready diagnosis<\/h3>\n\n\n\n

Initially, a general description of the situation, without confidential information, is sufficient. Together, we will determine whether a consultation, audit, implementation project, or ongoing support is needed. <\/p>\n\n\n\n

\n
Schedule a diagnostic conversation<\/a><\/div>\n<\/div>\n\n<\/div>\n\n\n
\n\t\n
\n\t\n
\n\t\n\n

External DPO<\/h3>\n\n\n\n

The organization needs an external DPO or additional support for its current officer.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n

NIS2 and local law KSC<\/h3>\n\n\n\n

It is necessary to define the scope of obligations and translate requirements into responsibilities and an action plan.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n

Incident or Breach<\/h3>\n\n\n\n

An incident has occurred, or there is a suspicion of a data breach.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n

Documentation vs. Practice<\/h3>\n\n\n\n

Documentation does not reflect actual processes, systems, or responsibilities.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n

Client Requirements<\/h3>\n\n\n\n

A client, contractor, or auditor expects confirmation of data protection methods or security levels.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n

Management Decisions<\/h3>\n\n\n\n

Management needs a risk assessment, priorities, and a concrete plan for further actions.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n

\n\t\n\n

How does cooperation work?<\/h2>\n\n\n\n

Cooperation is structured, predictable, and adapted to the actual risks and operating methods of the organization.<\/p>\n\n\n

\n\t\n
\n\t\n\n
\"Situation<\/figure>\n\n\n\n

01. Situation Assessment<\/strong><\/h3>\n\n\n\n

A brief conversation, gathering context and identifying key needs, risks, and limitations.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\"Scope<\/figure>\n\n\n\n

02. Scope and Priorities<\/strong><\/h3>\n\n\n\n

Defining responsibilities, expected outcomes, timeline and order of actions.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\"Implementation\"<\/figure>\n\n\n\n

03. Implementation<\/strong><\/h3>\n\n\n\n

Audit, analysis, consultations, documentation preparation, implementation, or incident handling, depending on the agreed scope.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\"Maintenance<\/figure>\n\n\n\n

04. Maintenance and Support<\/strong><\/h3>\n\n\n\n

Monitoring the implementation of agreements, supporting management and updating solutions along with changes in the organization and legal environment.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n

\n\t\n\n

Experience in Complex Organizations<\/h2>\n\n\n\n

I support organizations where local requirements combine with group policies, technology and management responsibility.<\/p>\n\n\n\n

Selected organizations I have supported or collaborated with. The scope of individual projects varied. <\/strong><\/p>\n\n\n

\n\t\n
\n\t\n
\n\t\n\n
\"INDIGO<\/figure>\n\n\n\n

INDIGO Polska S.A.<\/strong><\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\"\"<\/figure>\n\n\n\n

Digital Virgo Polska Sp. z o.o. <\/strong><\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\"\"<\/figure>\n\n\n\n

Polskie Linie Oceaniczne S.A.<\/strong><\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\"\"<\/figure>\n\n\n\n

EPQS Sp. z o.o. <\/strong><\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\"\"<\/figure>\n\n\n\n

Hotel Dom Marynarza<\/strong><\/p>\n\n<\/div>\n\n\n

\n\t\n\n
\"\"<\/figure>\n\n\n\n

Independent Logistics Sp. z o.o. <\/strong><\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n

\n\t\n\n

Selected Experiences<\/h2>\n\n\n\n

Examples illustrate the approach \u2013 from assessing the situation and risk, through organizing decisions, to implementing concrete actions.<\/p>\n\n\n

\n\t\n
\n\t\n\n

Handling a Breach and Notification to UODO<\/h3>\n\n\n\n

Situation:<\/strong> A serious incident requiring rapid risk assessment and a decision regarding notification to the supervisory authority.
Action:<\/strong> Event analysis, documentation preparation, communication support, notification to UODO, and a plan of remedial actions.
Result:<\/strong> Organized organizational response, documented decisions, and implemented measures to reduce the risk of recurrence.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n

Consistent Data Management in a Capital Group<\/h3>\n\n\n\n

Situation:<\/strong> Dispersed systems, inconsistent registers, and local processes requiring alignment with group standards.
Action:<\/strong> Inventory of resources, assignment of owners, organization of registers, and linking documentation with actual processes.
Result:<\/strong> Clear responsibilities, a consistent picture of processing, and a basis for group audits and reviews.<\/p>\n\n<\/div>\n\n\n

\n\t\n\n

Preparing the Organization for NIS2\/KSC<\/h3>\n\n\n\n

Situation:<\/strong> An organization operating within an international group needed to translate NIS2\/KSC requirements into specific obligations, roles and priorities.
Action:<\/strong> Scope qualification, gap and risk analysis, responsibility mapping, and a practical implementation plan.
Result:<\/strong> Management received an organized overview of obligations, an action schedule and a basis for monitoring implementation.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n

\n\t\n
\n\t\n
\n\t\n\n

Micha\u0142 Rutkowski<\/h2>\n\n\n\n

Since 2004, I have combined technological experience with personal data protection and cybersecurity. I serve as a DPO, conduct audits and implementations, and support organizations in situations requiring risk assessment, organization of responsibilities and documented decision-making. <\/p>\n\n\n\n

I work with medium and large organizations, including those belonging to international capital groups. I combine legal and group requirements with the actual processes, systems, resources and operational capabilities of organizations. <\/p>\n\n<\/div>\n\n\n

\n\t\n\n

I combine perspectives crucial for organizations<\/h3>\n\n\n\n

Management Board and Executives<\/strong>
Responsibility, risk, and priorities.<\/p>\n\n\n\n

IT and Security<\/strong>
Systems, safeguards, and remedial actions.<\/p>\n\n\n\n

Law and Compliance<\/strong>
Compliance, documentation, and auditability of decisions.<\/p>\n\n\n\n

Capital Group Companies<\/strong>
Local requirements, central standards, and inter-departmental cooperation.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n

\n\t\n
\n\t\n
\n\t\n\n

Let’s talk about the situation in your organization<\/h2>\n\n\n\n

Briefly describe your needs. After reviewing the information, I will propose the appropriate first step and \u2013 if the scope is suitable \u2013 a date for a diagnostic conversation. <\/p>\n\n\n\n

M.Rutkowski@LabLogic.pl<\/a>
81-327 Gdynia, ul. Wolno\u015bci 15 <\/p>\n\n\n

\n\t\n\n

What happens after submitting the form<\/h3>\n\n\n\n

Application Analysis<\/strong>
I will review the situation description and assess what first step will be most appropriate.<\/p>\n\n\n\n

Scope Definition<\/strong>
If the topic aligns with my area of support, I will propose a diagnostic conversation or a specific form of cooperation.<\/p>\n\n\n\n

Secure Information Exchange<\/strong>
Confidential materials and incident details are only shared after agreeing on an appropriate communication channel.<\/p>\n\n<\/div>\n\n<\/div>\n\n\n

\n\t\n\n

Briefly describe your organization’s situation<\/h3>\n\n\n\n