{"id":3821,"date":"2026-07-31T23:56:09","date_gmt":"2026-07-31T21:56:09","guid":{"rendered":"https:\/\/www.lablogic.pl\/home\/"},"modified":"2026-09-13T19:14:45","modified_gmt":"2026-09-13T17:14:45","slug":"home","status":"publish","type":"page","link":"https:\/\/www.lablogic.pl\/en\/","title":{"rendered":"Home"},"content":{"rendered":"\n
\n
\n
\n
\n
\n
\n

MICHA\u0141 RUTKOWSKI<\/p>\n\n\n\n

DPO, GDPR, NIS2 and cybersecurity for medium and large organizations<\/h1>\n\n\n\n

I help management boards and the teams responsible for data and security put risk, obligations and actions in order. I combine DPO and GDPR support, NIS2, incident handling and training.<\/p>\n\n\n\n

\n
Schedule a diagnostic conversation<\/a><\/div>\n\n\n\n
Explore services<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
\n
\n
\"Micha\u0142<\/figure>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n
\n
\n
\n
\n

Practice since 2004<\/p>\n\n\n\n

20+<\/p>\n\n\n\n

years at the intersection of technology, data protection and risk management<\/p>\n<\/div>\n\n\n\n

\n

Scope<\/p>\n\n\n\n

GDPR \u00b7 NIS2 \u00b7 AI Act<\/p>\n\n\n\n

three regimes handled as one matter for the organisation, not three separate projects<\/p>\n<\/div>\n\n\n\n

\n

Role<\/p>\n\n\n\n

External DPO<\/p>\n\n\n\n

a function performed day to day, with documented decisions, not advice from a distance<\/p>\n<\/div>\n\n\n\n

\n

Working languages<\/p>\n\n\n\n

Polish and English<\/p>\n\n\n\n

conversations with head office, group auditors and the local team without an interpreter<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n

\n
\n

How can I help?<\/h2>\n\n\n\n

Choose the area that matches your organization\u2019s current situation. If you are not sure where to start, a diagnostic conversation can be the first step.<\/p>\n\n\n\n

\n
\n
\n

DPO and GDPR<\/h3>\n\n\n\n

External DPO, support for your current data protection officer, a GDPR audit and ongoing advice for the board and the teams.<\/p>\n<\/div>\n\n\n\n

\n

Learn about DPO and GDPR services<\/a><\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

NIS2 and local law KSC<\/h3>\n\n\n\n

Qualification under NIS2 and the KSC act, gap and risk analysis, a plan and support for implementation and audit readiness.<\/p>\n<\/div>\n\n\n\n

\n

Learn about NIS2 and KSC implementation<\/a><\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

Incidents and breaches<\/h3>\n\n\n\n

Assessment of the situation and the risk, decisions on notifications, communication and corrective actions.<\/p>\n<\/div>\n\n\n\n

\n

See incident support<\/a><\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

Training and workshops<\/h3>\n\n\n\n

Practical GDPR, NIS2 and AI Act training for boards, senior management, employees and IT and compliance teams.<\/p>\n<\/div>\n\n\n\n

\n

Learn about training and workshops<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n

New service<\/p>\n\n\n\n

AI Act \u2014 the obligations that took effect on 2 August 2026<\/h3>\n\n\n\n
\n
\n

2 February 2025<\/p>\n\n\n\n

Prohibited practices and AI literacy<\/p>\n<\/div>\n\n\n\n

\n

2 August 2025<\/p>\n\n\n\n

General-purpose models, supervision and penalties<\/p>\n<\/div>\n\n\n\n

\n

2 August 2026 \u00b7 in force<\/p>\n\n\n\n

Transparency (Article 50)<\/p>\n<\/div>\n\n\n\n

\n

2 December 2026<\/p>\n\n\n\n

End of the transition period<\/p>\n<\/div>\n\n\n\n

\n

2 December 2027<\/p>\n\n\n\n

High-risk systems (Annex III)<\/p>\n<\/div>\n\n\n\n

\n

2 August 2028<\/p>\n\n\n\n

AI in regulated products (Annex I)<\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

The Digital Omnibus postponed the requirements for high-risk systems and left the transparency deadline unchanged. The Article 50 transparency duties have applied since 2 August 2026 and may cover chatbots, synthetic content and deepfakes. The scope depends on your role and the type of content, and the Article provides exceptions. I start from what is actually in use in the company, not from what the policy says should be there.<\/p>\n\n\n\n

Learn about the AI Act service<\/a><\/p>\n<\/div>\n\n\n\n

\n

Where I start<\/p>\n\n\n\n