Compliance and data protection

Compliance

Across many areas of business, legal standards are becoming stricter and authorities increasingly require demonstrable compliance. Breaches may result in significant penalties, in some cases reaching exceptional levels. Our law firm provides comprehensive support in compliance, particularly in the following areas:

Competition Law

In recent years, the European Commission and national regulators, including the Office for the Protection of Competition, have imposed fines in the billions of euros for violations of competition law. We help companies establish processes that minimise risks and ensure full compliance with competition rules.

Our services include:

• training and guidance on communication with competitors,
• preparation and review of commercial documents,
• assistance with inspections by regulators,
• ensuring proper notification procedures for transactions subject to approval by Czech or European authorities, as well as analysing whether such notification is required.

Regulation of modern technologies

The rapid development of the digital economy brings increasingly complex regulatory requirements. In recent years, the European Union has adopted a number of key regulations that are reshaping the rules for the use of data, artificial intelligence, digital services and cyber security. We help you:

• identify obligations arising from current and upcoming regulations,
• set up internal processes and documentation,
• integrate regulatory requirements into everyday business practice.

Personal data protection (GDPR)

Although the General Data Protection Regulation (GDPR) has been in force since 2018, even in 2026, personal data protection remains a challenging and, for many organisations, still evolving area. Supervisory authorities across the EU continue to impose heavy fines, often in the tens of millions of euros. Experience shows that establishing the right processes and documentation remains a challenge for many companies. In addition, the interpretation of individual obligations is constantly evolving, whether through decision-making practice, methodological opinions or court rulings.

In the area of personal data protection, we offer:

• establishing or reviewing personal data processing procedures,
• preparation of complete internal documentation,
• assessment of legitimate interest and data protection impact assessment (DPIA),
• solutions for the transfer of personal data to third countries,
• modification of contractual documentation,
• review and update of information notices on the website (consents, instructions, processing principles),
• revision of general terms and conditions,
• preparation of internal regulations and employee training,
• assistance during inspections by the Office for Personal Data Protection, including preparation of responses and representation.