Our Expert in Poland
Internal investigations Poland has moved to the top of the corporate risk agenda in 2026, as Poland’s implementation of the EU PIF Directive (Directive (EU) 2017/1371) and the broader framework of corporate criminal liability shape prosecutor powers and corporate exposure. For general counsel, compliance officers and boards, the practical consequences are immediate: how you scope a probe, who conducts interviews, how you label documents and how you respond to a prosecutor’s first contact can determine whether your work product stays protected or ends up in a case file.
This guide translates the statutory position into an operational playbook, covering privilege, evidence preservation and prosecutor engagement, so that a well-run corporate internal investigation in Poland strengthens your defence rather than undermining it.
Search-intent summary: A practical compliance playbook for GCs, compliance officers and boards: how to plan and execute an internal investigation in Poland while preserving privilege, securing evidence and responding to prosecutors in the current penal and PIF-related framework.
Polish prosecutors have significant procedural tools around search, seizure and the handling of corporate records, and Poland has aligned more closely with the EU’s PIF regime for offences affecting the Union’s financial interests. For companies, this raises the stakes on every internal probe Poland may later have to defend: materials gathered without privilege discipline are more exposed to compelled production, and cross-border matters now sit within a harmonised enforcement architecture. Revisiting internal investigation protocols is no longer optional housekeeping; it is a governance obligation.
This article is written for in-house counsel, compliance leads, audit committee members and external advisers who plan, supervise or review internal investigations Poland in a white-collar or regulatory context. It assumes you need actionable steps, not a doctrinal survey.
When a credible allegation surfaces, the first hours shape the entire matter. The following seven steps should be triggered as a reflex, before any wider circulation of the facts.
Governance is the foundation of a defensible compliance investigation Poland can rely on. The central decisions, who leads, how functions are separated and when outside counsel is retained, determine the strength of any later privilege claim and the credibility of the findings. Get this architecture right and the rest of the probe becomes easier to protect.
The single most important structural choice is separating the privileged legal team from the operational fact-finding team. The privileged team, led by an advocate or legal adviser, exists to gather information for the purpose of giving legal advice and assessing legal risk. The fact-finding team, typically HR, internal audit or line management, exists to run the business and address personnel or operational issues. Blurring these functions is the most common way privilege is lost: when legal analysis is folded into routine operational reports, the protected character of the work is diluted and the material becomes harder to shield.
Establish clear reporting lines so that legal conclusions flow to counsel and the board through a privileged channel, while operational steps run on a separate track. This separation also clarifies for employees which conversations carry legal protection and which do not, a distinction that matters greatly if a prosecutor later seeks access.
Every white-collar internal investigation should begin with written terms of reference approved by the appropriate authority, usually the board or audit committee, acting on legal advice. The terms should state the mandate, the lead counsel, the custodians in scope, the preservation steps and the reporting cadence. Keep a disciplined record of decisions, but distinguish privileged legal memoranda from administrative logs. Over-documenting operational detail outside the privileged channel creates discoverable material; under-documenting undermines the integrity of the process. The aim is a clean, auditable spine that demonstrates good governance without generating unnecessary unprotected records.
External counsel should be retained where the matter involves senior management, potential criminal exposure, a credible prosecutor interest or cross-border elements. Outside counsel brings independence that strengthens both the privilege position and the board’s ability to show an objective process. Engage counsel through a formal retainer that frames the work as the provision of legal advice, and direct the investigation through that engagement so that interview notes, analyses and the final report are generated within the professional secrecy relationship. Where internal counsel leads, ensure their role is genuinely advisory and documented as such, because mixed operational and legal duties can weaken the protection of the professional secrecy attaching to the work.
Understanding how legal professional secrecy works in Poland is essential before any probe begins, because the protection is grounded in professional secrecy duties rather than a single unified “privilege” statute. For internal investigations Poland requires you to work with the architecture that actually exists: the professional secrecy obligations of advocates and legal advisers, the way those duties interact with the Criminal Procedure Code, and the recognised limits. Misreading this framework is the root cause of most waiver problems.
The protection of lawyer–client communications in Poland rests on professional secrecy obligations. For advocates, these duties derive from the Law on the Bar (Prawo o adwokaturze) and the ethical rules administered by the Polish Bar (Naczelna Rada Adwokacka). For legal advisers, equivalent duties flow from the Law on Legal Advisers (Ustawa o radcach prawnych) and the guidance of the National Council of Legal Advisers (Krajowa Rada Radców Prawnych). These rules impose a binding obligation of confidentiality on the lawyer, and they interact with the Criminal Procedure Code, which governs when and how such secrecy may be engaged in criminal proceedings.
The practical effect is that protection attaches to the lawyer’s professional secrecy, so structuring the work through a qualified advocate or legal adviser is what activates it. It is worth noting that Polish law distinguishes between ordinary professional secrecy and the more strongly protected defence secrecy (tajemnica obrończa), which the courts treat as particularly robust.
Communications made for the purpose of obtaining or giving legal advice between the client and a qualified lawyer fall within professional secrecy. In an internal probe Poland context, that typically includes counsel’s legal memoranda, risk assessments, advice to the board, counsel-led interview notes prepared to inform legal advice, and the final investigation report where it is genuinely a legal work product. The protection is strongest where the document is created by or for the lawyer, clearly in the advisory relationship, and kept within a tightly controlled distribution. The more a document reads as pure legal analysis prepared to advise the company, the more robust the position.
Conversely, a report that is widely circulated, co-authored by operational teams, or framed as a business update rather than legal advice is far more vulnerable. This is why marking, authorship and distribution controls, covered in the next section, are not cosmetic; they are substantive to whether the material is protected at all.
Professional secrecy is not absolute, and in criminal proceedings it may, under the conditions set out in the Criminal Procedure Code, be lifted by a court in defined circumstances (the special protection of defence secrecy aside). Communications that are not genuinely legal advice, ordinary business records, operational emails, HR disciplinary files, financial data and underlying facts, do not become protected simply because they are handed to a lawyer. The underlying facts of a matter remain discoverable even where the legal analysis of them is protected. Operational records created in the ordinary course of business stay operational records regardless of later involvement by counsel.
The key practical lesson is that you cannot retrospectively “privilege” pre-existing documents by sending them to a lawyer; the protection attaches to the advisory communication, not to the raw material underneath it.
PAA, Are internal investigation reports protected by professional secrecy in Poland? Generally, yes, where the report is prepared by or for a qualified advocate or legal adviser for the purpose of giving legal advice, and its distribution is controlled. A report that is widely circulated, blended with operational commentary, or framed as a routine business update rather than legal advice is far more exposed. The underlying facts it describes remain discoverable regardless of how the report itself is characterised, and in criminal proceedings a court may, under the Code, order disclosure in defined circumstances.
Preserving professional secrecy is an operational discipline, not a label applied after the fact. The sections below set out the concrete steps, evidence holds, interview strategy and document management, that make the difference between a protected probe and one that collapses under a prosecutor’s production request. Preserving evidence Poland-wide and protecting the work product are two halves of the same workflow.
Red flag, eight habits that undermine the protection:
The moment a credible allegation arises, legal and IT must act together to preserve evidence. Issue a written legal hold that identifies custodians and data sources, suspends auto-deletion and retention purges, and instructs custodians not to alter or delete anything. Capture volatile data, messaging apps, cloud repositories, laptops and mobile devices, before anyone has an opportunity to overwrite it. Establish a defensible chain of custody from the first collection: record who collected what, when, from which source and how it was stored. Use forensically sound imaging where devices may contain probative material, so that integrity cannot later be challenged. A sensible timeline is: hold issued within hours; critical custodian data imaged within days; a documented preservation log maintained throughout.
These steps serve two goals at once, they secure the evidentiary record and they demonstrate the good-faith, well-governed process that supports both protection claims and any later cooperation narrative.
Interviews are where the protection is most often won or lost. For any interview intended to inform legal advice, counsel should lead, and the purpose should be made explicit at the outset. A counsel-led interview typically opens with a clear statement, often called an Upjohn-style warning in international practice, explaining that the lawyer acts for the company, not the individual, that the discussion is conducted to provide legal advice to the company, and that the company controls any resulting protection. Notes should be prepared by counsel, framed as legal work product, and kept within the protected channel. Do collect facts fully and accurately; do keep notes within strict access controls; do distinguish the lawyer’s mental impressions from verbatim statements.
Do not allow the interview to drift into HR disciplinary territory in the same session; do not let non-legal staff take parallel unprotected notes; and do not distribute interview memoranda beyond those who need them to advise or decide. Where an interview is genuinely operational, an HR grievance, for example, run it on the separate fact-finding track and do not pretend it is protected.
Protected material should be clearly marked as legal advice subject to professional secrecy, stored in a segregated repository and governed by strict access controls limited to counsel and the decision-makers who need it. Maintain a log that records each protected document, its author, date and the basis for the claim. Keep forensic copies of collected data separate from working copies, and document every access and transfer. The discipline of marking, segregating and logging is precisely what allows counsel to assert and defend the protection efficiently if a prosecutor seeks production, and it signals, convincingly, that the company treated these materials as protected from the outset rather than inventing the claim under pressure.
| Element | Counsel-led protected interview | HR / operational fact-finding interview |
|---|---|---|
| Purpose | Legal advice gathering; protect professional secrecy | Fact collection for discipline/operations |
| Who leads | Outside or internal counsel | HR or line manager |
| Pre-interview notices | Protection warning; clarity that counsel acts for the company | Standard HR interview notice |
| Record type | Protected notes and counsel memo | Personnel file; may be discoverable |
| Access controls | Strict; counsel only | Broader; HR and management |
| Risk of waiver | Lower if counsel runs the interview and limits distribution | Higher; possible disclosure to prosecutors |
Dealing with prosecutors Poland requires a calm, rehearsed response rather than improvisation. The Criminal Procedure Code (Kodeks postępowania karnego) governs search, seizure and the prosecutor’s powers to gather evidence. Knowing your rights and your obligations before contact occurs is what preserves both the protection and your leverage.
When a prosecutor makes contact, whether by written request for documents or by appearing for a search, the first move is to involve counsel immediately and record exactly what is being asked. Verify the legal basis and scope of the request: what authority is relied on, which materials are targeted and whether the request engages professional secrecy. Do not volunteer materials outside the stated scope, and do not obstruct lawful action. Where counsel’s protected materials are implicated, assert professional secrecy clearly and on the record, and ask that disputed items be sealed or set aside pending resolution rather than handed over outright.
Designate a single point of contact so that the company speaks with one coordinated voice, and brief reception staff and management in advance on how to respond if officers arrive unannounced. The goal is lawful cooperation on the lawful scope while protecting what the law permits you to protect.
Under the Criminal Procedure Code, prosecutors and law enforcement have powers to search premises and seize materials relevant to an investigation. During a search, counsel should attend as quickly as possible, document everything taken, and identify on the spot any items that are subject to professional secrecy. Where materials carrying professional secrecy are among the items sought, the Code provides a mechanism by which such items can be delivered in a sealed package and handed to the court to decide on the extent to which they may be used, so the appropriate course is to object, identify the protected items, and request that procedure.
Keep a contemporaneous record of the officers present, the authority relied on, the items seized and any objections raised, this record is often decisive in later challenges. The practical defence of the protection during a seizure depends on having marked and segregated protected materials beforehand; disorganised files make it far harder to assert a credible claim in the moment.
Voluntary disclosure can demonstrate good faith and may influence how the authorities assess the company’s culpability, but it carries a real risk that prosecutors and courts treat the protection as waived more broadly than intended. Disclosing a protected report, or even a summary drawn from it, can be argued to undermine protection over related material. The decision should be made deliberately, case by case, weighing the mitigation benefit against the loss of protection, and always structured by counsel so that any disclosure is as controlled and narrow as possible.
PAA, When must a company disclose internal findings to prosecutors? There is no general legal obligation to volunteer the findings of an internal probe to prosecutors. However, specific regulatory or statutory reporting duties may apply depending on the sector and the conduct involved, and these must be assessed in each case. Voluntary cooperation may mitigate exposure, but because it risks undermining the protection, it should never be undertaken without legal advice on the precise consequences.
PAA, Can prosecutors seize materials from an internal investigation and how can companies resist? Yes, prosecutors have seizure powers under the Criminal Procedure Code. Companies resist improper reach by asserting professional secrecy over protected materials, maintaining a clear log, keeping protected files segregated, requesting that disputed items be sealed and delivered to the court for a decision on their use, and, where necessary, pursuing the remedies available under the Code. Technical preservation and a documented chain of custody support these objections.
When a seizure or preservation measure lands, the company needs a prepared, technical response, not a scramble. The measures below help confine the authorities to their lawful scope and protect what the law allows you to protect, while keeping the evidentiary record intact.
A protection log is the practical instrument through which professional secrecy is asserted item by item. It should record, for each document, the author, recipient, date, a neutral description and the basis for the claim. Where materials are produced or inadvertently handed over, a clawback approach, agreed in advance where possible, allows the company to assert that inadvertent disclosure does not waive protection and to request the return or sealing of the item. Maintaining the log as part of the investigation from day one, rather than reconstructing it under pressure, is what makes the claim credible. [Template callout: sample protection log, draft example, verify with local counsel before use.]
Technical integrity underpins every legal argument. Preserve forensic images of any seized or copied data, document the chain of custody meticulously, and ensure that working copies are never confused with originals. If a device or dataset is removed, record hash values and timestamps so that integrity can be demonstrated later. These measures protect the company against both evidentiary challenge and allegations of tampering, and they reinforce the good-governance narrative that supports protection assertions.
Where an authority’s action exceeds its lawful scope or threatens genuinely protected material, the company may pursue the remedies available under the Criminal Procedure Code, including an interlocutory complaint (zażalenie) against a search or seizure decision to the competent court. Prompt action should be considered where protected materials risk being examined before a dispute over professional secrecy can be resolved. Counsel should be ready to move quickly, because the practical value of a secrecy objection diminishes once protected content has been read. Early preparation, knowing which forum, which remedy and which arguments apply, is what makes rapid intervention feasible.
Many internal investigations Poland companies run today have a cross-border dimension, multinational groups, foreign custodians or conduct touching more than one EU member state. The EU PIF Directive and the data protection regime add layers of obligation that must be managed alongside the domestic criminal process.
Where an investigation involves personal data, the data protection framework (the GDPR, supplemented by Polish implementing legislation) overseen in Poland by the President of the Personal Data Protection Office (UODO) governs how that data may be collected, preserved and transferred. Cross-border transfers of evidence containing personal data must satisfy the applicable transfer rules, and preservation steps must be reconciled with data-minimisation and purpose-limitation principles. The practical approach is to collect only what is necessary, document the lawful basis for each processing and transfer step, and coordinate IT, legal and data protection functions so that preservation does not create a separate compliance breach.
The PIF Directive (Directive (EU) 2017/1371) defines offences affecting the EU’s financial interests and sets expectations for how member states prosecute and cooperate on them. Poland’s implementation of this regime means that conduct touching EU funds or the Union’s financial interests sits within a harmonised enforcement framework, with implications for corporate reporting and for mutual legal assistance across borders. It is worth noting that Poland does not participate in the European Public Prosecutor’s Office (EPPO), so cooperation on such matters proceeds through established mutual legal assistance and judicial cooperation channels. For transnational matters, companies should expect coordination between authorities and should align their investigation and disclosure posture across each affected jurisdiction, working with local counsel in each one.
Treating a multi-state matter as a single coordinated exercise, rather than parallel national silos, is now the prudent default.
The following anonymised, hypothetical illustrations show how the protection is won or lost in practice. In one scenario, a company routed a sensitive financial irregularity probe entirely through external counsel, ran counsel-led interviews and kept the report within a tight distribution, when a prosecutor later sought the report, the professional secrecy claim was far easier to sustain. In a contrasting scenario, a company let internal audit draft a widely circulated findings memo that blended legal conclusions with operational recommendations; the material was far more exposed because it read as a business document, not legal advice.
Decision tree one, should you run a counsel-led protected interview? If the interview is intended to inform legal advice or assess legal risk, and the subject matter carries potential criminal exposure, run it counsel-led. If it is a routine HR or operational matter with no legal-advice purpose, run it on the fact-finding track.
Decision tree two, should you disclose to prosecutors? If a specific legal or regulatory reporting duty applies, comply with that duty as advised. If disclosure is discretionary, weigh the mitigation benefit against the waiver risk, structure any disclosure as narrowly as counsel permits, and make the decision only with legal advice.
To operationalise this guidance, the pillar is supported by a set of practical assets. Each is a starting point that must be adapted to the facts and reviewed by qualified counsel before use. Every template carries the disclaimer: Draft example, verify with local counsel before use.
For the full workflow, see the internal investigation checklist and the employee interview script for Poland, and review the seizure-response steps for responding to prosecutor data requests. You can also reach qualified advisers through the Poland criminal lawyer directory and learn more via the criminal practice resources for Poland.
The current enforcement environment makes disciplined internal investigations Poland companies can defend a core governance requirement rather than a discretionary good practice. The immediate priorities are consistent: involve qualified counsel from the first hour, separate the protected legal team from operational fact-finding, issue a legal hold and preserve evidence with a documented chain of custody, run interviews that protect professional secrecy, and prepare a rehearsed, lawful response to prosecutor contact and seizure. Boards should ensure these protocols exist before an allegation arises, not after. For tailored advice on structuring a protected probe or responding to a prosecutor, consult a qualified Poland criminal practitioner.
This article was produced by Global Law Experts. For specialist advice on this topic, contact Maciej Zaborowski at Kopeć & Zaborowski Law Firm, a member of the Global Law Experts network.
posted 14 minutes ago
posted 33 minutes ago
posted 51 minutes ago
posted 1 hour ago
posted 1 hour ago
posted 1 hour ago
posted 2 hours ago
posted 2 hours ago
posted 2 hours ago
posted 3 hours ago
posted 3 hours ago
posted 3 hours ago
Find the right Legal Expert for your business
Send welcome message