Searches, Seizures and Business Raids in Poland (2026): What Executives and Boards Must Do When Prosecutors Arrive

This guide is practical information, not a substitute for legal advice. When prosecutors arrive, retain qualified Polish criminal counsel immediately.

Executive summary and what has changed in 2026

Search and seizure Poland has become one of the most acute operational risks facing corporate boards in 2026, as white-collar enforcement receives sustained attention and prosecutors can arrive at company premises without prior notice. This article gives executives a prescriptive playbook: what to do in the first minutes, how to protect privilege and data, and when to cooperate versus contest. It takes a clear position rather than hedging, because in a live raid you need decisions, not caveats. The material is grounded in the Polish Code of Criminal Procedure (Kodeks postępowania karnego), regulator guidance and established case law, and it foregrounds the 2026 procedural context that raises the stakes for every board.

The corporate raid 2026 Poland landscape reflects continued enforcement activity against companies, directors and senior managers, particularly in fraud, tax, financial-market and anti-corruption matters. Two practical consequences follow. First, on-site searches at corporate offices, data centres and even directors’ homes remain a real possibility. Second, the tactical choices confronting executives, whether to grant live access to IT systems, how to shield privileged files, how to satisfy data-protection obligations, have become sharper and more consequential.

Boards should treat a search as a foreseeable, plannable event rather than a shock. The risk matrix is straightforward:

• Legal exposure. Seized material can seed further charges against the company and named individuals.
• Privilege loss. Inadvertent disclosure of lawyer communications can undermine protection and hand investigators a roadmap.
• Data exposure. Forensic imaging of servers can sweep in personal data, trade secrets and third-party information, triggering GDPR obligations.
• Continuity. Seizure of servers or devices can halt operations for days.
• Reputation. Uncontrolled communications can damage investor and customer trust before facts are known.

Quick decision checklist (TL;DR): how to respond to a police search Poland

Print this and keep it at reception and in the legal department. When officers arrive, the first person on the scene should work through it in order.

• Stay calm and do not obstruct. Physically obstructing officers carrying out a lawful search can itself expose you to liability and destroys your credibility for later challenges.
• Confirm identity and legal basis. Ask each officer for identification and request the written search order or the documented urgent-search justification.
• Appoint one on-site coordinator. Designate a single company representative, ideally in-house counsel, to interact with the lead officer. Everyone else stays quiet.
• Call external criminal counsel immediately. Phone your retained adwokat or radca prawny; ask them to attend and to speak with the lead officer by phone in the interim.
• Start a contemporaneous log. Record times, names, identifying numbers, rooms entered, systems accessed and every item examined or taken.
• Protect privilege. Identify and flag lawyer communication files; request they be handled under the safeguards provided by the Code rather than read on the spot.
• Isolate sensitive data. Notify your data protection officer; note where personal data and trade secrets sit; request forensic imaging under supervision rather than live browsing.
• Say little. Do not volunteer explanations, do not sign statements you have not read, and do not consent to anything beyond the order’s scope.
• Preserve everything for challenge. Keep copies of the order, the seizure inventory (protocol) and your log for post-raid motions.

Phone-ready script for the coordinator: “May I please see your identification and the search order? We will assign a single representative and have external counsel join. We request the scope in writing and ask that access to IT systems wait until our forensic counsel is present.”

Legal framework: who can carry out a search and seizure Poland (warrants, scope, limits)

Searches and seizures at Polish premises are governed principally by the Code of Criminal Procedure (Kodeks postępowania karnego), published on the state legislation portal ISAP. The Code sets who may order a search, on what grounds premises may be entered, and how seized items must be handled. Executives do not need to master the statute, but the coordinator must understand the basic architecture in order to police the boundaries in real time.

Prosecutor versus police powers during a premises search Poland

In Poland the prosecutor (prokurator) directs the pre-trial investigation and, in most cases, is the authority that orders searches and seizures. The Police (Policja) frequently carry out the physical search on the prosecutor’s instruction, and in urgent situations may act first and seek subsequent confirmation. Understanding this division matters: officers on site are usually executing a decision made elsewhere, so demanding the underlying order and its scope is both legitimate and essential. The National Public Prosecutor’s Office (Prokuratura Krajowa) and the Police publish institutional information on their respective roles and procedures.

A police search company Poland scenario therefore typically involves officers acting under a prosecutorial order. Your representative should ask which authority ordered the action, who the supervising prosecutor is, and whether the officers can produce or later serve the written decision.

Warrant requirements and judicial oversight

As a rule, a search should be based on a written order (of the court or the prosecutor) identifying its purpose. The Code provides a route for after-the-fact judicial review: where a search is carried out in urgent circumstances without a prior court or prosecutorial order, the affected party is entitled to demand approval of the action by the court, and should be informed of that right, with the decision to be served on request within a statutory period. This is a critical lever. If officers assert an urgent basis without a prior written order, note it carefully, it is precisely the scenario most vulnerable to later challenge.

Constitutional protection of the home and private premises, and the proportionality of interferences with privacy, have been examined by the Constitutional Tribunal and the Supreme Court, and echo the European Court of Human Rights jurisprudence under Article 8 of the European Convention.

Types of premises searches: offices, homes and remote servers

Searches may target company offices, private residences of directors and employees, and increasingly digital infrastructure, local devices, on-premises servers and, in some circumstances, data accessible from those systems. The seizure of evidence Poland framework covers physical documents and data carriers alike. Digital searches raise distinct issues of chain of custody, over-collection and cross-border data location that the coordinator must actively manage, because a hard drive image can contain vastly more than the order’s stated scope.

Tactical options: cooperate versus contest, the decision that defines the raid

This is the centrepiece decision. There is no neutral middle ground you can drift into by inaction. You are choosing, in the first fifteen minutes, between broadly facilitating the search while documenting it, or actively asserting rights and limiting scope. Below is the side-by-side comparison, followed by a prescriptive framework telling you which to pick.

Decision framework: choose A or choose B

Our recommendation is explicit. Do not deliberate abstractly on the day; apply these rules.

• Choose A (cooperate) when the search is clearly lawful and within a valid order, the suspected wrongdoing is operational or minor, there is little privileged material involved, and business continuity is critical. Even then, cooperation must be disciplined: document rigorously, segregate any privileged files, and push for forensic imaging rather than live system browsing.
• Choose B (assert rights and limit) when senior executives or directors are targets, the investigation touches sensitive privileged communications or high-value IP and data, cross-border data or statutory secrecy is implicated, or you have reasonable grounds to suspect the search exceeds its lawful scope.
• Default to the hybrid. In most corporate raids the correct posture is cooperative in tone but firm on boundaries: do not obstruct, but immediately segregate privileged and sensitive material, request supervised forensic imaging, and get external counsel engaged within minutes. This captures the goodwill benefit of Option A while preserving the protective advantages of Option B.

Model wording for Option A: “We will facilitate your search. We are keeping a log and will assign one representative. Please conduct any IT access as a supervised forensic image so we can preserve chain of custody.”

Model wording for Option B: “Before we proceed, please identify the scope of your order. We do not consent to access to rooms or systems outside that scope, we are exercising our right to have counsel present, and we reserve the right to seek judicial confirmation of this action.”

Minute-by-minute on-site playbook (first 0–120 minutes)

The outcome of a search and seizure Poland event is usually decided in the first two hours. Discipline in this window protects privilege, limits over-collection and preserves your grounds for later challenge. Work in three phases.

0–15 minutes: leadership and safety

• Appoint the coordinator. One person, in-house counsel where possible, becomes the single point of contact. Announce this to staff and to the lead officer.
• Trigger the call tree. The coordinator phones external criminal counsel, the general counsel, the CEO or board contact, and the DPO. Keep the message factual: “Officers are on site executing a search; attendance requested.”
• Instruct staff. Tell employees to remain calm, not to obstruct, not to delete or move anything, and not to answer substantive questions. Destroying or concealing evidence is itself a criminal offence.
• Secure safety and access. Ensure no one leaves or enters in a way that could be read as concealment; keep exits clear.

15–45 minutes: confirm the warrant and scope

• Obtain the order. Ask to see and copy the written search decision. Note the issuing authority, the supervising prosecutor, the stated purpose and the premises covered.
• Map the scope. Identify precisely which offences, persons, documents and systems the order names. This becomes your boundary line for the rest of the search.
• Flag the urgent-search scenario. If officers claim urgency without a prior order, record that assertion verbatim; it is your strongest ground for later judicial confirmation and challenge.
• Identify privileged zones. Point out where lawyer communications and legal advice are stored, and ask that they be handled under the Code’s safeguards pending review.

45–120 minutes: preserve data and evidence

• Control IT access. Do not hand over live administrator credentials casually. Request that any collection proceed as a supervised forensic image, with a hash record and an inventory of what is copied.
• Segregate sensitive data. Direct officers’ attention to where clearly out-of-scope personal data, third-party confidential material and trade secrets sit, and document any objections you raise.
• Physically manage rooms. Request that rooms holding privileged or out-of-scope material be handled with care so counsel can attend before they are searched, where the officers permit.
• Maintain the interaction log. Every room entered, every device touched, every file taken, with timestamps and the officer responsible.
• Review the inventory before signing. Insist that seized items are catalogued item by item. Read the seizure protocol carefully; add written reservations before signing; do not sign a blank or incomplete inventory.

Warrant and evidence-log checklist

Your coordinator should capture, for the order: issuing authority; supervising prosecutor; case reference; stated purpose; named offences; premises covered; date. For each seized item, log: description; location found; officer collecting; whether original or forensic copy; hash value where digital; and any reservation you noted.

When to escalate to court

Escalate immediately where officers exceed the order’s scope, refuse to identify a legal basis, seize plainly privileged material over objection, or assert an urgent basis without a prior order. In those cases counsel can pursue judicial approval/review of the search and preserve grounds to challenge how material was obtained. Escalation is a legal step for your counsel, it is not a licence to physically resist officers on site.

Data, privilege and cross-border issues in a search and seizure Poland scenario

Digital material is now the heart of most corporate raids, which puts privilege and data-protection law at the centre of your tactical response.

Legal professional privilege in Poland: adwokat and radca prawny

Communications with an adwokat (advocate) and a radca prawny (legal counsel) attract professional secrecy protection, but that protection is not absolute and is subject to statutory limits and procedural safeguards administered through the courts. Defence-related professional secrecy enjoys particularly strong protection. The practical lesson is that privilege is protected best when it is asserted actively and early: identify privileged files, object to their being read on the spot, and request that any dispute over privileged status be resolved under judicial supervision rather than by officers reading the material. In-house lawyers should assume that the strongest privilege posture involves external counsel asserting protection formally.

Protecting privileged materials and communications

• Pre-label privileged repositories before any raid, so they can be pointed out instantly.
• Request supervised handling of anything arguably privileged rather than allowing on-the-spot inspection.
• Avoid creating new exposure, do not forward privileged files to unprotected inboxes during the chaos of a search.

GDPR and UODO considerations when data is requested

Law-enforcement access to personal data is permitted under criminal procedure, but the company remains a data controller with obligations of proportionality, security and record-keeping. Notify your DPO at the outset, document every category of personal data accessed or copied, and keep a record of transfers to authorities. The Office for Personal Data Protection (UODO) publishes guidance relevant to data-protection duties, and counsel should be consulted where the collection sweeps in special-category data or cross-border information.

Practical data isolation and forensic preservation

• Prefer forensic images over live access to preserve chain of custody and limit over-collection.
• Record hash values for every image taken so the integrity of copies can later be verified.
• Isolate, do not delete. Never delete or alter data during a search; instead, segregate and label out-of-scope material and object in writing.

When to invoke cross-border and mutual legal assistance channels

Where data is hosted abroad or the investigation implicates foreign group entities, cross-border legal-assistance mechanisms and the location of data become material. Flag any cross-border dimension to counsel immediately, because the lawful reach of a domestic order over foreign-hosted data is contestable and is a frequent ground for challenge.

After the raid: inventory, remedies and communications strategy

The search does not end your exposure; it opens a new phase in which prompt, disciplined action protects the company.

Immediate post-raid steps

• Reconcile the inventory. Cross-check the seizure protocol against your own log and identify discrepancies or out-of-scope items.
• Send challenge and reservation letters promptly where items were taken outside the order’s scope or where privileged material was seized.
• Preserve all documentation, the order, protocols, hash records and your contemporaneous log, as the foundation for any motion.

Judicial remedies

Available remedies include motions to return seized items, applications for judicial approval where a search was conducted urgently, and complaints (zażalenie) against actions taken in the course of the search. Counsel can also challenge how material was obtained and, in appropriate cases, pursue further claims. Timing is decisive: procedural deadlines are short, so instruct counsel to act promptly.

Board reporting and internal investigation

Brief the board with facts, not speculation, and record what was reported and when. Consider a privileged internal investigation, run under external counsel, to understand exposure before regulators do. Preserve documents and suspend routine deletion schedules across affected systems.

Media and investor communications

Keep external communications minimal, accurate and centrally controlled. Say nothing that pre-empts the facts or that could be read as an admission. A short holding statement approved by counsel is almost always preferable to detailed comment.

Conclusion: practical next steps on search and seizure Poland readiness

Search and seizure Poland is no longer a rare event for well-run companies, in the 2026 enforcement climate it is a foreseeable operational risk that boards must plan for in advance. The decisive variables are speed and discipline: appoint a coordinator, call external counsel, protect privilege, control data access and document everything. Our position is clear. Default to the disciplined hybrid posture, cooperative in tone, firm on boundaries, and escalate to full contest only when directors are targets, privilege is at stake, or the search exceeds its lawful scope. Prepare now: adopt a written raid protocol, pre-retain criminal counsel and a forensic vendor, pre-label privileged repositories, and rehearse the first two hours.

To find experienced counsel, consult the Poland lawyer directory and review criminal law practice in Poland.

Sources

1. Internetowy System Aktów Prawnych (ISAP), Polish consolidated legislation portal
2. Ministry of Justice (Poland)
3. Prokuratura Krajowa (National Public Prosecutor’s Office)
4. Policja (Polish Police)
5. UODO, Office for Personal Data Protection (Poland)
6. Supreme Court of Poland (Sąd Najwyższy)
7. European Court of Human Rights (ECHR)
8. Constitutional Tribunal of Poland