Anna Bąk

Attorney-at-law with over 10 years of international experience advising clients in the financial services and technology sectors, with a particular focus on FinTech, SaaS and insurance. She specialises in complex technology and commercial agreements, cross-border transactions, data protection and regulatory matters, including compliance with DORA and GDPR.

Experience

She combines legal, regulatory and business perspectives in her work, supporting management, sales, product, technology and cybersecurity teams in translating complex legal and regulatory requirements into practical solutions that enable business growth and scalability.

She has gained experience both in law firms and in-house roles, advising international and highly regulated businesses operating across the EMEA and APAC markets. As Legal & Compliance Counsel and Group Data Protection Officer at an international FinTech group, she was responsible for legal and compliance matters, advising the management board and senior leadership on regulatory risk, strategic transactions, cross-border projects and complex commercial agreements.

Her experience includes negotiating and closing more than 200 international commercial agreements, including multi-million-euro contracts with global financial institutions. She specialises in SaaS and software licensing agreements, outsourcing and technology services, white-label and embedded finance solutions, escrow arrangements, strategic partnerships, and DORA-compliant ICT risk management agreements.

On regulatory matters, she advises on the implementation of DORA requirements and the development and implementation of international compliance frameworks under the GDPR and UK GDPR. As Group Data Protection Officer, she was responsible for data protection governance across multiple jurisdictions, including conducting Data Protection Impact Assessments (DPIAs), ensuring compliance in relation to cross-border data transfers, supporting ISO 27001 audits, liaising with supervisory authorities, and assessing privacy risks. She also develops Records of Processing Activities (RoPA) and compliance training programmes.

She is a member of the Association of Data Protection Practitioners.

Education

• British Law Centre – Diploma in Commercial Law (2025–2026)
• British Law Centre – Diploma in English Law and Legal Skills (2024–2025)
• AD EXEMPLUM – Procedural Law School of advocate Agata Rewerska (2018–2019)
• The Warsaw Bar Association – Attorney-at-Law – Full Bar Membership, Completed 3-year professional legal training and passed national bar examination (2015–2018)
• Insurance Broker Examination (state exam) (2020)
• University of Warsaw – Master of Laws (2009–2014)