Principal
Adrianna Koszowska-Kowalska — privacy, OSINT and independent audits.
IT & Product Leader · Data Protection & GDPR/RGPD · AI Automations. Ten years from product to systems, compliance and strategy.
I build digital products end to end — from the first research question to a shipped, measurable release — and I have spent most of that time in e-commerce, where the experience the customer has and the data you hold are the same subject.
That is why this practice is neither a law firm nor a design studio. It is the layer in between: what the customer sees, what the business is obliged to do, and where the two come into conflict. Consent that people actually understand. Cookies that match what the site really loads. A checkout that does not lose the customer at the moment it asks for something personal.
What I do
Certified data-protection work for companies that need privacy to be operational rather than decorative: records of processing, DPIAs, consent and cookies, processor agreements, and documentation that holds up in front of a regulator.
Open-source intelligence before you commit — verifying a counterparty, checking ownership and history, mapping the public footprint of a person or a business. Public sources only, documented and defensible.
When a project goes wrong I reconstruct what was agreed, what was delivered and where the gap actually sits — a factual, independent basis for pre-litigation mediation, settlement talks or an expert opinion.
Disputes about digital projects are usually argued on facts that nobody wrote down. The specification was in an email, the change was agreed on a call, the delivered system does something subtly different from what was sold — and by the time it matters, the evidence is scattered.
I work alongside legal counsel on exactly that gap. The lawyers own the legal argument; I own the technical and experiential record: what the contract and the specification actually required, what the system actually does, and what the user actually experiences. That division is deliberate — it keeps the report defensible, because every statement in it is something I can demonstrate.
Typical instructions:
Where a matter needs a formal expert opinion or representation, I work under the instruction of the client's lawyer rather than in place of them. Reports are written to be read by a court or a mediator, not by a marketing department.
Certifications
Contact
Consultations on data protection, OSINT due diligence, independent audits for pre-litigation mediation, and the compliance side of e-commerce.