5 key takeaways
- Beneficial ownership must be reported to the Central Register of Beneficial Owners (CRBR) within 14 days of KRS registration – one of the first deadlines a new company faces.
- A company bank account linked to the company’s tax number (NIP) is not optional in practice: it is required for transactions over PLN 15,000 between businesses, for appearing on the VAT “white list”, and for using the split payment mechanism.
- Hiring the first employee triggers a wide set of obligations at once – a written contract before the first day, ZUS registration within 7 days, medical clearance, health and safety training, and (for most employers) enrolment in Employee Capital Plans (PPK).
- Acquiring IP from developers or contractors only works if the assignment or exclusive licence is in writing – Polish copyright law treats an oral agreement or a bare invoice as insufficient to transfer economic rights.
- GDPR compliance is not a one-off project: it requires a live record of processing activities, data processing agreements with vendors, a documented risk assessment, and technical and organisational security measures from day one.
Most companies entering the Polish market focus heavily on the registration process itself – and then are caught off guard by how many separate obligations land on the business in the first few weeks after incorporation. This post sets out the practical compliance obligations that typically apply to a newly registered limited liability company (spolka z ograniczona odpowiedzialnoscia) in Poland, organised by area, with the deadlines that matter most.
Company Registration and Organisational Obligations
Once the company is entered into the National Court Register (KRS), several formal matters need to be resolved quickly to allow the business to operate safely.
Beneficial ownership reporting (CRBR). Under the Polish Act on Counteracting Money Laundering and Terrorist Financing, the company must report its beneficial owner(s), and any subsequent change, to the Central Register of Beneficial Owners. The deadline for the first filing is 14 days from KRS registration – in practice, this is one of the first statutory clocks a new company needs to track.
A company bank account linked to the company’s NIP. Settlements with the tax office and the Social Insurance Institution (ZUS) must be made from a bank account assigned to the company’s tax identification number (NIP). Under the Polish Entrepreneurs’ Law, payments relating to business activity must go through the entrepreneur’s payment account whenever the counterparty is another business and the value of a single transaction exceeds PLN 15,000 (with foreign currency transactions converted at the National Bank of Poland’s average exchange rate from the preceding business day). Paying an invoice above that threshold to an account that is not on the VAT “white list” can trigger tax penalties – and business partners routinely check the white list before paying an invoice themselves, so setting up a registered company account early matters commercially as well as legally. A company account is also required to use the split payment mechanism, under which the net amount is paid to the supplier’s account and the VAT amount is automatically routed to a dedicated VAT account.
Qualified electronic signature. While not a blanket statutory requirement in every situation, obtaining a qualified electronic signature (QES) is strongly recommended in practice. Under the Polish Civil Code and the EU eIDAS Regulation, a QES has the same legal effect as a handwritten signature, allowing documents to be signed securely with public authorities and business partners alike, and supporting remote work and digital document management.
Employment Obligations
The moment a company hires its first employee, it becomes an employer under the Polish Labour Code – which brings a wide range of obligations into play at once.
Written employment contract. The contract must be signed before the employee starts work, and the employee must be informed of their duties, salary and working conditions.
ZUS registration. The employer must register the employee for social and health insurance within 7 days of the start of work, using the ZUS ZUA or ZUS ZZA form. This obligation also applies to civil-law contracts of mandate (umowa zlecenia), not only employment contracts.
Medical examinations. Employees must undergo an initial medical examination – followed by periodic and control examinations – and receive a health clearance before starting work.
Health and safety (BHP) training. Initial and periodic occupational health and safety training is mandatory for all employees.
Employee documentation. The employer must maintain personal files and records of working time, leave and salary payments – electronic record-keeping is permitted.
Work regulations and pay regulations. Work regulations, which set out the organisation of work and the related rights and obligations of employer and employees, become mandatory at 50 or more employees (or 20, if requested by a trade union). Pay regulations are mandatory at 50 or more employees where no collective agreement applies.
Timely payment of salaries. Salaries must be paid at least once a month, on a pre-agreed date – typically by the 10th of the following month.
Working time and leave compliance. Employers must track working time and grant paid leave, including annual, maternity and parental leave.
Information on employment terms. Employers must inform employees of key terms – salary, work schedule, promotion procedures, duration of employment, breaks, training rights and more – particularly in light of the requirements introduced by the 2022 EU work-life balance directive.
Employee Capital Plans (PPK). Employers must implement Employee Capital Plans unless every employee opts out. PPK is a voluntary, long-term retirement savings programme introduced by the Act of 4 October 2018. Core employer duties include: signing a management agreement with a financial institution, enrolling eligible employees by signing participation agreements on their behalf, calculating and transferring contributions every month (both employer and employee portions), informing employees of their rights and opt-out options, and repeating auto-enrolment every 4 years for employees who previously opted out.
Tax and Accounting Obligations
This section covers only the fundamentals – a company’s actual tax position depends on its specific business model and should be confirmed in a dedicated tax review.
Full bookkeeping. A limited liability company must maintain full accounting records in accordance with the Polish Accounting Act.
Annual financial statements. Financial statements must be prepared, digitally signed, and filed with the KRS through the eKRS online system.
Ongoing tax and social security reporting. The company must regularly report and remit CIT advances (monthly or quarterly), VAT returns (monthly or quarterly, where applicable), and PIT and ZUS payments for employees or contractors.
Intellectual Property
Companies that acquire copyright in works created by developers, content creators or subcontractors need to get one formal requirement right.
Written form of the agreement. To acquire economic copyright in a work, or an exclusive licence to use it, Polish copyright law requires the agreement to be concluded in writing – an oral agreement or a standalone invoice is not sufficient to transfer the rights or grant an exclusive licence.
Data Protection (GDPR)
Any company processing personal data – which in practice means nearly every operating business, if only through its dealings with employees and customers – must implement GDPR across its organisation. In practice, this includes:
- implementing internal procedures, such as a data breach notification procedure, a procedure for handling data subject requests, and a security policy;
- maintaining a record of processing activities and a record of categories of processing activities;
- fulfilling information obligations towards the individuals whose data is processed;
- concluding data processing agreements with vendors and service providers;
- carrying out a risk assessment; and
- implementing technical and organisational measures to secure personal data.
Frequently Asked Questions
What is the very first deadline a newly registered Polish company needs to track?
In most cases, it is the CRBR beneficial ownership filing, due within 14 days of KRS registration – well before most companies have even opened their bank account or hired their first employee.
Does a foreign-owned company need a Polish bank account from day one?
Not strictly from day one, but it should not wait long. Tax and ZUS settlements must run through an account linked to the company’s NIP, and being absent from the VAT white list can both trigger tax penalties and make business partners reluctant to pay invoices above PLN 15,000.
Is PPK mandatory for every employer?
Employers must offer PPK and enrol eligible employees by default – the scheme only falls away for a given employee if that employee actively opts out, and auto-enrolment is repeated every four years.
Who owns the IP if a development contract does not address it?
Paying for custom development work does not by itself transfer ownership of the resulting work under Polish copyright law. Without a written assignment or exclusive licence, the company risks holding, at best, an implied non-exclusive licence rather than full ownership.
What to Do in the First Weeks After Incorporation
- File the CRBR beneficial ownership report within 14 days of KRS registration
- Open a company bank account linked to the NIP and confirm it appears on the VAT white list before the first high-value invoice is paid
- Put written, signed agreements in place for any IP the company intends to own, including with contractors and developers
- Build GDPR documentation – records of processing, a security policy and data processing agreements – before the company starts handling customer or employee data at scale
- Set up ZUS registration, medical examinations and BHP training workflows before the first employee’s start date, not after
Companies that treat these obligations as a one-off checklist to complete right after registration – rather than an ongoing part of how the business runs, particularly around GDPR, employee documentation and tax filings – are the ones most likely to face administrative or tax penalties down the line. Getting the sequencing right from the outset, rather than retrofitting compliance later, also tends to build credibility with business partners, who increasingly check a counterparty’s regulatory standing before signing a contract.
If you are setting up a company in Poland and want to make sure these obligations are sequenced correctly from day one, get in touch to discuss your specific structure and timeline.
This post reflects Polish law in force as of the date of publication, including the Act on Counteracting Money Laundering and Terrorist Financing, the Entrepreneurs’ Law, the Labour Code, the Accounting Act, the Act on Employee Capital Plans, the Act on Copyright and Related Rights, and the GDPR. It is provided for general informational purposes and does not constitute legal advice on any specific company’s obligations.
Related posts:
