When a search arrives: typical scenarios

A search rarely happens without reason—it always follows some proceeding, though the client may not have known about it in advance. Several scenarios occur most often, and each demands a different response.

First: a criminal case against the company itself or its management—suspicion of fraud, tax evasion, customs violations, or labor law breaches. Second, more common than it seems: a business partner or contractor is under investigation, and the search is not because the company is suspected, but because its systems may contain evidence against someone else. The company becomes a source of evidence, but equipment is seized all the same. Third: a tax or customs matter, when Krajowa Administracja Skarbowa launches an inspection as part of budget settlement or goods circulation oversight. Fourth: an employee complaint that escalates to Państwowa Inspekcja Pracy, resulting in seizure of personnel files and work devices. And separately: a scenario that leaves people most confused—the company or person is merely a witness in someone else's case, yet equipment can still be examined and seized. This is where mistakes happen most often: people treat the search as a formality and fail to seek legal support.

The company's or individual's status entering a search—suspect, witness, or third party—determines in practice how much can be seized. This status must be clarified in the first moments, not reconstructed afterward from case materials.

Lawyer's tip. Your status entering a search—whether you are a suspect, witness, or third party—determines in practice what can legally be seized. Clarify this in the first moments, not after the fact from case files.

Who in Poland has the right to conduct searches and seize equipment

The right to conduct przeszukanie and seize items belongs to several search authorities, each acting within their own jurisdiction.

Before signing or explaining anything, understand which authority has arrived and under what proceeding. This determines their powers, the scope of the search, and your conduct from the first moments.

The search warrant: what to verify at your door

A search is conducted under a postanowienia—a court or prosecutor's order—and this document determines whether the authorities' actions are lawful.

What the warrant must contain

Before allowing people into the premises, ask them to present their legitymację służbową—an ID card from each person claiming to be an official—and verify the warrant text: does the address match, does the purpose apply to this specific location. A warrant for an office or warehouse does not automatically cover an adjacent room or the owner's private apartment unless explicitly listed. In practice, boundaries are often interpreted broadly, and this is exactly where a lawyer documenting discrepancies is essential—not for arguing at the doorstep, but for building an appeal.

Lawyer's tip. Don't waste the first moments arguing about the warrant's legality. Instead, document any discrepancies in address, scope, or issuing authority in the protocol for later zażalenie (appeal), not for a quarrel at the door.

How to behave during a search: what protects your rights

How a person behaves in the first moments of a search often influences the case's outcome more than any arguments made later.

The first step is always to verify the documents of those who arrived and call a lawyer or legal advisor—before discussing the case itself. The law does not forbid starting a search before your defender arrives, but the right to inform them belongs to the person being searched. You are not required to answer substantive questions before your defender arrives or without understanding your procedural status: silence here is not an admission of guilt, but a way to avoid saying something later difficult to explain in another context.

The search is conducted with the required presence of an osoby przybranej—an independent witness who confirms procedure compliance. Any remark—about the conduct of the search, items being seized, any deviation from the warrant—has the right to be entered into the protokołu przeszukania, not left as an unrecorded conversation with officials. Do not sign a document whose contents you do not fully understand due to language barriers or haste: your signature confirms agreement with the listed actions and items.

Search extends beyond business: apartment, car, phone at the border

This is often overlooked: search and equipment seizure are not only a corporate story about offices and accounting. A warrant may target a company owner's private apartment, rented housing, a car, or even a phone confiscated simply at border crossing. A person who was never a suspect can find themselves in a situation where their personal device becomes evidence in someone else's case.

Home, car, and border

When a warrant covers a private residence, the difference from a business search is felt immediately: personal items, family documents, and devices of all residents—not just the person involved in the case—fall under examination. The presence of children and the language of communication matter for conducting the search with minimal trauma while respecting procedure. Border inspection is a separate issue: when customs or border authorities confiscate a phone "for inspection," the owner may be without their device for weeks while examination proceeds, and such seizure also requires documentation and can be appealed.

Family member's device and witness status

If proceedings concern a business owner, their spouse's, partner's, or adult child's device may also be seized if there are grounds to believe it contains relevant information—for example, shared access to company email or joint cloud accounts. A family member with no business involvement has the same rights to a protocol and appeal as a direct case participant. The same applies to a person involved only as a witness in a former partner's or employer's case: they are not without a right to a defender. Lack of explanation at this moment often leads people to agree to more than the law requires.

Lawyer's tip. If search or equipment seizure involves a private apartment, car, or personal phone rather than only a business office, this warrants separate consultation, not an appendix to a "business" case.

Phones, laptops, servers and cloud: lawful data protection in advance

The best time to protect data is long before anyone knocks with a warrant. This is not about evading investigation, but ordinary, lawful corporate hygiene that protects confidential and privileged company information while the law determines what exactly is subject to examination.

Full disk encryption on laptops and servers, and device encryption on phones, is not a way to hide from investigation but a corporate security standard that protects against device theft, data leaks, or third-party interference. Two-factor authentication on email and cloud storage, separation of work and personal data into distinct accounts or at least profiles, reduce the risk that personal correspondence ends up alongside work documents. The less unnecessary data stored on work devices, the less falls within inspection scope: archives belong in managed corporate storage with clear access controls, and backups kept separate from the office allow business to continue even if main equipment is temporarily seized. Regular device checks for spyware and stalkerware protect business data and executives' personal communications from third-party observation, while reducing the public digital footprint of business owners lowers overall risk for both person and family.

All this is lawful, ordinary information protection practice that hides nothing from investigation and changes nothing about data subject to lawful examination: confidential information remains protected from everyone except those legally entitled to access it, while procedure determines what exactly will be examined.

Lawyer's tip. Digital hygiene audit should be routine practice, not a reaction to a received summons. Encryption and backups are set up in advance—changing anything on devices during a search is too late and risky for the client.

What happens to seized equipment: description, copies, return, appeal

Seizure of items—zatrzymanie rzeczy—is a procedural action with its own rules, and understanding these rules determines how quickly a business recovers its equipment.

Each seized item is recorded in the protokole przeszukania with a description: model, serial number, condition. Incomplete description complicates later proof of which exact equipment was seized. In cases allowed by law, you can request copies of work data needed to continue operations—accounting, contracts, client correspondence—if this does not conflict with investigation interests. Such a request should be submitted immediately, in writing, and with clear justification.

Seized equipment remains in the authority's control for the time needed for examination; the law sets no fixed deadline. When the item's necessity as evidence ends, equipment is returned, but rarely automatically—a return request should be submitted actively. The seizure decision can also be appealed by filing zażalenie with a higher court if it exceeds the warrant's scope, covers items unrelated to the case, or is clearly disproportionate to investigation needs.

How Dorosh & Partners prepares clients for search and manages the case after

A search is an event best prepared for in advance, not improvised in seconds at the doorstep. Dorosh & Partners builds client protection in Poland across three dimensions simultaneously: before, during, and after the search—and this sequence determines how painlessly the business survives the procedure.

Readiness audit and staff briefing

Before any summons arrives, we conduct an audit of how prepared the company is: whether encryption is configured, work and personal data separated in management systems, current backups stored outside the office. This matters equally for companies in business in Poland with elevated regulatory risk and those wanting to protect themselves from being a witness in someone else's case. Personnel seeing a search for the first time either become too passive or too confrontational, so we provide brief instruction: who verifies documents, who calls the lawyer, who records comments in the protocol.

On-site presence and the lawyer–advocate partnership

Once a search begins, our lawyer or advocate arrives as quickly as possible to monitor compliance with the warrant and document comments in the protocol. A search often develops into full proceedings, and here we apply the model Dorosh & Partners uses in criminal cases in Poland: the lawyer communicates with the client in plain language and manages the case from first call, while the advocate represents interests directly with police, prosecution, or court. The lawyer translates the situation into legal terms for the advocate and ensures no petition goes unanswered due to the advocate's other cases.

Business recovery after seizure

In parallel, we help clarify which data remain accessible for work and which are temporarily unavailable. This work directly connects to business inspections in Poland generally: searches often occur alongside tax or labor inspections. Once the acute moment passes, the task remains—recover equipment, restore data access, close formal steps. We accompany the client until business returns to normal rhythm, not just to protocol signing.

If a company or business owner has received warning of possible search or wants to prepare in advance, consultation can be ordered through the form on the site—and it's better to do this before anyone knocks, not after.

Questions people ask most often

Can I refuse to let police in without a lawyer?

No, with a lawful warrant a search proceeds regardless of whether a lawyer has arrived. But the right to call a legal advisor before discussing the case belongs to the person being searched, and denying this right is grounds for a protocol comment.

Can they seize my personal phone if the case involves the company?

Yes, if there are grounds to believe the personal device contains information relevant to the case—for example, access to work email or shared accounts. This applies to the business owner, family members, and employees.

How long can the authority hold seized equipment?

The exact timeline depends on case complexity and examination duration; the law sets no fixed deadline. An active request for equipment return or copies of work data typically shortens the actual waiting period.

Does witness status affect what can be seized?

Yes, what can lawfully be examined and seized depends on procedural status and the item's connection to the case. Witness status does not deprive you of the right to a defender or comments in the search protocol.

Can I appeal just the seizure of equipment, not the entire search?

Zażalenie can be filed specifically against the seizure of particular items if it exceeds the warrant's scope or is unrelated to the case, without needing to appeal the legality of the entire search.

Search and equipment seizure always arrive unexpectedly, even when a company theoretically expected inspection or investigation risk. The difference between panic costing weeks of downtime and a controlled procedure where a company emerges with minimal loss is determined mostly by how well people and data are prepared in advance and how quickly a defender arrives at the scene who knows the law's boundaries and knows how to use them for the client's benefit.

Матеріал має інформаційний характер і не замінює юридичну консультацію.