Baker McKenzie is among the leading addresses in data protection law and well-known for its cross-border capacities. The client roster includes companies from the pharmaceuticals, automotive, software and financial sectors; the first two areas are a key focus of Florian Tannen. Patrick Wilkening (previously at Hengeler Mueller) joined the team in October 2022 and specialises in IT law in connection with transactions, outsourcing and joint ventures. The team is jointly led by the renowned data protection expert Michael Schmidl, who frequently acts at the interface with employment law, and Michaela Nebel, who is experienced in contentious matters and proceedings before relevant supervisory authorities. Former co-head Holger Lutz (outsourcing, hardware and software contracts) joined Clifford Chance in June 2023.

CMS is experienced in traditional IT matters and offers additional expertise in compliance, digitisation, outsourcing as well as business process outsourcing (BPOs) and clients’ representation before the authorities. Thanks to the integration into the firm’s global network, the team is increasingly active in international data protection advice to clients from the e-commerce, platforms, technology, digital and life sciences sectors. The incident management support in connection with possible data breaches constitutes another mainstay, where the practice comprehensively covers all relevant aspects. The team is led by technology law expert Markus Häuser, who is well versed in digital business models and transactions. Frederik Leenen focuses exclusively on legaltech and made partner in July 2022.

DLA Piper's team assists clients with GDPR compliance programs, proceedings before the supervisory authorities and AI projects. Among the recent instructions is the support in data protection projects in the automotive sector. Stefan Engels (IP, media law) heads the group and is experienced in the data protection-compliant design of digital marketplaces, while Verena Grentzenberg is regularly instructed by clients from the media, retail and finance sectors in connection with new digital business models.

Latham & Watkins LLP's data protection practice is among the top German players for data privacy litigation, which the team routinely demonstrates in major disputes as well as fines and civil proceedings, including GDPR fines, before the ECJ. Tim Wybitul is a key contact here, he is among Germany's leading data protection experts. Further focus areas include the advice on transactions, financing and IPOs as well as the support to companies in connection with possible data breaches and subsequent official proceedings. The practice routinely cooperates with locations in the US, the United Kingdom, France, Hong Kong, Singapore and Korea, thereby covering cross-border matters. This expertise is a strength of Ulrich Wuermeling, who advises on European, English and German data protection law.

Pinsent Masons Rechtsanwälte Steuerberater Solicitors Partnerschaft mbB's practice acts from three locations and is experienced in the technology, energy and automotive sectors. The latter is a particular focus of the Munich-based team, led by Stephan Appt, which advises on e-mobility, software and regulatory issues. Frankfurt-based Ruth Maria Bousonville covers the fintech sector and regularly assists with cross-border matters. In cooperation with the third location in Düsseldorf, which specialises in telecoms, the team follows a cross-location approach in advising on data protection, digital marketing and compliance issues.

Reed Smith advises US technology companies, digital platforms, European companies and start-ups on cyber security, risk management, compliance as well as transactions. Recent instructions include the advice on cookies and other matters pertaining to digital business models. Co-practice head Andreas Splittgerber (focus on new technologies such as Industry 4.0, IoT and AI) jointly leads the team with Thomas Fischl who regularly supports companies in the implementation of data protection compliance.

SCHÜRMANN ROSENTHAL DREYER's data protection team recently increasingly assisted with contentious matters, including the support in official proceedings, the defence against fines as well as damages claims. The practice also advises on digitisation projects in the healthcare sector, regulatory matters pertaining to new technologies and data protection governance. Led by Kathrin Schürmann, Simone Rosenthal and Philipp Müller-Peltzer, the team primarily advises companies from the digital business, technology and media sectors and also covers interfacing matters, including IT, competition and telecommunications law.

Clyde & Co LLP's practice is experienced in digitisation matters as well as fine proceedings in connection with damages claims. The team, led by Jan Spittka, focuses on the insurance sector thanks to the firm's overall competencies. This interface expertise was further strengthend with the appointment of Paul Malek (cyber insurance and cyber risk issues) to partner in May 2023.

Covington & Burling LLP offers expertise at the interface between IT and life sciences and handles various related issues pertaining to data protection and regulatory law, such as digital healthcare matters. A further focus is on the automotive industry, where the team around Lars Lensdorf and Moritz Hüsch advises on projects in connection with ​​autonomous driving.

Eversheds Sutherland offers clients from the life sciences, technology, aviation and automotive sectors a full-service approach thanks to the international network and close cross-practice cooperation. The team is well versed in advising on employee data protection and compliance, particularly in the context of product design. Another mainstay is the support in disputes before the relevant authorities. Practice head and managing partner Alexander Niethammer demonstrates his data protection and IT law expertise in the transactional context. Lutz Schreiber (IT, data protection, outsourcing) joined YPOG in August 2022.

Ashurst LLP's digital economy group covers IT, technology, data and data protection matters and advises financial institutions and international companies on the launch of new business models, outsourcing, data transfers and data protection compliance. The arrival of Alexander Duisberg from Bird & Bird LLP in February 2023 strengthened the capacity in supporting digitisation projects and data-driven business models, including related cyber security issues, as well as transaction-related data protection; he jointly heads the practice with Andreas Mauroschat, who is experienced at the interface between data protection and employment law.

With particular industry knowledge in the automotive sector, Büsing, Müffelmann & Theye advises development service providers, suppliers and vehicle manufacturers. This is combined with experience in data protection law and utilised in the advice on data contract negotiations, digital products such as car software, connected cars, mobile apps, compliance and, increasingly, AI including related regulatory matters. This corresponds with the expertise of practice heads Matthias Terbach and Lars Siebert. In January 2023, Jan Dirkwinkel (R&D contracts, technology law, IT, data protection) made partner.

Dentons offers competencies at the intersection between compliance, IT, IP, corporate and employment law, which are frequently called upon by clients in international data transfers, GDPR compliance and the establishment of data protection compliance systems; practice head Christian Schefold is a key contact for the latter area. This advisory offering is complemented by expertise in crisis management issues such as data breaches. In December 2022, compliance specialist Ann-Kristin Cahnbley left the practice.

Greenberg Traurig Germany regularly assists with GDPR compliance, data protection fine proceedings and transactions as well as the structuring of international data transfers and exchanges. Cross-border matters are covered thanks to the international network and frequently advised on in close cooperation with the locations in the US. This approach is also mirrored in Viola Bensinger's dual role as head of the German data protection practice and as co-head of the global data privacy & cyber ​​security practice. Carsten Kociok is another key contact, he comprehensively advises on data protection law and primarily assists clients across the financial services, media, real estate and healthcare sectors.

Lexton Rechtsanwälte focuses on the healthcare and media sectors, including social media, and advises on general data protection issues, medical billing software and international data flows. The expertise at the employment law interface is used in advising on employee data. These competencies correspond with the comprehensive data protection expertise of practice head Kevin Max von Holleben.

Led by Jürgen Hartung and Marc Hilber, Oppenhoff advises on GDPR, data protection compliance, website design, cyber security as well as the processing of healthcare data by AI. This is complemented by litigation experience in legal disputes and proceedings before the supervisory authorities. The team also supports digitisation projects and IT outsourcing thanks to the cooperation with the firm's digital business group.

Redeker Sellner Dahs supports ministries, state authorities, sports clubs and health insurance companies in data protection proceedings, which was recently demonstrated in the healthcare sector in connection with the admissibility of the electronic patient card. Another mainstay is the advice on data protection issues in the context of digitisation projects. Cornelius Böllhoff is experienced in representing clients before the authorities and places an additional focus on ongoing advice, while Sabine Wildfeuer is well versed in contract drafting and matters at the digitisation intersection.