Baker McKenzie is among the leading addresses in data protection law and well-known for its cross-border capacities. The client roster includes companies from the pharmaceuticals, automotive, software and financial sectors; the first two areas are a key focus of Florian Tannen. Patrick Wilkening (previously at Hengeler Mueller) joined the team in October 2022 and specialises in IT law in connection with transactions, outsourcing and joint ventures. The team is jointly led by the renowned data protection expert Michael Schmidl, who frequently acts at the interface with employment law, and Michaela Nebel, who is experienced in contentious matters and proceedings before relevant supervisory authorities. Former co-head Holger Lutz (outsourcing, hardware and software contracts) joined Clifford Chance in June 2023.

Jointly led by Fabian Niemann and Lennart Schüßler, Bird & Bird advises national and global companies across all sectors, including the healthcare sector, on data protection law. Another key topic is the advice on European data protection, where the team recently advised on international data transfers and the introduction of new software as well as compliance and and data analytics. IT law expert Simon Assion is also part of the core team.

CMS is experienced in traditional IT matters and offers additional expertise in compliance, digitisation, outsourcing as well as business process outsourcing (BPOs) and clients’ representation before the authorities. Thanks to the integration into the firm’s global network, the team is increasingly active in international data protection advice to clients from the e-commerce, platforms, technology, digital and life sciences sectors. The incident management support in connection with possible data breaches constitutes another mainstay, where the practice comprehensively covers all relevant aspects. The team is led by technology law expert Markus Häuser, who is well versed in digital business models and transactions. Frederik Leenen focuses exclusively on legaltech and made partner in July 2022.

DLA Piper's team assists clients with GDPR compliance programs, proceedings before the supervisory authorities and AI projects. Among the recent instructions is the support in data protection projects in the automotive sector. Stefan Engels (IP, media law) heads the group and is experienced in the data protection-compliant design of digital marketplaces, while Verena Grentzenberg is regularly instructed by clients from the media, retail and finance sectors in connection with new digital business models.

Latham & Watkins LLP's data protection practice is among the top German players for data privacy litigation, which the team routinely demonstrates in major disputes as well as fines and civil proceedings, including GDPR fines, before the ECJ. Tim Wybitul is a key contact here, he is among Germany's leading data protection experts. Further focus areas include the advice on transactions, financing and IPOs as well as the support to companies in connection with possible data breaches and subsequent official proceedings. The practice routinely cooperates with locations in the US, the United Kingdom, France, Hong Kong, Singapore and Korea, thereby covering cross-border matters. This expertise is a strength of Ulrich Wuermeling, who advises on European, English and German data protection law.

Noerr comprehensively covers data protection law thanks to cross-practice cooperation with the litigation, regulatory, compliance and cyber risks teams. The team focuses on data breach management and data protection litigation (Sebastian Dienst is a key contact for both areas), including the support and representation in administrative, fine and court proceedings. The practice’s GDPR advice covers the implementation of sustainable data protection compliance systems and data protection governance structures. IT law and data protection expert Daniel Rücker heads the team, which was recently increasingly active at international level in expanding relationships with Chinese companies and law firms. Pascal Schumacher primarily acts across regulated industries and made partner in January 2024.

Taylor Wessing‘s data protection and cyber security expertise is regularly called upon by international and national companies from various sectors as well as public sector clients. The team is particularly well versed in the automotive and healthcare sectors, where the team respectively advises on e-mobility, autonomous driving and cyber security matters as well as data collection, the development of data structures and cloud applications. The practice acts from five German locations and assists with the transformation of digital and global business models and the development of new products. Mareike Gehrmann routinely covers data protection and cyber security issues in connection with digitisation projects; she made partner in April 2023. Malek Barudi (data protection, IP and e-commerce) made partner at the same time. The team also represents clients in contentious proceedings, here, practice head Paul Voigt is regularly instructed by online gaming providers.

Hogan Lovells International LLP is experiened in cross-border project support and focuses on AI-related matters, here,  Martin Pflüger and Marcus Schreibauer are key contacts, as well as cyber security, including clients' representation in proceedings before the supervisory authorities and in civil proceedings, digital healthcare (including healthcare apps and patient data protection) and the European Data Strategy. The experience in the healthcare and life sciences sectors is complemented with relevant industry expertise in the finance, insurance, automotive and technology segments. The advice on contentious matters and compliance is a key strength of Christian Tinnefeld, while Stefan Schuppert focuses on data protection, IP and contract law.

Luther Rechtsanwaltsgesellschaft mbH‘s team is led by Wulff-Axel Schmidt and advises companies, start-ups and public institutions on the use of data to train AI, international data transfers and digital business models. Stefanie Hellmich routinely assists with the implementation of the EU General Data Protection Regulation and data protection compliance. The team is experienced in the healthcare sector and advises on cloud-related matters, the use of patient data and data protection measures. This is complemented by relevant expertise in litigation, including proceedings before the data protection supervisory authorities and in connection with the enforcement of claims.

SKW Schwarz focuses on data protection and cyber security and is well versed in the healthcare sector, where the team assists hospital management companies with operational data protection matters. A growth area is the support for providers and customers of SaaS solutions in connection with the contractual implementation of cloud-based business models. The team is led by Daniel Meßmer (implementation of software and cloud-based business models) and also advises on issues pertaining to mobility, AI and e-sports. Franziska Ladiges made partner in January 2023 and specialises in advising companies on the implementation of data protection compliance.

WilmerHale is well-know for supporting the technology company Meta, which is regularly demonstrated in numerous major proceedings before the ECJ, the European Data Protection Board and national authorities. The team frequently cooperates with the Brussels location in connection with EU-related matters. Further key areas include the advice on contentious data protection matters, the structuring of international data transfers as well as data breach response and IT law. The latter is a focus of practice head Martin Braun, who is additionally well versed in the ​​social media segment.

ADVANT Beiten stands out thanks to the close cooperation of the IT and media practices. This expertise benefits clients from the gaming, finance and healthcare sectors. The client portfolio includes companies as well as public sector players, which the team advises on risk management, contract design, digitisation projects and compliance. The latter is a key competence of Susanne Klein, who made partner in November 2022. The partner roster was further strengthened with the addition of Birgit Münchbach (August 2022, previously at Friedrich Graf von Westphalen & Partner) and Ariane Loof (October 2022, formerly KPMG Law in Germany). While Münchbach focuses on digital business models and cloud solutions, Loof acts at the interface between data protection and employment law. Practice head Andreas Lober is well versed in litigation and clients' representation before the supervisory authorities.

GvW Graf von Westphalen's data protection practice primarily acts across the automotive, finance, public, insurance and healthcare sectors and advises companies, associations, NGOs and public institutions with a cross-practice approach. Practice head Stephan Menzemer also manages the firm's international desk and routinely covers cross-border matters, while Gudrun Hausner (outsourcing, cross-border data transfers) is based in Munich and made partner in January 2023. Thomas Schuster (interface between public law and IT/data protection law) joined Eichler Kern Klein Rechtsanwälte PartG mbB in December 2022.

Heuking acts from five locations and comprehensively advises companies and public sector clients from various sectors on data protection issues. Thomas Jansen is well versed in the area of ​​autonomous driving, while Hans Markus Wulf focuses on international data transfers and cyber security. Philip Kempermann is experienced in the banking segement, which also includes contentious matters. Other key contacts are Michael Kuska, who covers issues pertaining to the healthcare and technology sectors, as well as Lutz Martin Keppeler, who made partner in January 2023 and frequently advises on novel technologies such as blockchain or metaverse; Keppler also covers cyber security matters.

Jones Day offers advice and support in transactions, data breaches and cyber attacks, including related reporting obligations to authorities and those affected, as well as internal investigations. Martin Lotz is a key contact for the latter area, where he routinely cooperates with the compliance team. Other cross-practice capacities include the cooperation with the Munich-based life sciences team, such as the advice to pharmaceutical companies on data protection. The practice is led by the renowned data protection expert Undine von Diemar and primarily acts across the technology, life sciences and fintech sectors.

Orrick, Herrington & Sutcliffe LLP's team primarily advises technology companies on data protection compliance, the prevention of and response to cyber security breaches as well as licensing issues. Cross-border matters are also covered thanks to the international network. Practice head Christian Schröder is experienced in clients' representation before courts and EU authorities.

Pinsent Masons Rechtsanwälte Steuerberater Solicitors Partnerschaft mbB's practice acts from three locations and is experienced in the technology, energy and automotive sectors. The latter is a particular focus of the Munich-based team, led by Stephan Appt, which advises on e-mobility, software and regulatory issues. Frankfurt-based Ruth Maria Bousonville covers the fintech sector and regularly assists with cross-border matters. In cooperation with the third location in Düsseldorf, which specialises in telecoms, the team follows a cross-location approach in advising on data protection, digital marketing and compliance issues.

Reed Smith advises US technology companies, digital platforms, European companies and start-ups on cyber security, risk management, compliance as well as transactions. Recent instructions include the advice on cookies and other matters pertaining to digital business models. Co-practice head Andreas Splittgerber (focus on new technologies such as Industry 4.0, IoT and AI) jointly leads the team with Thomas Fischl who regularly supports companies in the implementation of data protection compliance.

SCHÜRMANN ROSENTHAL DREYER's data protection team recently increasingly assisted with contentious matters, including the support in official proceedings, the defence against fines as well as damages claims. The practice also advises on digitisation projects in the healthcare sector, regulatory matters pertaining to new technologies and data protection governance. Led by Kathrin Schürmann, Simone Rosenthal and Philipp Müller-Peltzer, the team primarily advises companies from the digital business, technology and media sectors and also covers interfacing matters, including IT, competition and telecommunications law.

White & Case LLP acts across the social media, energy, automotive and technology sectors with a cross-practice approach and advises corporations, banks and fintech companies on all aspects of German and European data protection law, including data transfers, the establishment of digital platforms and cyber security matters. This is complemented by experience in clients' representation in litigation. The team is led by Detlev Gabel (data protection law, technology law).

Clyde & Co LLP's practice is experienced in digitisation matters as well as fine proceedings in connection with damages claims. The team, led by Jan Spittka, focuses on the insurance sector thanks to the firm's overall competencies. This interface expertise was further strengthend with the appointment of Paul Malek (cyber insurance and cyber risk issues) to partner in May 2023.

Covington & Burling LLP offers expertise at the interface between IT and life sciences and handles various related issues pertaining to data protection and regulatory law, such as digital healthcare matters. A further focus is on the automotive industry, where the team around Lars Lensdorf and Moritz Hüsch advises on projects in connection with ​​autonomous driving.

Eversheds Sutherland offers clients from the life sciences, technology, aviation and automotive sectors a full-service approach thanks to the international network and close cross-practice cooperation. The team is well versed in advising on employee data protection and compliance, particularly in the context of product design. Another mainstay is the support in disputes before the relevant authorities. Practice head and managing partner Alexander Niethammer demonstrates his data protection and IT law expertise in the transactional context. Lutz Schreiber (IT, data protection, outsourcing) joined YPOG in August 2022.

Morrison Foerster advises large German and international companies on GDPR compliance and data protection breaches as well as on data protection in the healthcare sector. A traditional focus remains on the representation of corporations in high-volume fine proceedings. Thanks to his employment law expertise, practice head Hanno Timner also assists in works council negotiations with the introduction of new IT systems, such as whistleblower systems.

Ashurst LLP's digital economy group covers IT, technology, data and data protection matters and advises financial institutions and international companies on the launch of new business models, outsourcing, data transfers and data protection compliance. The arrival of Alexander Duisberg from Bird & Bird LLP in February 2023 strengthened the capacity in supporting digitisation projects and data-driven business models, including related cyber security issues, as well as transaction-related data protection; he jointly heads the practice with Andreas Mauroschat, who is experienced at the interface between data protection and employment law.

With particular industry knowledge in the automotive sector, Büsing, Müffelmann & Theye advises development service providers, suppliers and vehicle manufacturers. This is combined with experience in data protection law and utilised in the advice on data contract negotiations, digital products such as car software, connected cars, mobile apps, compliance and, increasingly, AI including related regulatory matters. This corresponds with the expertise of practice heads Matthias Terbach and Lars Siebert. In January 2023, Jan Dirkwinkel (R&D contracts, technology law, IT, data protection) made partner.

Dentons offers competencies at the intersection between compliance, IT, IP, corporate and employment law, which are frequently called upon by clients in international data transfers, GDPR compliance and the establishment of data protection compliance systems; practice head Christian Schefold is a key contact for the latter area. This advisory offering is complemented by expertise in crisis management issues such as data breaches. In December 2022, compliance specialist Ann-Kristin Cahnbley left the practice.

Greenberg Traurig Germany regularly assists with GDPR compliance, data protection fine proceedings and transactions as well as the structuring of international data transfers and exchanges. Cross-border matters are covered thanks to the international network and frequently advised on in close cooperation with the locations in the US. This approach is also mirrored in Viola Bensinger's dual role as head of the German data protection practice and as co-head of the global data privacy & cyber ​​security practice. Carsten Kociok is another key contact, he comprehensively advises on data protection law and primarily assists clients across the financial services, media, real estate and healthcare sectors.

GSK Stockmann's data protection expertise is utilised in the advice on GDPR compliance, the creation of data protection concepts as well as in clients' representation before the authorities. Practice heads Jörg Kahler and Katy Ritzmann are experienced in the mobility, finance and real estate sectors and regularly assist with transactions and, thanks to the firm's focus on the real estate segment, advise facility managers on monitoring software, serviced apartments and parking space management.

Lexton Rechtsanwälte focuses on the healthcare and media sectors, including social media, and advises on general data protection issues, medical billing software and international data flows. The expertise at the employment law interface is used in advising on employee data. These competencies correspond with the comprehensive data protection expertise of practice head Kevin Max von Holleben.

Led by Jürgen Hartung and Marc Hilber, Oppenhoff advises on GDPR, data protection compliance, website design, cyber security as well as the processing of healthcare data by AI. This is complemented by litigation experience in legal disputes and proceedings before the supervisory authorities. The team also supports digitisation projects and IT outsourcing thanks to the cooperation with the firm's digital business group.

Redeker Sellner Dahs supports ministries, state authorities, sports clubs and health insurance companies in data protection proceedings, which was recently demonstrated in the healthcare sector in connection with the admissibility of the electronic patient card. Another mainstay is the advice on data protection issues in the context of digitisation projects. Cornelius Böllhoff is experienced in representing clients before the authorities and places an additional focus on ongoing advice, while Sabine Wildfeuer is well versed in contract drafting and matters at the digitisation intersection.