Jointly led by Fabian Niemann and Lennart Schüßler, Bird & Bird advises national and global companies across all sectors, including the healthcare sector, on data protection law. Another key topic is the advice on European data protection, where the team recently advised on international data transfers and the introduction of new software as well as compliance and and data analytics. IT law expert Simon Assion is also part of the core team.

DLA Piper's team assists clients with GDPR compliance programs, proceedings before the supervisory authorities and AI projects. Among the recent instructions is the support in data protection projects in the automotive sector. Stefan Engels (IP, media law) heads the group and is experienced in the data protection-compliant design of digital marketplaces, while Verena Grentzenberg is regularly instructed by clients from the media, retail and finance sectors in connection with new digital business models.

Latham & Watkins LLP's data protection practice is among the top German players for data privacy litigation, which the team routinely demonstrates in major disputes as well as fines and civil proceedings, including GDPR fines, before the ECJ. Tim Wybitul is a key contact here, he is among Germany's leading data protection experts. Further focus areas include the advice on transactions, financing and IPOs as well as the support to companies in connection with possible data breaches and subsequent official proceedings. The practice routinely cooperates with locations in the US, the United Kingdom, France, Hong Kong, Singapore and Korea, thereby covering cross-border matters. This expertise is a strength of Ulrich Wuermeling, who advises on European, English and German data protection law.

Noerr comprehensively covers data protection law thanks to cross-practice cooperation with the litigation, regulatory, compliance and cyber risks teams. The team focuses on data breach management and data protection litigation (Sebastian Dienst is a key contact for both areas), including the support and representation in administrative, fine and court proceedings. The practice’s GDPR advice covers the implementation of sustainable data protection compliance systems and data protection governance structures. IT law and data protection expert Daniel Rücker heads the team, which was recently increasingly active at international level in expanding relationships with Chinese companies and law firms. Pascal Schumacher primarily acts across regulated industries and made partner in January 2024.

Taylor Wessing‘s data protection and cyber security expertise is regularly called upon by international and national companies from various sectors as well as public sector clients. The team is particularly well versed in the automotive and healthcare sectors, where the team respectively advises on e-mobility, autonomous driving and cyber security matters as well as data collection, the development of data structures and cloud applications. The practice acts from five German locations and assists with the transformation of digital and global business models and the development of new products. Mareike Gehrmann routinely covers data protection and cyber security issues in connection with digitisation projects; she made partner in April 2023. Malek Barudi (data protection, IP and e-commerce) made partner at the same time. The team also represents clients in contentious proceedings, here, practice head Paul Voigt is regularly instructed by online gaming providers.

Hogan Lovells International LLP is experiened in cross-border project support and focuses on AI-related matters, here,  Martin Pflüger and Marcus Schreibauer are key contacts, as well as cyber security, including clients' representation in proceedings before the supervisory authorities and in civil proceedings, digital healthcare (including healthcare apps and patient data protection) and the European Data Strategy. The experience in the healthcare and life sciences sectors is complemented with relevant industry expertise in the finance, insurance, automotive and technology segments. The advice on contentious matters and compliance is a key strength of Christian Tinnefeld, while Stefan Schuppert focuses on data protection, IP and contract law.

Luther Rechtsanwaltsgesellschaft mbH's team is led by Wulff-Axel Schmidt and advises companies, start-ups and public institutions on the use of data to train AI, international data transfers and digital business models. Stefanie Hellmich routinely assists with the implementation of the EU General Data Protection Regulation and data protection compliance. The team is experienced in the healthcare sector and advises on cloud-related matters, the use of patient data and data protection measures. This is complemented by relevant expertise in litigation, including proceedings before the data protection supervisory authorities and in connection with the enforcement of claims.

WilmerHale is well-know for supporting the technology company Meta, which is regularly demonstrated in numerous major proceedings before the ECJ, the European Data Protection Board and national authorities. The team frequently cooperates with the Brussels location in connection with EU-related matters. Further key areas include the advice on contentious data protection matters, the structuring of international data transfers as well as data breach response and IT law. The latter is a focus of practice head Martin Braun, who is additionally well versed in the ​​social media segment.

Jones Day offers advice and support in transactions, data breaches and cyber attacks, including related reporting obligations to authorities and those affected, as well as internal investigations. Martin Lotz is a key contact for the latter area, where he routinely cooperates with the compliance team. Other cross-practice capacities include the cooperation with the Munich-based life sciences team, such as the advice to pharmaceutical companies on data protection. The practice is led by the renowned data protection expert Undine von Diemar and primarily acts across the technology, life sciences and fintech sectors.

Orrick, Herrington & Sutcliffe LLP's team primarily advises technology companies on data protection compliance, the prevention of and response to cyber security breaches as well as licensing issues. Cross-border matters are also covered thanks to the international network. Practice head Christian Schröder is experienced in clients' representation before courts and EU authorities.

White & Case LLP acts across the social media, energy, automotive and technology sectors with a cross-practice approach and advises corporations, banks and fintech companies on all aspects of German and European data protection law, including data transfers, the establishment of digital platforms and cyber security matters. This is complemented by experience in clients' representation in litigation. The team is led by Detlev Gabel (data protection law, technology law).

Eversheds Sutherland offers clients from the life sciences, technology, aviation and automotive sectors a full-service approach thanks to the international network and close cross-practice cooperation. The team is well versed in advising on employee data protection and compliance, particularly in the context of product design. Another mainstay is the support in disputes before the relevant authorities. Practice head and managing partner Alexander Niethammer demonstrates his data protection and IT law expertise in the transactional context. Lutz Schreiber (IT, data protection, outsourcing) joined YPOG in August 2022.

Morrison Foerster advises large German and international companies on GDPR compliance and data protection breaches as well as on data protection in the healthcare sector. A traditional focus remains on the representation of corporations in high-volume fine proceedings. Thanks to his employment law expertise, practice head Hanno Timner also assists in works council negotiations with the introduction of new IT systems, such as whistleblower systems.

Dentons offers competencies at the intersection between compliance, IT, IP, corporate and employment law, which are frequently called upon by clients in international data transfers, GDPR compliance and the establishment of data protection compliance systems; practice head Christian Schefold is a key contact for the latter area. This advisory offering is complemented by expertise in crisis management issues such as data breaches. In December 2022, compliance specialist Ann-Kristin Cahnbley left the practice.

Greenberg Traurig Germany regularly assists with GDPR compliance, data protection fine proceedings and transactions as well as the structuring of international data transfers and exchanges. Cross-border matters are covered thanks to the international network and frequently advised on in close cooperation with the locations in the US. This approach is also mirrored in Viola Bensinger's dual role as head of the German data protection practice and as co-head of the global data privacy & cyber ​​security practice. Carsten Kociok is another key contact, he comprehensively advises on data protection law and primarily assists clients across the financial services, media, real estate and healthcare sectors.

GSK Stockmann's data protection expertise is utilised in the advice on GDPR compliance, the creation of data protection concepts as well as in clients' representation before the authorities. Practice heads Jörg Kahler and Katy Ritzmann are experienced in the mobility, finance and real estate sectors and regularly assist with transactions and, thanks to the firm's focus on the real estate segment, advise facility managers on monitoring software, serviced apartments and parking space management.