Hall Of Fame

Rising Stars

Data privacy and data protection in Austria

DORDA Rechtsanwälte GmbH

The team at DORDA Rechtsanwälte GmbH frequently represents clients before the Austrian data protection authority and the Federal Administrative Court in matters of data protection, advising on issues around cookies, data retention and GDPR disputes. Managing partner Axel Anderl jointly heads the team, advising on data aspects of IT and outsourcing projects in addition to GDPR compliance. Alongside him is the ‘very flexible, pragmatic and solution-oriented’ practice co-head Nino Tlapak, who handles IT security matters and assists clients in the event of data breaches, with further expertise in cloud agreements. Alexandra Ciarnau co-heads the firm’s digital industries group, adding experience in the fields of AI and digitalisation in addition to her focus on e-commerce and consumer protection.

Practice head(s):

Axel Anderl; Nino Tlapak

Other key lawyers:

Alexandra Ciarnau


‘The team consists of exceptional individuals with different strengths and specialisations, forming a perfect combination and covering all areas of data privacy and protection topics. They recognize important topics and developments in the field before anyone else.’

‘Nino Tlapak is a top notch lawyer. He has a quick mind and is a real problem solver. He has always the right answer to even the most complicated questions.’

‘Nino Tlapak – very flexible, pragmatic and solution-oriented.’

‘Nino Tlapak has profound knowledge of data protection and is proactive in solving problems and proposing pragmatic solutions.’

‘The team always responds quickly, has a good representation structure and has a collegiate feel.’

‘Our lawyer had a good understanding of the law and the experience in practice to advise us on how to proceed with specific legal issues. He responded quickly, was solution-oriented and tied business matters together with what is possible legally.’

‘The legal information is clearly formulated and to the point. Even ad hoc information over the telephone is precise and reliable. One can always rely on the quality of their advice.’

‘In addition to their excellent legal knowledge, Axel Anderl and Nino Tlapak are characterised by their ability to recognise company-specific problems and quickly find pragmatic solutions. With Axel Anderl and Nino Tlapak, you know you are in good hands.’

Key clients

BNP Paribas

oe24 GmbH


ÖBB Personenverkehr

One MobilityFederal Ministry for Climate Action, Environment, Energy, Mobility, Innovation, and Technology

Interactive Paper, Better Life Tech, Carealytix, LTY, MAYD Group GmbH

Erste Digital GmbH

Erste Group

Erste Bank

Atomic Austria

METRO Cash & Carry Österreich

Allianz Elementar Versicherungs-Aktiengesellschaft

Novartis Pharma Austria

bioMérieux Austria

Bayer Austria GmbH


Janssen-Cilag Pharma


VIG IT Digital Solutions GmbH

Xund Solutions

L’Oréal Österreich


A. Menarini Pharma

RWA Raiffeisen Ware Austria AG

Forbes (FEB29 Medien und Verlags GmbH)

Work highlights

  • Acted for UniCredit Bank Austria before the Austrian Highest Administrative Court as the last instance regarding the admissibility of the banking warning list.
  • Engaged by BNP Paribas SA as its new external data protection officer for all of its Austrian companies.
  • Assisted the Federal Ministry for Social Affairs, Health, Care and Consumer Protection of Austria with regard to data protection compliance of a draft law in the health care area.

Knyrim Trieb Rechtsanwälte OG

Knyrim Trieb Rechtsanwälte OG leverages its ‘extensive experience and expertise’ to advise clients on GDPR compliance, including in projects undertaken by clients in the automotive and pharmaceutical sectors in addition to acting for government bodies. Founding partners Rainer Knyrim and Gerald Trieb cover the gamut of data protection matters, appearing frequently before the Austrian data protection authority and the Administrative Courts on matters ranging from misuse of personal data to issues stemming from data breaches. Lena Urban advises on data protection matters tied to EU laws and offers further expertise in consumer protection law.

Practice head(s):

Rainer Knyrim; Gerald Trieb

Other key lawyers:

Lena Urban


‘Extensive experience and expertise. Over the years they have built an excellent team that supports us in different ways. Good mix of people.’

‘My go-to team whenever a legal issue on data protection arises in Austria!’

‘Our collaboration with Knyrim Trieb Rechtsanwälte continues to be highly efficient and appreciated.’

Key clients

European Crohns and Colitis Organisation – ECCO

Wienerberger AG

REWE International, Unser Ö-Bonus Club GmbH

Boehringer Ingelheim RCV GmbH & Co KG


Federal Job Agency

Stadtwerke Kitzbühel e.U.

KIA AUSTRIA Gesellschaft m.b.H.


Austrian Association of Electricity Companies

Lenzing AG

Immofinanz AG


Greiner AG


Work highlights

  • Represented the Austrian Job Agency in proceedings before the Austrian Highest Administrative Court in relation to questions in relation to the processing of personal data of formerly unemployed Austrians.
  • Assisted an international group of companies and members of a major Austrian industry association with the implementation of Microsoft 365.
  • Provided data protection consulting for a real estate company in an extensive project to further develop housing allocation in subsidised and municipal housing.

Baker McKenzie Rechtsanwälte LLP & Co KG

Baker McKenzie Rechtsanwälte LLP & Co KG‘s advises an array of clients in the technology and digital spheres on matters of data protection and security, including defending against claims of customer data misuse under both Austrian and EU legislation. ‘Excellent lawyer’ and practice head Lukas Feiler has a strong track record before Austria’s data protection authority and courts, including the ECJ, concerning clients’ use of their customers’ data, while also providing support in relation to projects that require data processing and storage. Maximilian Raschhofer handles administrative and criminal proceedings centred on data matters, including disputes around data protection and outsourcing for clients in the tech and health sectors.

Practice head(s):

Lukas Feiler

Other key lawyers:

Maximilian Raschhofer


‘Smart and outstanding people; high quality of legal advice, especially regarding data protection.’

‘Lukas Feiler is an excellent lawyer regarding data protection and IT law; he has a huge amount of knowledge and offers highly professional legal solutions for even the most complicated tech issues.’

‘The team has incredible subject matter expertise in our industry and with relevant up-to-date privacy litigation and decisions that may impact our services. They also have unique relationships with regulators which allows us to understand relevant interpretations.’

Key clients


GATX Rail Europe

STANDARD Verlagsgesellschaft

Mondi AG

Work highlights

  • Represented Google in two proceedings before the Austrian Data Protection Authority concerning the widely used analytics tool, Google Analytics.
  • Acted for Google in administrative proceedings before the Austrian data protection authority related to the service Google Fonts.
  • Represented CRIF in proceedings before the European Court of Justice in connection with the right to receive a copy under GDPR.

Cerha Hempel

Cerha Hempel delivers ‘practical solutions’ in the field of data protection, advising clients on their responsibilities around cross-border outsourcing, data transfer and cloud computing projects, while also representing clients in actions before the Austrian data protection authority and the courts pertaining to data breaches. Team head Hans Kristoferitsch offers his clients a ‘pragmatic approach’ to data protection, assisting international clients on the rollout of new mobile apps and other matters that concern handling of customer data, while also advising on GDPR compliance and contentious EU law cases. Armin Schwabl, who is also admitted in New York, advises on regulatory data protection matters, while Boris Treml supports businesses in implementing GDPR, carrying out data risk assessments and IT outsourcing projects.

Practice head(s):

Hans Kristoferitsch

Other key lawyers:

Armin Schwabl; Stephanie Maier-Herbeck; Boris Treml


‘We have been working with Cerha Hempel for many years and are extremely happy with the support. In particular we appreciate that they offer a full service and can also cover issues under public and administrative law as well as all technical aspects of data protection.’

‘Hans Kristoferitsch is always available, has great experience in dealing with the DPA and in proceedings before the civil and administrative courts. Boris Treml has helped us greatly in linking the worlds of IT and law.’

‘We think that what makes Cerha Hempel stand out is its ability to offer full service in data privacy, also covering all related aspects under civil law as well as the technical aspects (data security, privacy by design and default etc).’

‘Hans Kristoferitsch is very pleasant to work with, very experienced in all matters of privacy law, with a pragmatic approach which has helped us a lot in connection with the digitisation of our business processes.’

‘Cerha Hempel has truly outstanding capabilities in the area of data protection and TMT; they are highly skilled and reliable, it is a fantastic team to work with. ‘

‘Hans Kristoferitsch is definitely one of the leading privacy lawyers in Austria; his advice is always clear and to the point and you constantly feel that he has tremendous experience in this area.’

‘Boris Treml combines legal with technical expertise, providing unequalled insights and advice as to data, network and information security.’

‘Armin Schwabl is an excellent lawyer, he is always available and pragmatic, he really goes out of his way to help solve your legal problems.’

Key clients


Wiener Stadtwerke GmbH and subsidiaries

City of Vienna

Hervis Sport- und Modegesellschaft m.b.H.

via donau – Österreichische Wasserstraßen GmbH


Wiener Netze GmbH

Wiener Linien GmbH

Wiener Lokalbahnen GmbH

ASFINAG Autobahnen- und Schnellstraßen-Finanzierungs-Aktiengesellschaft

NTS Netzwerk Telekom Service AG

CA Immobilien Anlagen AG

Institute of Science and Technology Austria (IST Austria)

Österreichischen Fonds zur Dokumentation von religiös motiviertem politischen Extremismus (Dokumentationsstelle politischer Islam)

ÖRAG Österreichische Realitäten AG

COVID-19 Finanzierungsagentur des Bundes GmbH

Flughafen Wien AG

Land Vorarlberg

Isovolta AG

Fundermax GmbH

Danube Private University

Deutsche Vermögensberatung Bank Aktiengesellschaft

Work highlights

  • Assisted SPAR with all legal matters around the creation of a new app and provided the legal documents and contracts, data protection impact assessment and data protection notices.
  • Advised Wiener Stadtwerke GmbH and all of its subsidiaries on a group-wide project introducing a Single-Sign-On mechanism and a centralized user account for customers of all group entities.
  • Advised the City of Vienna on the redesign and merger of their communication platforms targeted at 1.9mn residents.


GEISTWERT‘s partner-only practice provides ‘extremely fast and efficient advice’ at the intersection of data protection and IP, handling international data transfers, IT projects and data protection aspects of corporate transactions. The team, consisting of Constantin Kletzer, Juliane Messner, Max Mosing, Alexander Schnider and Rainer Schultes, also acts for clients facing hearings before the Austrian data protection authority and the courts, assisting with issues concerning user data disclosure requests and GDPR matters. The firm’s client base is comprised of companies ranging from digital media and pharmaceuticals to leisure and public bodies, whom it also advises on digital projects and initiatives including the launch of new customer programmes and services.

Practice head(s):

Constantin Kletzer; Juliane Messner; Max Mosing; Alexander Schnider; Rainer Schultes


‘Excellent market knowledge of the sectors that are important to us, such as EdTech, IP law, pharmaceutical law, corporate law bundled in one law firm, solving problems in a client-oriented manner and providing extremely fast and efficient advice.’

‘Juliane Messner has the best knowledge of corporate law. So important for us because we are internationally established. Max Mosing provides us with solution-oriented support in the volatile environment of data protection law. Rainer Schultes is our trusted pharmaceutical law specialist.’

‘Juliane Messner and Max Mosing are hands-on, knowledgeable and understand the business of their clients. They are stand-out lawyers in the market and always give clients the feeling that their matters are in good hands.’

Key clients

Red Bull Media House

Red Bull

HGV – South Tyrolean Hotel Association

The Vienna Tourist Board




Altstoff Recycling Austria AG (ARA) and Saubermacher AG


Mayr-Melnhof (IT)


LTS – South Tyrol Association of Tourism Organisations



Work highlights

  • Advised Red Bull Media House in data protection matters, especially international data transfers and regarding the launch of new services.
  • Represented several clients before the Austrian data protection authority and Austrian courts in proceedings initiated by NOYB regarding international data transfers, especially concerning Google Analytics and other US-based tools.
  • Advised Altstoff Recycling Austria AG regarding the data protection impact of the implementation of a recycling system for cans and plastic bottles with an electronic deposit system.

Schoenherr (Schönherr Rechtsanwälte)

At Schoenherr (Schönherr Rechtsanwälte), the data protection practice straddles both Austrian and EU data protection law, with extensive experience assisting clients on GDPR compliance and data security issues tied to international transactions. Under the leadership of the ‘fantastic’ Günther Leissler, the practice group has achieved notable successes before Austria’s data protection authority and the courts in matters concerning the processing of user data, cookies and data analysis, among other issues. Veronika Wolfbauer left the firm in February 2024.

Practice head(s):

Günther Leissler


‘Big team, you find experts for everything.’

‘Günther Leissler is a very kind, competent, diligent, fast-responding expert for data privacy and data mining.’

‘In my experience working with Schoenherr on data privacy regulatory and litigation matters, the team is second to none for this work in Austria.’

‘Gunther Leissler is fantastic – he knows everything there is to know about data protection law in Austria, and always provides sound strategic advice. He is ably supported by an excellent team.’

‘Schoenherr simply offers an ambience in which you feel comfortable as a client from the very beginning.’

‘The Schoenherr team is a team of lateral thinkers and thus comes up with very good solutions and approaches. Schoenherr also has a very good international network.’

Key clients

Österreichische Post AG

Vienna Insurance Group

Advent International Corporation

Deutsche Telekom

Work highlights

  • Represented Meta, Inc. in defending claims filed by data protection activist Maximilian Schrems in 2014.
  • Acted for Österreichische Post AG in GDPR-related proceedings.

Wolf Theiss Rechtsanwälte GmbH & Co KG

Wolf Theiss Rechtsanwälte GmbH & Co KG‘s team handles the full spectrum of data protection issues, with expertise that includes both advisory and contentious GDPR matters, in addition to assisting clients with ongoing data security measures and acting for them in response to data breaches. Practice head Roland Marko represents a number of high profile clients in both the traditional and social media sectors before the Austrian data protection authority in claims concerning potential GDPR breaches and questions over the handling of user data, with further knowledge of IT outsourcing projects, e-commerce regulations and cloud computing. Paulina Pomorski is noted for her skill in data privacy litigation, while Phillip Wrabetz specialises in advising the digital media and life sciences sectors on data protection matters.

Practice head(s):

Roland Marko

Other key lawyers:

Paulina Pomorski; Phillip Wrabetz

Key clients

Addiko Bank

Österreichische Post


Meta Platforms

Peek & Cloppenburg

REWE International

UniCredit Bank


Work highlights

  • Represented Österreichische Post before the ECJ in the first-ever series of GDPR claims in Austria, where a large number of people allegedly affected by data protection violations sued for damages.
  • Advised a transportation company on data governance issues, including on questions of data ownership and mandatory access rights in machine data.
  • Assisted a healthcare provider with the transfer of patient data and cells to a US-headquartered services provider.

Binder Grösswang

A key pillar of Binder Grösswang‘s data protection practice lies in new technologies, where the firm advises on digitalisation processes and e-commerce matters. On both fronts the team has experience in acting for clients ranging from startups to multinationals on contentious proceedings before Austria’s data protection authority as well as advisory matters, including compliance with regulatory regimes. The team is led by Ivo Rungg, whose practice covers the digital sector, and Angelika Pallwein-Prettner, who advises employers on data protection and privacy compliance.

Practice head(s):

Ivo Rungg; Angelika Pallwein-Prettner


‘Very personal and individual support and processing of legal issues.’

‘Ivo Rungg: excellent expertise and collaborative work.’

‘There’s always someone with expertise in a specific area. Great & friendly team, always provides thorough research and fast responses.’

‘Ivo was great, he always replied quickly and his research and responses were very thorough.’

‘All team members have extensive experience in all the IP fields where we require their assistance.’

‘Ivo Rungg and the whole team provided valuable assistance by drafting various legal documents in this context, such as privacy policies and cooperation agreements.’

‘Exceptional experience with this firm! Their deep understanding of clients’ needs and empathetic approach set them apart. The team’s expertise, coupled with innovative technology, ensures efficient and precise services. Highly recommended!’

‘Their personalised approach, combined with a deep understanding of the law, distinguishes them from competitors. I value the team’s expertise, professionalism, and proactive communication. Ivo Rungg has demonstrated outstanding commitment and exceptional problem-solving skills.’

Key clients

ByteDance (TikTok)

Société Générale

Jazz Pharmaceuticals

Renault Österreich

BNP Paribas

Vaya Fieberbrunn

HELLWEG Baumärkte

CCT Software Solutions

Österreichische Post

Stadt Wien

Austrian Federal Ministry of Finance


SF Filterdienst

GlaxoSmithKline plc


OBI Bau- und Heimwerkermärkte Systemzentrale GmbH

Easy Park

Work highlights

  • Advised Audi in connection with data protection issues related to new driving technologies.
  • Assisted ByteDance (TikTok) with data protection matters.

CMS Reich-Rohrwig Hainz Rechtsanwälte GmbH

CMS Reich-Rohrwig Hainz Rechtsanwälte GmbH leverages its international presence to advise major clients across a range of sectors, including retail, automotive and media, on data protection matters both within Austria and in cross-border contexts. Practice head Johannes Juranek brings ‘great knowledge’ of GDPR compliance to bear and also represents clients before the Austrian courts, while Klaus Pateter, who joined the firm as partner in January 2023, specialises in assisting technology companies with data matters.

Practice head(s):

Johannes Juranek

Other key lawyers:

Klaus Pateter; Christina Maria Schwaiger


‘We highly value Johannes Juranek’s great knowledge in the field of data privacy & data protection.’

Key clients


St Anna Kinderspital

Universal Edition AG

Reactive Reality





Work highlights

  • Advised Novid20 in its management buy-out and subsequent pivot to a product and venture builder business, which required advice on complex digital products, IT, data protection and product compliance law.

E+H Rechtsanwälte GmbH

Compliance advice, data transfers linked to transactions and data privacy litigation all fall under the remit of E+H Rechtsanwälte GmbH‘s data protection team, which acts for household names in the automotive and IT sectors, among others. Leading the team is Andreas Zellhofer, who specialises in matters covering aspects of data protection, IT and IP law, with further expertise in unfair competition issues. Helmut Liebel ‘brings a unique technical understanding’ of data protection to the practice, and also advises on IP and IT matters.

Practice head(s):

Andreas Zellhofer

Other key lawyers:

Helmut Liebel; Florian Sagmeister


‘We have a long and regular history of collaboration and cooperation, which allows us to facilitate transactions in the CEE Region with seamless benefits for our clients.’

‘For data protection matters, Helmut Liebel is our number one contact, with exceptional knowledge of the IT industry. Having studied IT, Helmut brings a unique technical understanding to his legal work that is unmatched in Austria. His attention to detail is invaluable.’

‘E+H and its team members are an excellent partner for all legal matters. The team is available 24/7, urgent issues are dealt immediately and there are no wishes that remain unfulfilled. The coordination between internal departments also leaves nothing to be desired.’

‘Highly professional, competent, respectful and professional approach.’

Key clients








Stark Group

Work highlights

  • Advised Microsoft on the lawful use of Office 365 cloud computing services by Austrian business customers.
  • Assisted Toyota with the introduction of new smart and connected services for vehicles.
  • Advised Stark Group on the acquisition of Schilowsky as well as Dach & Wand.

KWR Karasek Wietrzyk Rechtsanwälte GmbH

KWR Karasek Wietrzyk Rechtsanwälte GmbH strengthened its data protection practice with the December 2022 arrival of Beatrice Blümel from the Austrian data protection authority, who heads the firm’s new technology and digitalisation group and assists clients in the event of data breaches. The team advises on trade secrets and e-privacy matters, handling ongoing IT projects and GDPR compliance. The team is jointly led by Anna Mertinz, who has extensive experience at the intersection of data protection and employment law, and Barbara Kuchar, who represents clients in the wake of data breaches and is also noted for her work on trade secrets.

Practice head(s):

Anna Mertinz; Barbara Kuchar

Other key lawyers:

Beatrice Blümel


‘For us, KWR’s network to central and eastern Europe is very important. KWR was able to support us quickly with issues in other countries by establishing contact with partner law firms or clarifying questions for us via these law firms.’

‘Anna Mertinz is easy and pleasant to work with. She makes time even on days with busy schedules and is always professional and friendly.’

‘Anna Mertinz has remarkable professional experience in data protection and it is always a pleasure to work with her.’

Key clients

Austrian Limited E-Commerce GmbH



LOS 22 Wien

Ing. Armin Weinrath

DIALOG Bildungs- und Beratungsinstitut GmbH

myneva Austria GmbH

engcon Austria GmbH

Coca-Cola HBC Austria GmbH


Mister Spex AG

Nemo Healthcare BV

System 7 group

International Board of Lactation Consultant Examiners (IBLCE)

Rohde & Schwarz Österreich GesmbH

MAHLE Filtersysteme Austria GmbH


Familie & Beruf Management GmbH

Diversity Think Tank Consulting GmbH

Arbeitswelten Consulting

Luther Rechtsanwaltsgesellschaft mbH

De’Longhi Kenwood GmbH

Edizon Innovation GmbH

Ivellio-Vellin IT Services

Willis Towers Watson Austria GmbH

Work highlights

  • Advised the Ryanair Group, particularly Lauda Europe, Malta Air and Ryanair DAC on airline-specific data protection questions.
  • Advised Agrana on whether its head of legal was subject to full or only partial obligations under GDPR.
  • Assisted Coca-Cola Hellenic on the transfer of data to third countries and the allocation of roles within of the group.

SAXINGER Rechtsanwalts GmbH

SAXINGER Rechtsanwalts GmbH‘s team of ‘highly skilled’ data protection lawyers acts for clients seeking to undertake data transfers and ensure compliance with GDPR, while continuing to occupy a strong niche in advising public bodies on data protection matters. 2023 saw changes to the practice group’s leadership, with former co-head Philipp Reinisch moving to Fieldfisher Rechtsanwälte GmbH & Co KG‘s new Vienna office in July 2023, and with data and IT security specialist Philipp Leitner stepping into the breach. Co-head Michael Pachinger utilises his ‘deep legal knowledge’ to support clients in data privacy matters and is also well versed in matters pertaining to IT, telecoms and e-commerce law.

Practice head(s):

Michael Pachinger; Philipp Leitner


‘One key strength of SCWP Schindhelm is its highly skilled and diverse team of legal experts. This diversity enables to bring fresh perspectives and creative, interdisciplinary solutions to client projects.’

‘What sets Michael Pachinger apart from competitors is not only his deep legal knowledge, but also his commitment to delivering outstanding results for his clients.’

‘The extremely competent advice and updates on decisions on data protection are what makes working with SCWP so special. Even in connection to related issues, possible impacts on all facets of the company were always pointed out to us.’

‘Working with Michael Pachinger is characterised by his suggestions and implementation tips. Matters were dealt with in such a way as to enable a feasible outcome. His extremely constructive and friendly manner supported his advice immensely.’

‘The team reaches a high level, they offer very useful help in negotiations as well as expert witnesses.’

‘Michael Pachinger is a leading expert in questions of data protection. He is straight to the point and responds quickly.’

Key clients

Resch&Frisch Holding GmbH

MatchMaker Sports GmbH

Peneder Holding GmbH

Conrad Electronic


Ulla Popken GmbH & Co.KG.

Work highlights

  • Won a tender to advise the Austrian government on ongoing initiatives for innovation in the digital, IT and data protection sectors.
  • Advised a central Asian tech company on the data protection permissibility of its collaboration platform.

Taylor Wessing enwc Rechtsanwälte GmbH

Taylor Wessing enwc Rechtsanwälte GmbH‘s clients receive ‘top-notch advice’ across the spectrum of data protection and privacy matters with the firm advising on GDPR compliance and assisting with ongoing monitoring and development of clients’ data handling structures. ‘Seasoned practitioner’ and team head Andreas Schütz advises his roster of clients from the IT, telecoms and food sectors on complying with data protection regulations and handling data breaches, while Christopher Bakier focuses on data protection provisions tied to IT projects, cloud computing and the healthcare sector, among others.

Practice head(s):

Andreas Schütz

Other key lawyers:

Christopher Bakier; Peter Lohberger


‘The data protection team’s instrumental role in ensuring compliance with data protection regulations, coupled with their top-notch advice, has been key to our successful venture into e-commerce.’

‘Andreas Schütz is a seasoned data protection practitioner, always going the extra mile.’

Key clients

„Dach und Wand“ Handels GmbH

Agrana Beteiligungs-Aktiengesellschaft

ALSO Austria GmbH

Angelini Group

AXA France IARD Societe Anonyme

Broken Rules Interactive Media GmbH

Da Vinci Lab OG

Daibau doo

Die Menu-Manufaktur GmbH

Easy Park

EGR Vertriebs- und Handelsges.mbH

Elektra Bregenz AG

European Forum Alpbach

Functional Software GmbH

Great Lengths Haarvertriebs GmbH

GroupM OG

Haberkorn GmbH

Haberkorn Holding AG

Hiscox Insurance Company Ltd

Immobilien Deutinger GmbH

Lafarge Perlmooser AG

Lafarge Perlmooser GmbH

Lafarge Zementwerke GmbH

Nestlé Österreich GmbH

Nespresso Österreich GmbH & Co OHG

NEW WORK AUSTRIA XING kununu Prescreen GmbH

Nationale Anti-Doping Agentur Austria GmbH (NADA)

Norske Skog Industrier ASA

Österreichische Apotheker-Verlagsges.m.b.H.

Perlmooser Beton GmbH

Pernod Ricard Austria GmbH

Pirelli Österreich GmbH

Ricoh Austria GmbH

Ricoh Europe PLC

Salonmeister GmbH (Treatwell)

Shiseido Group

SHOW FACTORY Entertainment GmbH

Tyrol Equity AG

Urban Massage Limited

Valentino S.p.A.

Volkshilfe Wien Gemeinnützige Betriebs-GmbH

Vorwerk & Co KG

Workiva Inc.


Work highlights

  • Represented the National Anti-Doping Agency Austria in a significant pan-European case before the ECJ, addressing crucial issues in sports and data protection.
  • Advised Nespresso Österreich GmbH & Co OHG on the implementation of data protection requirements.
  • Advised HISCOX on data protection incidents.

DLA Piper Weiss-Tessbach Rechtsanwälte GmbH

In addition to supporting clients with the implementation of GDPR measures, DLA Piper Weiss-Tessbach Rechtsanwälte GmbH also assists them in the wake of cyberattacks, actions before the Austrian data protection authority and in matters concerning sensitive data, including medical records. Practice head Sabine Fehringer is an experienced IT specialist and also handles data aspects of M&A transactions, while Stefan Panic provides assistance with telecoms law alongside data protection matters.

Practice head(s):

Sabine Fehringer

Other key lawyers:

Stefan Panic

Key clients

Loro Piana S.p.A

Work highlights

  • Advised Loro Piana S.p.A on data protection matters relating to online sales.

Eversheds Sutherland Rechtsanwälte GmbH

Eversheds Sutherland Rechtsanwälte GmbH has notable ‘depth of competence’ in the data protection arena, assisting clients with matters arising under Austrian and EU law, including providing support on GDPR compliance. Georg Röhsner leads the team, providing ‘invaluable’ advice on cybersecurity and all aspects of broadcasting law. Manuel Boka acts for clients at the intersection of new technology and data protection issues, with a particular knowledge of the IT and healthcare sectors. ‘Always quick to provide a direct and practical solution,’ Michael Röhsner advises clients on GDPR matters in addition to assisting with issues concerning the use of cookies and e-commerce.

Practice head(s):

Georg Röhsner

Other key lawyers:

Manuel Boka; Michael Röhsner


‘The depth of competence and the professional knowledge are impressive. The comprehension and speed with which a situation/case is grasped is exemplary.’

‘The people we work with know that there is a room between black and white. The knowledge of that room makes them extremely helpful.’

‘Eversheds Sutherland always provide excellent advice, particularly on GDPR and data protection. They are always up-to-date regarding new legal developments and provide advice centred on our practical business needs. Their advice is always on time, useful and innovative.’

‘Georg Röhsner has been our trusted legal advisor for almost 20 years. His advice is invaluable. We value his experience and his proactive approach, which helps us to find the best possible solutions for our business.’

‘Michael Röhsner’s knowledge and understanding of data protection law and new developments is impressive and very helpful. He is always quick to provide a direct and practical solution tailored to our business needs.’

‘Great team with very useful solution-oriented and advice.’

‘Michael Röhsner has comprehensive knowledge and practical knowledge in the legal field and gives high-quality and accurate advice even in tight timeframes.’

‘Eversheds Sutherland has individuals for every aspect of legal topics.’

Key clients

Momentive AI

Cyrus One LLC

CSS Holdings Limited

Glen Dimplex

T5 Data Centres

Synch Payments DAC


Signify Health


Eaton Corporation

Sun Life Financial of Canada

Arachas Insurance DAC

Turas Mobility Services Limited


SafeTnet Digital

Personal Injuries Assessment Board


The Pensions Authority

Pinewood Health

Goffs Bloodstock

Insolvency Services of Ireland

Competition and Consumer Protection Commission

DXC Technology


UPMC Ireland


Atlantic Technical University

Therapie Clinic

Commission for Regulation of Utilities

e-ShopWorld Ascendia





WAG Assistenzgenossenschaft

Biogena Management Holding GmbH.


ORF Enterprise

Radio Eins Privatradio GmbH

Phoron Group

Österreichische Kinderkrebshilfe

MAKAM Research GmbH

Die Berater UnternehmensberatungsgmbH

WashTec Cleaning Technology GmbH

SIXT Autovermietung

Experian Group


Kering Group

Work highlights

  • Acted for Synch Payments DAC in relation to the development and launch of an interbank mobile payment solution on the Irish market.
  • Advised Dukes Education Group on data protection matters in relation to its acquisition of the Institute of Education.
  • Advised Glen Dimplex on all aspects of the development and launch of an interconnected IoT radiator system globally.


Described as ‘fantastic in every aspect,’ GRAF ISOLA frequently handles data protection matters in conjunction with broader instructions including M&A transactions and competition disputes, advising on data transfers and GDPR implementation. Practice co-head Marija Križanac ‘provides excellent data protection advice’ with deep expertise in GDPR matters and significant experience in data-related litigation. Alongside her, co-founding partner Ferdinand Graf is admitted to the New York State Bar.

Practice head(s):

Marija Križanac; Ferdinand Graf


‘We worked with a client on a ‘bet the company’ matter with GRAF ISOLA. They have clear data protection & tech expertise, and Marija Križanac is very client-centred and responsive.’

‘Marija Križanac clearly knows her stuff. She’s great at understanding a client’s needs & interacting with regulators. She was able to work seamlessly in German & English and was very responsive.’

‘Marija Križanac provides excellent data protection advice in English, she has a can-do attitude, she is very helpful and turns around matters very quickly. I highly recommend her.’

‘Marija Križanac has built a great practice for all relevant data protection matters, including data protection-related litigation. I trust them even with the most complex challenges. The fact that the practice group is female-lead is a cherry on top!’

‘Practice head Marija Križanac is very intelligent, experienced and solution-oriented; she is truly an expert in her field. ‘

‘The practice, led by Marija Križanac, is fantastic in every aspect – fast response time, hands-on approach, creative solutions. Big recommendation.’

‘Marija Križanac is an absolutely brilliant lawyer and my go-to for GDPR matters; I highly recommend her.’

‘I always recommend Marija Križanac. I like her approach to legal problems; it always shows deep understanding of the respective economic backdrop.’

Key clients

LUKOIL International GmbH/LUKOIL Group

VELUX A/S, VELUX Österreich GmbH, VKR Holding A/S

Open Society Foundations


therapie-info PSISYS GmbH

Logwin Group

JobRad GmbH

MEWA Textil-Service GmbH


Leggett&Platt Inc/Schukra Berndorf GmbH

kraftwerk | Agentur für neue Kommunikation GmbH

MyHomeRoast GmbH

AM Baugeräte und Handels GmbH

KOPFWERK Datensysteme Ges.m.b.H.

Ineltro Electronics GmbH

Cortical.io AG


neckermann.at GmbH

MAG machines GmbH

CoPlanner GmbH

Drees & Sommer

Deluxe Corporation



HILL Racingteam, e.V.

Work highlights

  • Advised LUKOIL (Austria) in connection with all aspects of data protection law, including international data transfers and whistleblowing.
  • Assisted cortical.io with all legal aspects, including data protection law, surrounding the roll-out of a new revolutionary SaaS solution in the field of natural language understanding.
  • Represented Deluxe Corporation in proceedings before the Austrian data protection authority, which are part of the “Cookies” campaign undertaken by NOYB.

Herbst Kinsky Rechtsanwalte GmbH

Bringing together ‘in-depth know-how with broad experience,’ Herbst Kinsky Rechtsanwalte GmbH assists clients in ensuring they are GDPR-compliant, while also representing them before the Austrian data protection authority and national courts. The team additionally handles the data protection aspects of M&A deals and due diligence processes. The ‘outstanding’ Sonja Hebenstreit spearheads the firm’s data protection work with particular expertise in the life sciences sector, handling the spectrum of data protection matters in addition to licensing and unfair competition work.

Practice head(s):

Sonja Hebenstreit


‘We enjoy working with Herbst Kinsky a lot – they combine in-depth know-how with broad experience, and their advice is straight to the point and pragmatic. Very experienced people with a lot of know-how.’

‘The outstanding Sonja Hebenstreit and her excellent team always provide great advice. They understand the needs of the client and support us in a very precise but pragmatic way. They are proactive and reliable, and also a good sparring partner when discussing new solutions.’

‘The team is very human and explains things straightforwardly.’

‘They always make time to explain things in detail. They are super informed about every aspect that is going on.’

‘Their ability to navigate complex legal issues and provide clear, insightful guidance has been invaluable to us.’

‘The team has a quick grasp and prepares the respective topic in a practical way.’

‘Sonja Hebenstreit is clear in her language and does not get bogged down in legal quibbles that are irrelevant in practice.’

Key clients

Probando GmbH

Boritea GmbH

Cirse Society

Next Research GmbH



Timebite Solutions GmbH

Carployee GmbH

invIOs/Apeiron Group

VR Motion Learning GmbH

Work highlights

  • Advised Probando on commercial and data protection matters, most recently regarding its new service, Probando Pay.
  • Advised CIRSE Society and Next Research Group regarding GDPR compliance and the establishment and negotiation of respective contracts and documents, with a particular focus on clinical research.
  • Acted for FIMA/FITINN Group regarding GDPR compliance and represented the group companies in several proceedings before the Austrian data protection authority.

Jank Weiler Operenyi

Jank Weiler Operenyi leverages its position as part of Deloitte’s international network to service cross-border data protection matters, advising a broad range of sectors, including IT, healthcare/life sciences and banking, on GDPR implementation and other data handling procedures. The ‘very reliable’ Sascha Jung leads the team, covering data privacy, IP/IT and licensing matters.

Practice head(s):

Sascha Jung

Other key lawyers:

Christian Kern


‘Good co-operation and innovative solutions.’

‘Christian Kern is very reliable, solution-oriented and always makes good suggestions.’

‘Very flexible, well focused and pragmatic approach.’

‘Deep knowledge of data protection.’

Key clients


AXA Partners

Groupe Louis Delhaize



IK Partners, GIC, Keensight Capital and Parquest Capital


D’Ieteren Group


Mayoly Spindler

Work highlights

  • Advised BUWOG Holding AG on its international data flows to the USA and the integration of new IT services.
  • Assisted Astara Mobility Austria GmbH with the implementation of GDPR across its Austrian operations.
  • Advised ISTA Austria in all HR-related GDPR matters.

KPMG Law - Buchberger Ettmayer Rechtsanwälte GmbH

KPMG Law - Buchberger Ettmayer Rechtsanwälte GmbH acts for clients seeking to ensure their data protection processes are in line with the latest regulations, providing GDPR compliance advice and also assisting with IT matters with potential data exposures, including cloud computing and licensing deals. Karin Bruchbacher continues to lead the group, having been promoted to partner in January 2023, acting for both state-owned and private bodies in relation to the gamut of data protection matters. Hannah Kercz focuses on data protection litigation.

Practice head(s):

Karin Bruchbacher

Other key lawyers:

Hannah Kercz


‘The collaboration in the field of data privacy and data protection is excellent. Our organisation is very exposed in this area, so it is of the utmost importance for us that we can guarantee that best practices are applied without exception. With KPMG Law we have the perfect set-up.’

‘KPMG law and in particular Karin Bruchbacher has an exceptional expertise in this field.’

‘KPMG Law’s data protection practice understands how to make projects work and always provides us with fitting solutions. The possibility to combine extensive legal knowledge with excellent IT/technical knowledge/skills is unique.’

Key clients

Microsoft Österreich GmbH

Salzburg AG



Barracuda Holding GmbH/CTS Eventim Austria GmbH

PEPCO Poland Sp. z o. o./PEPCO Austria GmbH

Austrian Reporting Services GmbH

Finmatics GmbH

Ycy GmbH


Work highlights

  • Advised Microsoft Österreich GmbH on the roll-out of its “Office 365” cloud computing services to numerous Austrian customers.
  • Advised Salzburg AG on a major project involving complex data protection and privacy questions.
  • Acted for the Verein für Konsumenteninformation in relation to data protection-related issues regarding a digitalisation project.