Bird & Bird LLP offers top-notch advice on data protection matters, not least due to its cross-border capacities, more than 20 years of experience in data and IT issues as well as the expertise and market recognition of its team, whereby the successful German data protection practice attracts DAX30 companies as well as leading international clients. Fabian Niemann leads the team and is known for his commitment to regulatory issues pertaining to social media, IT security and data protection. Lennart Schüßler regularly advises on compliance matters related to GDPR implementation while Alexander Duisberg is an expert in cyber security issues and often applies his knowledge for clients in the automotive industry. In Hamburg, Miriam Ballhausen made partner in May 2021. Noticeably, the separate entity Bird & Bird Privacy Solutions offers DPO and legal representation services nationally and internationally; in addition, the team also utilises a range of technical data protection tools (such as Access platform and SCC generator) for the automatic generation of standard contractual clauses related to data transfers.

DLA Piper‘s data protection team is a popular choice for first-class transactional support, the implementation of data protection measures as well as in contentious proceedings before data protection supervisory authorities and against affected individuals and consumer protection associations. The team has in-depth knowledge particularly of the automotive sector, the high-tech industry and at the interface to insurance law, but the team’s consistent exchange with law firms worldwide also broadens its understanding of other adjacent areas, such as the manufacturing industry and the financial services sector. The group around Stefan Engels and Thilo von Bodungen also stands out for their expertise in ransomware attacks, compliance, data protection disputes, AI and data analytics. Jan Pohle advises on cyber security, while Verena Grentzenberg focuses on assisting with data protection matters pertaining to new business models and big data projects.

Latham & Watkins LLP‘s Tim Wybitul is considered the ‘figurehead’ of Germany’s data protection sphere: him and his team particularly stand out for their activity in data privacy disputes, transactions and internal investigations and recently demonstrated their expertise in a series of cutting-edge matters, particularly in relation to data breaches, fine proceedings, damage compensation and information claims. For instance, the group successfully represented Deutsche Wohnen SE before the Berlin Regional Court in proceedings which overturned the to-date highest ever imposed data protection fine in Germany; here, the very active associates Wolf-Tassilo Böhm and Isabelle Brams were also involved.

At full-service offering Noerr, clients can rely on a broad expertise spectrum encompassing advice on the entire range of data protection and adjacent issues as well as representation in court; one of the contributing factors for this offering is the team’s close cooperation particularly with the dispute resolution, regulatory and compliance practices, thereby generating synergies that primarily play out in matters related to data breaches, data protection by design and data protection disputes. In the latter area, the firm established a specialised team in 2021 which specifically acts in administrative, fine and court proceedings. Daniel Rücker, who heads the practice, often acts in high-profile data protection matters and investigations by the supervisory authorities; Joachim Schrey advises on international data transfers relating to cloud services and system implementation for data loss prevention among other matters; Sebastian Dienst has extensive expertise in advising international companies, especially on matters pertaining to data protection governance; and Pascal Schumacher specializes in regulated markets and digital health.

From its five offices in Germany and with an international outreach, Taylor Wessing regularly assists with cutting-edge matters related to big data, machine learning and artificial intelligence, especially in the healthcare, finance and insurance sectors as well as in the automotive industry. The regarded Axel Freiherr von dem Bussche, who heads the technology, media and telecommunications practice as well as the international US Group for Germany, predominantly advises on international transactions, contractual and regulatory issues as well as on the transformation of digital business models and negotiations with supervisory authorities. Paul Voigt on the other hand, does 'a bombastic job' on international data protection projects as well as on e-commerce, IT contract and security law issues. Additionally, Thomas Kahl focuses on data protection incidents, cyber attacks and regulatory data protection procedures. Fritz-Ulli Pieper made partner in January 2021.

CSW Rechtsanwälte Steuerberater Wirtschaftsprüfer‘s Isabell Conrad and her data protection team primarily focus on contractual matters, data transfers abroad (a field that experienced significant growth after the Schrems II judgment), administrative procedures before data protection supervisory authorities and data protection issues related to AI projects and AI applications; here, Jochen Schneider is particularly involved. The firm has further strong expertise in matters pertaining to social security data protection such as electronic patient files for statutory health insurance companies and in the area of order processing. Maria-Urania Dovas joined LANGWIESER RECHTSANWÄLTE Partnerschaft mbB in January 2022.

Luther Rechtsanwaltsgesellschaft mbH‘s data protection advice is primarily characterized by topics such as industry 4.0, big data, internet of things, cloud computing and e-Health, with the team’s expertise on matters related to  the handling and usage of personal data, GDPR as well as data protection compliance being particularly valuable; practice head Wulff-Axel Schmidt and his group also regularly act as external data protection officers. Michael Rath is considered the main contact for the department and Silvia Bauer carries out data protection audits and also advises international and national companies on the design and implementation of their data protection concepts.

SKW Schwarz Rechtsanwälte's data protection practice assists with digital transformation and cloud strategies as well as issues pertaining to the commercial and industrial use of artificial intelligence among others. Due to its close cooperation with other practice groups such as media, publishing and IP, as well as with the sector group automotive, these competencies represent a crucial part of the firm's advice offering, whereby the practice also advises clients on cyber security, data protection impact assessments and risk assessments for the development of new business models. At contentious level, Matthias Orthwein's group recently excelled in representing Schufa in a GDPR court case, with Oliver Hornung and Franziska Ladiges taking the lead. Elisabeth Noltenius made partner in January 2021.

At WilmerHale the representation in data protection disputes takes centre stage, with the group around the renowned Martin Braun being mainly known for its participation in data protection proceedings before the European Data Protection Board, national authorities and the ECJ. In addition to Braun, Brussels-based lawyers Hans-Georg Kamann and Frédéric Louis often take the lead. The practice frequently acts for Facebook which the team recently represented in proceedings concerning user data merging before the German Federal Cartel Office.

In the data protection sphere, Eversheds Sutherland's group around Alexander Niethammer focuses on topics such as data usage, digital process design, digital transformation, cloud computing and EU data protection regulations. Cybersecurity is a further significant topic for the practice that is mainly tackled by its global cybersecurity and data privacy group as well as within the international network of the firm; here the team regularly advises on complex cyber incidents and cross-border data transfers. Lutz Schreiber frequently assists with cloud computing issues and IT disputes.

Heuking Kühn Lüer Wojtek offers a wide range of advice on data protection issues, which, in addition to the implementation of compliance programs, also includes assistance with software launches and data protection matters related to online trading. The team's expertise is further frequently applied in outsourcing projects and transactions. Philip Kempermann and Thomas Jansen jointly head the team.

At Hogan Lovells International LLP, data protection and security advice is handled by a team belonging to the IP, Media and Technology practice led by Burkhart Goebel, Miriam Gundt and Andreas Bothe. Here, multinational data protection projects, cyber attack advice, the representation of companies before data protection authorities and in data protection disputes (especially in damages claims) represent the central pillars of its offering. In addition, as a result of the Covid-19 pandemic, a Munich-based group led by Martin Pfluger has recently been involved in data protection and labor law projects pertaining to information access on vaccinations. The practice also regularly advises on data transactions and data ownership.

Highly regarded in Germany and beyond, Undine von Diemar heads Jones Day's European practice for cybersecurity, data protection and privacy, thereby demonstrating 'deep and up-to-date understanding' of the German and international data protection landscape. This is especially true in relation to the US, where the group has a very strong presence. The practice particularly focuses on data breaches, employee data protection and international compliance projects and frequently benefits from its cooperation with other German offices, such as regularly cooperating with the Düsseldorf compliance team on internal investigations (here, Martin Lotz is very active) as well as with the firm's Munich-based life sciences practice. Data protection advice on transactions is another mainstay.

In recent years, Orrick, Herrington & Sutcliffe LLP has continuously expanded and deepened its combined IT and IP practice, with the team around 'pioneer' and 'data protection guru' Christian Schröder thereby gaining central importance for the firm. The group primarily advises international tech companies and developers on issues relating to internal and external data transfer, internet of things and on GDPR matters, as well as on the data protection-compliant design of products and reactions to cyber security incidents. Its intensive cooperation with the tech-focused transaction practice in Germany as well as with the firm's US-based data protection practice provides the department with further impetus.

White & Case LLP's German data protection team advises on German and European data protection law, cross-border data traffic and cyber security issues. The German group benefits from practice head Detlev Gabel's the great expertise. Facebook and Deutsche Bank are among their key clients.

Morrison Foerster's privacy and data security team led by Hanno Timner is a good address for prestigious German and international clients facing GDPR-related issues; the group's representation of 1&1 in fine proceedings and the subsequent reduction of an imposed multi-million euro fine, which thus created a German GDPR precedent, became known throughout Europe. The practice further regularly assists international clients, with a particular focus on Japan, with data protection issues related to M&A and other transactions. Timner also has many years of experience in data protection matters touching on employment law.

Norton Rose Fulbright's German data protection practice is based in Frankfurt and Munich and cooperates closely with numerous international offices. The close relationship with the firms European and US lawyers creates a particular attraction for global companies in need of advice on international data transfers and cyber breakdowns. Practice head Christoph Ritzer particularly stands out for his expertise in cyber insurance solutions and technology transactions. Natalia Filkina is 'a top notch associate'.

Greenberg Traurig Germany's data protection team is a popular choice not only due to its strong industry expertise, particularly relating to the e-mobility and real estate sectors, but also due to its multidisciplinary approach. Practice head Viola Bensinger has considerable experience in data protection matters in the IT and media sphere as well as in litigious proceedings, while Carsten Kociok is considered an expert in the field of fintech as well as financial and IT services among other matters; this further complements the team's expertise in cybersecurity, compliance, data breach and data protection in connection with corporate transactions, restructuring and disputes.

At GSK Stockmann, Jörg Kahler and Katy Ritzmann jointly head the firm’s deeply embedded data protection and IT practices. The team focuses on advising industrial clients as well as the public sector – with both sectors having significantly gained importance for the firm in 2021 – as well as innovative technology start-ups, fintech companies and aviation industry clients. Data protection advice is often rendered in relation to compliance matters, transactions and outsourcing. The team’s forensic activity is also notable.

Oppenhoff's team around Jürgen Hartung and Marc Hilber recently advised on numerous as well as diverse data protection issues: while standard matters such as GDPR and proceedings before the supervisory authorities continue to play an important role, the practice's cross-practice cooperation with the firm's digitization group also attracted new clients and instructions pertaining to internet of things, connected cars and health data. The group's advice offering also includes expertise on cyber security including, among other things, preventive checks through legal tech quick checks.