Tim Wybitul, a leading data, cyber, and tech lawyer, advises German and global companies on complex data protection, artificial intelligence (AI), and other digital issues. He represents clients in data privacy litigation, negotiations, and lawsuits with EU regulators and other tech and data-related disputes.

Tim advises clients on complex, high-stakes data, AI, cyber, and privacy matters, including:

  • Data advice and litigation, e.g. in proceedings before courts, concerning the application and implementation of the EU General Data Protection Regulation (GDPR) the EU AI Act (AIA), and other EU Digital Acts and data protection laws
  • Successful defense against fines for alleged violations of the GDPR and other data protection regulations, including trial defense in the European Court of Justice (CJEU)
  • Respond to cybersecurity incidents, globally or limited to individual jurisdictions or areas
  • Communication and negotiations with data protection authorities, including settlements
  • Helping companies to resolve complex data privacy and cyber issues and to develop practical solutions

He is regularly mentioned as well as ranked in leading legal publications and is listed in The Legal 500 Hall of Fame and as a Legal All Star by WirtschaftsWoche.

He serves as Chair of Latham's Data Privacy Committee. Latham’s GDPR civil damages table demonstrates Tim's creative solutions-oriented approach within a dynamic regulatory environment, for which he has developed an excellent reputation in the market.

Tim combines an affinity for information technology with specific training to provide clients with practical, business-oriented strategies. He is a Certified Information Privacy Professional (CIPP-E) and a certified specialist lawyer for German employment law. He has provided expert testimonies to the German Parliament (Deutscher Bundestag) regarding the development of German data protection laws.

Tim co-edits the German-language Data Privacy Law Journal (Zeitschrift für Datenschutz) published by Verlag C.H. Beck. He regularly publishes articles on data protection topics, both in leading German and English legal publications. His articles are cited by the European Court of Justice, German Federal Supreme Court, Federal Administrational Court, Federal Labor Court, and courts of appeal. He lectures on data protection at the Goethe University in Frankfurt.

Tim’s experience includes advising:

  • Deutsche Wohnen, defense in trial before the CJEU in a landmark case on a multimillion Euro GDPR fine, succeeded in the CJEU rejecting the strict corporate liability concept proclaimed by data protection authorities
  • Saturn MediaMarkt in the successful dismissal of GDPR civil claims on immaterial damages due to the disclosure of personal data
  • Daimler in landmark data privacy litigation in the German Superior Labor Court on data subjects’ access rights
  • A crypto currency provider on GDPR and AI requirements including coordinating multi-jurisdictional regulatory proceedings and negotiations with lead supervisory authority
  • Volkswagen AG in landmark privacy litigation in the German Superior Labor Court on the permissibility of employee monitoring
  • A Leading financial services provider in mass civil litigation regarding GDPR immaterial damage claims and injunction proceedings
  • Volkswagen AG on a settlement in German GDPR fine proceedings on data collection and data subjects’ rights
  • An IT Provider regarding GDPR damage claims and injunction proceedings in connection with data loss
  • Allianz on complex aspects of data protection law, including negotiations with data protection authorities

Bar Qualification

  • Rechtsanwalt (Germany)

Education

  • Second German State Exam, Regional Court, Frankfurt am Main
  • First German State Exam, Goethe University, Frankfurt

Languages Spoken

  • German
  • English