Practice area
IT & Data Protection
We advise businesses on software contracts, cloud migrations and data protection compliance for ongoing operations and digital business models.
Working session
Two lawyers reviewing IT contract drafts on screen
Focused, factual, daylight
Two lawyers reviewing IT contract drafts on screen
Focused, factual, daylight
Legal questions concerning data and software systems touch the core of modern commercial decisions and require clear arrangements that work day to day.
We support IT leads, corporate management and data protection officers in mid-sized businesses. Typical matters involve negotiating complex software development and licensing agreements, restructuring digital service platforms or responding to enquiries from supervisory authorities.
Where IT projects touch workplace data issues or corporate transactions, we work in-house with our employment and corporate colleagues. This eliminates coordination overhead and yields dependable solutions for the entire project.
Where IT projects touch workplace data issues or corporate transactions, we work in-house with our employment and corporate colleagues. This eliminates coordination overhead and yields dependable solutions for the entire project.
Documents
System architecture plan and contract draft on table
Close-up, paper, factual
System architecture plan and contract draft on table
Close-up, paper, factual
What we advise on
01
IT contracts & SaaS
We draft and negotiate agreements for software development, licensing arrangements, cloud setups and service level agreements.
02
Data privacy compliance
We assist with records of processing activities, retention concepts, internal workplace policies and data processing agreements.
03
Digital business models
We review platforms, APIs and digital services against regulatory requirements, covering terms of use and data rights.
04
Regulators and audits
We advise on formal requests from supervisory authorities, conduct impact assessments and help prepare internal compliance reviews.
05
Data transfers & sourcing
We structure cross-border data transfer mechanisms, standard contractual clauses and complex IT outsourcing transactions.
06
Security incidents
In the event of data security incidents, we provide legal support and guide businesses through regulatory notification duties.
How a matter runs
Phase 01
Assessment
We review technical setups, current contracts and underlying data flows. This clarifies key regulatory interfaces and enables our team to agree priorities for the project ahead.
Outcomes
Review memo on data flows & contracts
Overview of identified risk areas
Recommendations on priorities & steps
Phase 02
Drafting
Building on the review, we prepare contracts, company guidelines and consents. When negotiating with technology vendors or service providers, we represent your interests and refine contract clauses.
Outcomes
Agreed draft contracts and schedules
Documented internal policies
Data processing agreement templates
Phase 03
Rollout
We guide the rollout of policies across operations, assist with documentation and define which recurring review duties and statutory deadlines require tracking.
Outcomes
Final contract documentation for signing
Documented deletion & rollout concept
Schedule of recurring review duties
What we take on and what we don’t
✓ We take on
Drafting and negotiating IT agreements and assessing data protection requirements
✗ We don’t take on
Technical network administration, penetration testing or code development
✓ We take on
Legal advisory for regulatory enquiries and personal data incidents
✗ We don’t take on
Appointment as formal external Data Protection Officer
✓ We take on
Coordination with colleagues from employment and corporate law in-house
✗ We don’t take on
Consumer claims advice or defending high-volume private warning letters
From practice
E-commerce · Illustrative
4
Weeks to platform launch
Review of data flows and revision of terms with vendors and end customers ahead of an online shop launch.
Healthcare · Illustrative
18
Vendor contracts aligned
Structuring and data protection review of multiple processing agreements for a hospital network.
Fintech · Illustrative
6
Months cloud migration
Legal support for transferring core banking software applications to an international cloud infrastructure provider.
Your team in this practice area
Partner · Berlin
Dr. Katharina Hallström
Corporate & M&A · IT & Data Protection
Associate · Berlin
Felix Wenzel
IT & Data Protection · Employment Law
No results.
Articles from this practice area
Vacancies in this practice area
Next step
Tell us about
your plans.
your plans.
In a first conversation we clarify what is at stake, who at the firm is responsible and how the matter can be scoped sensibly.
For whom
For companies, shareholders and management teams who need a question answered or a decision secured.
Typical trigger
A transaction is coming up, a contract is being renegotiated or a dispute is taking shape. The earlier we are involved, the more room there is to act.