Data protection

AI systems, automated processes, cloud‑based working environments and, increasingly, AI agents across the entire value chain have long since evolved from competitive advantages into operational necessities. Efficiency, scalability and speed are crucial – while demands on operational transparency (including during workforce reductions), governance, employee skill sets, IT security and legally robust employment frameworks continue to increase. The introduction of new AI solutions or digital work processes has a direct impact on organizational structures, leadership, HR strategies and cooperation with works councils.

At the same time, the regulatory landscape is evolving dynamically: the General Data Protection Regulation (GDPR) and the EU AI Act create continuously expanding liability, compliance and documentation obligations that must be implemented reliably in practice.

As a market‑leading employment law firm for whom AI, cybersecurity and digital transformation are part of everyday practice, we support companies with in‑depth expertise in adapting their business models and in integrating technological innovation in a legally compliant, transparent and practical manner. With our own AI developments, specialized focus groups and strong technological insight, we combine legal excellence with technical expertise – enabling innovation, reducing risk and fostering trust.

Our Advisory Focus:

Introduction and Governance of AI Systems

• Support when adapting business models
• Designing and implementing AI policies, AI governance structures and responsible deployment models (including HR analytics, recruiting AI and decisionsupport systems)
• Implementing employmentlaw compliance under the EU AI Act, sectorspecific standards and internal corporate frameworks
• Negotiating with works councils (both internal and external to conciliation boards) on AI systems, algorithmic tools and automated processes, as well as workforce adjustments resulting from the use of AI (upskilling and downsizing)
• Drafting works agreements on AI systems, monitoring tools or digital communication, and workforce adjustments resulting from the use of AI (upskilling and downsizing)

Cybersecurity & Digital Infrastructure

• Employmentlaw support for building and expanding informationsecurity architectures
• Assistance in implementing IT security standards, SOC/SIEM solutions and securityrelevant organizational structures, including in accordance with NIS2 standards
• Advising on labor law incidentresponse processes and strategic escalation paths in the event of cyberattacks
• Legal and compliance advice relating to cloud systems, DevOps processes and digital collaboration

Digital Transformation & Modern IT Workplaces

• Supporting major digitalization and automation projects (“workforce transformation”)
• Designing, implementing and enforcing IT usage policies and related guidelines, including socialmedia and collaboration policies
• Structuring and negotiating ITrelated service and works agreements (e.g., for HR software or business-critical IT applications), including conducting conciliation committee proceedings

International Structures & Complex Data Ecosystems

• Advising on globally integrated AI and IT systems within corporate group structures
• Advising on and managing technical data and information requests from foreign authorities, courts or arbitration tribunals
• Advising on IT/AIrelated matters in the context of M&A transactions, outsourcing, restructurings and business transfers

International Structures & Complex Data Ecosystems

• Clarifying issues relating to personality rights as well as dataprotection and telecommunications law
• Providing guidance on working with internal or external data protection officers
• Building an efficient dataprivacy organization
• Conducting Data Protection Impact Assessments (DPIAs)
• Advising on dataprotection issues in connection with M&A, outsourcing, business transfers and international data flows
• Dataprotection advice relating to cloud systems and internal investigations