Tim Wybitul, a leading data privacy lawyer, advises German and global companies on complex data protection issues. He represents clients in data privacy litigation, internal investigations, and other data-related disputes.

Mr. Wybitul advises clients on complex, high-stakes data protection and privacy matters, including: 

  • Data protection litigation, e.g. proceedings before courts concerning the application and implementation of the EU General Data Protection Regulation (GDPR) and other data protection laws 
  • Successful defense against fines for alleged violations of the GDPR and other data protection regulations, including trial defense in the European Court of Justice (CJEU)
  • Respond to cybersecurity incidents, globally or limited to individual jurisdictions or areas
  • Communication and negotiations with data protection authorities, including settlements
  • Helping companies to resolve complex data privacy and cyber issues and to develop practical solutions

He is regularly mentioned as well as ranked in leading legal publications like JUVE and is listed in the Legal 500 Hall of Fame and as a Legal All Star by WirtschaftsWoche.

He serves as Chair of Latham's Data Privacy Committee. Latham’s GDPR civil damages table demonstrates Mr. Wybitul’s creative solutions-oriented approach within a dynamic regulatory environment, for which he has developed an excellent reputation in the market.

Mr. Wybitul combines an affinity for information technology with specific training to provide clients with practical, business-oriented strategies. He is a Certified Information Privacy Professional (CIPP-E) and a certified specialist lawyer for German employment law. He has provided expert testimonies to the German Parliament (Deutscher Bundestag) regarding the development of German data protection laws.

Mr. Wybitul co-edits the German-language Data Privacy Law Journal (Zeitschrift für Datenschutz) published by Verlag C.H. Beck. He regularly publishes articles on data protection topics, both in leading German and English legal publications. His articles are cited by the European Court of Justice, German Federal Supreme Court, Federal Administrational Court, Federal Labor Court, and courts of appeal. He lectures on data protection at the Goethe University in Frankfurt.

Mr. Wybitul’s experience includes advising:

  • Deutsche Wohnen in the successful dismissal of a multimillion Euro GDPR fine before the Berlin Regional Court, defense in trial before the CJEU
  • Daimler in landmark data privacy litigation in the German Superior Labor Court
  • Leading financial services provider in mass civil litigation regarding GDPR damage claims and injunction proceedings
  • A social media network in one of the first German GDPR fine proceedings
  • A leading German car manufacturer on GDPR implementation and litigation
  • IT Provider regarding GDPR damage claims and injunction proceedings in connection with data loss
  • Allianz on complex aspects of data protection law, including negotiations with data protection authorities
  • Birkenstock Group on complex data protection matters, and in court proceedings up to the German Superior Labor Court*

*Matter handled prior to joining Latham

Bar Qualification

  • Rechtsanwalt (Germany)


  • Second German State Exam, Regional Court, Frankfurt am Main
  • First German State Exam, Goethe University, Frankfurt

Languages Spoken

  • German
  • English