Tim Wybitul, a leading data privacy lawyer, advises German and global companies on complex data protection issues. He represents clients in data privacy litigation, internal investigations, and other data-related disputes.

Mr. Wybitul advises clients on complex, high-stakes data protection and privacy matters, including: 

  • EU General Data Protection Regulation (GDPR) related litigation (including civil, administrative, and administrative offence matters)
  • Data protection management processes and structures (reviewing and enhancing) 
  • Negotiations with data protection authorities 
  • Advice regarding GDPR, EU Member State laws, in parallel with US federal and state laws, and other global jurisdictions

He is regularly mentioned as well as ranked in leading legal publications like JUVE and is listed in the Legal 500 Hall of Fame and as a Legal All Star by WirtschaftsWoche.

He serves as Chair of Latham's Data Privacy Committee. Latham’s GDPR civil damages table demonstrates Mr. Wybitul’s creative solutions-oriented approach within a dynamic regulatory environment, for which he has developed an excellent reputation in the market.

Mr. Wybitul combines an affinity for information technology with specific training to provide clients with practical, business-oriented strategies. He is a Certified Information Privacy Professional (CIPP-E) and a certified specialist lawyer for German employment law. He has provided expert testimonies to the German Parliament (Deutscher Bundestag) regarding the development of German data protection laws.

Mr. Wybitul co-edits the German-language Data Privacy Law Journal (Zeitschrift für Datenschutz) published by Verlag C.H. Beck. He regularly publishes articles on data protection topics, both in leading German and English legal publications. His articles are cited by the European Court of Justice, German Federal Supreme Court, Federal Labor Court, and courts of appeal. He lectures on data protection at the Goethe University in Frankfurt.

Mr. Wybitul’s experience includes advising:

  • Deutsche Wohnen in the successful dismissal of a multimillion Euro GDPR fine proceeding
  • Daimler in landmark data privacy litigation in the German Superior Labor Court
  • Leading financial services provider in mass civil litigation regarding GDPR damage claims and injunction proceedings
  • A social media network in one of the first German GDPR fine proceedings
  • A leading German car manufacturer on GDPR implementation and litigation
  • IT Provider regarding GDPR damage claims and injunction proceedings in connection with data loss
  • Allianz on complex aspects of data protection law, including negotiations with data protection authorities
  • Birkenstock Group on complex data protection matters, and in court proceedings up to the German Superior Labor Court*

*Matter handled prior to joining Latham

Bar Qualification

  • Rechtsanwalt (Germany)


  • Second German State Exam, Regional Court, Frankfurt am Main
  • First German State Exam, Goethe University, Frankfurt

Languages Spoken

  • German
  • English