Tim Wybitul

  • Partner
  • Etim.wybitul@lw.com
  • Die Welle
  • Reuterweg 20
  • 60323 Frankfurt am Main
  • Germany
  • T +49.69.6062.6560


Tim Wybitul, a leading data privacy lawyer, advises German and global companies on complex data protection issues. He represents clients in data privacy litigation, internal investigations, and other data-related disputes.

Mr. Wybitul advises clients on complex, high-stakes data protection and privacy matters, including: 

  • EU General Data Protection Regulation (GDPR) related litigation (including civil, administrative, and administrative offence matters)
  • Data protection management processes and structures (reviewing and enhancing) 
  • Negotiations with data protection authorities 
  • Advice regarding GDPR, EU Member State laws, in parallel with US federal and state laws, and other global jurisdictions

He is regularly ranked in leading legal publications, including Chambers, JUVE, Who’s Who Legal, and is ranked among the WirtschaftsWoche Legal Allstars.

Latham’s GDPR civil damages table is only one example of Mr. Wybitul’s creative solutions-oriented approach within a dynamic regulatory environment, for which he has developed an excellent reputation in the market.

Mr. Wybitul combines an affinity for information technology with specific training to provide clients with practical, business-oriented strategies. He is a Certified Information Privacy Professional (CIPP-E) and a certified specialist lawyer for German employment law. He has provided expert testimonies to the German Parliament (Deutscher Bundestag) regarding the development of German data protection laws.

Mr. Wybitul co-edits the German-language Data Privacy Law Journal (Zeitschrift für Datenschutz) published by Verlag C.H. Beck. He regularly publishes articles on data protection topics, both in leading German and English legal publications. His articles are cited by the German Federal Supreme Court, Federal Labor Court, and courts of appeal. He lectures on data protection at the Goethe University in Frankfurt.


Mr. Wybitul’s experience includes advising:

  • Deutsche Wohnen in the successful dismissal of a multimillion Euro GDPR fine proceeding
  • Daimler in landmark data privacy litigation in the German Superior Labor Court
  • Leading financial services provider in mass civil litigation regarding GDPR damage claims and injunction proceedings
  • A social media network in one of the first German GDPR fine proceedings
  • A leading German car manufacturer on GDPR implementation and litigation
  • IT Provider regarding GDPR damage claims and injunction proceedings in connection with data loss
  • Allianz on complex aspects of data protection law, including negotiations with data protection authorities
  • Birkenstock Group on complex data protection matters, and in court proceedings up to the German Superior Labor Court*

*Matter handled prior to joining Latham

Thought Leadership

  • Austrian Court Submits Questions on GDPR Civil Damages Claims to CJEU -  June 15, 2021
  • Privacy Group Launches Cookie Complaints Against EU Website Operators Based on Its Interpretation of Cookie Rules -  June 04, 2021
  • German Court: CJEU Must Clarify Whether GDPR Provides Materiality Threshold  -  February 24, 2021
  • GDPR Violations in Germany: Civil Damages Actions on the Rise -  December 18, 2020
  • CNIL Issues Fines Totaling €135 Million in Landmark ePrivacy Directive Cases -  December 17, 2020
  • The Commission’s Draft Updated Standard Contractual Clauses — A Close Look -  December 07, 2020
  • The EDPB’s Draft Data Transfer Guidance Following Schrems II – A Close Look -  November 19, 2020
  • Das Schrems II-Urteil des EuGH: Was müssen Unternehmen bei internationalen Datentransfers ändern? -  July 24, 2020
  • GDPR and COVID-19: What Companies Need to Know About Data Privacy  -  March 19, 2020
  • The Pervasive Threat of Business Email Compromise Fraud — and How to Prevent It -  February 20, 2020
  • RuNet Law Comes Into Force: What Is Next -  November 27, 2019
  • German Data Protection Authorities Adopt New GDPR Fine Model -  October 02, 2019
  • How Are European Supervisory Authorities Exercising Cooperation and Consistency In Practice? -  September 02, 2019
  • High GDPR Fines: German Data Protection Authority Joins the Club -  August 28, 2019
  • Datenschutzklagen als Geschäftsmodell kommerzieller Anbieter – Was müssen Unternehmen jetzt beachten -  August 14, 2019
  • 5 Ways for Companies to Limit GDPR Penalties  -  January 25, 2019
  • German GDPR Fine Proceedings Conclude Favorably for Defending Company -  December 26, 2018

“He is a great data privacy lawyer who knows absolutely everything about the topic and is very well connected, which is very important from a regulatory perspective.”

“Tim Wybitul is just great.”

Chambers Europe Germany 2021
Bar Qualification
  • Rechtsanwalt (Germany)
  • Second German State Exam, Regional Court, Frankfurt am Main, 2002
  • First German State Exam, Goethe University, Frankfurt, 1998
  • Entertainment, Sports & Media
  • Financial Institutions
  • Technology
  • Automotive
  • German
  • English
  • Communications Law
  • Litigation & Trial Practice
  • Data Privacy & Security
  • Connectivity, Privacy & Information
  • White Collar Defense & Investigations
  • Executive Compensation, Employment & Benefits
  • False Claims Act