Tim Wybitul

  • Partner
  • Etim.wybitul@lw.com
  • Die Welle
  • Reuterweg 20
  • 60323 Frankfurt am Main
  • Germany
  • T +49.69.6062.6560


Tim Wybitul, a leading data privacy lawyer, advises German and global companies on complex data protection issues. He represents clients in data privacy litigation, internal investigations, and other data-related disputes.

Mr. Wybitul advises clients on complex, high-stakes data protection and privacy matters, including: 

  • EU General Data Protection Regulation (GDPR) related litigation (including civil, administrative, and administrative offence matters)
  • Data protection management processes and structures (reviewing and enhancing) 
  • Negotiations with data protection authorities 
  • Advice regarding GDPR, EU Member State laws, in parallel with US federal and state laws, and other global jurisdictions

Mr. Wybitul draws on a successful track record to provide clients pragmatic, defensible advice on complex data protection questions in a dynamic regulatory environment. Regularly ranked in leading legal publications, including Chambers and JUVE, he has developed a reputation for his excellent technical knowledge and creative solutions-oriented approach. 

Mr. Wybitul combines an affinity for information technology with specific training to provide clients with practical, business-oriented strategies. He is a Certified Information Privacy Professional (CIPP-E) and a certified specialist lawyer for German employment law. He has provided expert testimonies to the German Parliament (Deutscher Bundestag) regarding the development of German data protection laws.

Mr. Wybitul co-edits the German language Data Privacy Law Journal (Zeitschrift für Datenschutz) published by Verlag C.H. Beck. He regularly publishes articles on data protection topics, both in leading German and English legal publications. His articles are cited by the German Federal Supreme Court, Federal Labor Court, and courts of appeal. He lectures on data protection at the Goethe University in Frankfurt.


Mr. Wybitul’s experience includes advising:

  • Deutsche Wohnen in a multimillion Euro GDPR fine proceeding
  • Daimler in landmark data privacy litigation in the German Superior Labor Court
  • Leading financial services provider in mass civil litigation regarding GDPR damage claims and injunction proceedings
  • A social media network in one of the first German GDPR fine proceedings
  • A leading German car manufacturer on GDPR implementation and litigation
  • IT Provider regarding GDPR damage claims and injunction proceedings in connection with data loss
  • Allianz on complex aspects of data protection law, including negotiations with data protection authorities
  • Birkenstock Group on complex data protection matters, and in court proceedings up to the German Superior Labor Court*

*Matter handled prior to joining Latham

Thought Leadership

  • The EDPB’s Draft Data Transfer Guidance Following Schrems II – A Close Look -  November 19, 2020
  • Practical Considerations for Assessing Data Transfers after Schrems II  -  September 07, 2020
  • Das Schrems II-Urteil des EuGH: Was müssen Unternehmen bei internationalen Datentransfers ändern? -  July 24, 2020
  • GDPR and COVID-19: What Companies Need to Know About Data Privacy  -  March 19, 2020
  • The Pervasive Threat of Business Email Compromise Fraud — and How to Prevent It -  February 20, 2020
  • RuNet Law Comes Into Force: What Is Next -  November 27, 2019
  • German Data Protection Authorities Adopt New GDPR Fine Model -  October 02, 2019
  • How Are European Supervisory Authorities Exercising Cooperation and Consistency In Practice? -  September 02, 2019
  • High GDPR Fines: German Data Protection Authority Joins the Club -  August 28, 2019
  • Datenschutzklagen als Geschäftsmodell kommerzieller Anbieter – Was müssen Unternehmen jetzt beachten -  August 14, 2019
  • 5 Ways for Companies to Limit GDPR Penalties  -  January 25, 2019
  • German GDPR Fine Proceedings Conclude Favorably for Defending Company -  December 26, 2018

“Pragmatic, goal-oriented, gets to the heart of the matter”, “Outstanding in data protection issues”, “Deep understanding, honest and trustworthy”, “Impressive knowledge and skills” 

JUVE 2018-2020
Bar Qualification
  • Rechtsanwalt (Germany)
  • Second German State Exam, Regional Court, Frankfurt am Main, 2002
  • First German State Exam, Goethe University, Frankfurt, 1998
  • Entertainment, Sports & Media
  • Financial Institutions
  • Technology
  • Video Gaming & Esports
  • Automotive
  • German
  • English
  • Communications Law
  • Litigation & Trial Practice
  • Data Privacy & Security
  • White Collar Defense & Investigations
  • Benefits, Compensation & Employment
  • False Claims Act