Data Protection & Cybersecurity
Expertise in all matters related to privacy and data protection law, including cybercrime, data loss, and data management
Experienced data protection lawyers serving CEE
How do you reconcile the free flow of information and the need to be open to the world with the demand to secure your data and protect employee and customer privacy? How does data protection law in Europe help you deal with data breaches and hackers in an ever-changing legal landscape?
We are here to help. We can advise you on handling all types of data protection law and data management issues on a daily basis, from staff member data and patients’ medical records, to restrictions on outsourcing and records retention requirements, through to dealing with data leaks or cyber-attacks.
An efficient way to ensure compliance with data protection regulations and to build customer trust through transparency is to have your IT-products or IT-based services certified through the European Privacy Seal (EuroPriSe). Our admitted legal and technical experts can conduct the necessary evaluation for your certificate.
Key experts
“Excellent expertise in multinational data protection compliance work, and is equally adept at handling security breaches, privacy matters, and local data protection issues.”
– The Legal 500
“Wolf Theiss advises a diverse range of clients across sectors including retail, infrastructure, banking and healthcare. The ‘responsive and very practical’ team brings its ‘excellent expertise in multinational data protection compliance work’ to a mix of contentious and non-contentious matters.”
– The Legal 500
“Up-to-date knowledge about cross-country relations as well taking responsibility for their job, real partnership and consultancy.”
– The Legal 500
What makes our team the best data protection & cybersecurity law firm for you?
Our regional, integrated firm offers distinct advantages, spanning the full spectrum of legal services.
- An established international law firm with 60+ years of experience in Austria and CEE/SEE
- A fully integrated team of jurisdiction-specific qualified lawyers across our offices in 13 countries.
- Collaboration and innovation across multidisciplinary teams and offices
- Excellent client satisfaction – responsive, client-oriented, and consistent
- Experience with complex and cross-border matters covering the full spectrum of legal services
- Knowledge and expertise to add value to deals across industries
Leading the legal field
Our lawyers are involved in key transactions and matters across the region, bringing their industry expertise and specialised business knowledge to add value to our clients’ work.
Advised banking group on GDPR implementation for all CEE/SEE offices
Defended client against a series of data protection violation claims
Successfully advised search engine provider in proceedings before the Austrian Data Protection Authority
Our subsidiary RBS acts as Data Protection Officer for clients in various industries
Leading data protection law firm, experienced in security breaches, local & multinational data protection, & EuroPriSe certification
Successful regional GDPR implementation
Our team advised an Austrian headquartered banking group in setting up their internal data protection management systems for all of their offices in Austria and the CEE/SEE region.
All of our offices worked together to provide solutions for the GDPR implementation in the most practical and efficient manner, taking into account not only data protection but also general banking regulatory and cyber security laws. Our advice also included the application for approval of Binding Corporate Rules (BCRs).
Privacy litigation
We defended a client against the first-ever series of claims in the country, where a larger number of people (allegedly) affected by data protection violations were suing for non-material damages. The main question is now pending before the Court of Justice of the European Union.
With a scalable number of data protection experts, we can also support in mass proceedings at short notice.
Defence before DPAs
Our firm successfully defended a search engine provider in proceedings before the Austrian Data Protection Authority whose decision was lifted by the Federal Administrative Court.
We defend clients against complaints by data subjects / NGOs and against GDPR fines before DPAs across the entire CEE/SEE region.
Data Protection Officer
Our consulting subsidiary Responsible Business Solutions (RBS) acts as an external Data Protection Officer for multiple clients in the areas of public infrastructure services, banks, insurance and healthcare.
Areas of specialisation
GDPR implementation
If you are a data controller or a data processor, you need to implement appropriate technical and organisational measures to safeguard the personal data processed in your business, as well as keeping evidence of your personal data processing operations.
We identify the gaps and suggest the best options to close them, thereby helping your firm to meet EU GDPR requirements and ensure compliance with other local data protection laws. We can assist you in designing a data privacy programme and support you in dealing with the records of processing activities, DPO related tasks, and data protection impact assessment. You benefit from the combination of our legal and technical skills allowing us to offer you comprehensive solutions for all your GDPR data protection law requirements.
EuroPriSe
Having your IT-products and IT-based services certified through an independent third party helps your business maximise transparency and build up trust. The European Privacy Seal (EuroPriSe) is a highly respected certification which is valid in all EU countries and which can be used for consumer marketing or public procurement.
In addition, the fact that its awarding criteria align with the requirements of the GDPR, is an immediate indication to your customers that your business is GDPR-compliant. We have admitted EuroPriSe Legal and Technical Experts in-house. By covering both the legal and the technical side of the certification procedure you avoid having to engage two different firms, saving you both time and money.
Data management
As a response to technological developments and the ever-increasing number of data breaches, new and strict regulations are being enacted that require companies to treat privacy policies and data security as high priorities. Since these regulations are neither always clear nor uniform across different jurisdictions, ensuring compliance with data regulations and drafting the appropriate policies can be a major challenge.
We can assist you in handling all types of data management issues including filing data applications with competent authorities, (cross-border) transfer of data, restrictions on outsourcing, handling data of staff members, customers, suppliers, patients etc., records retention requirements and implementation of whistleblowing hotlines.
Data loss
Do you know what to do if you suffer a data loss? Many European data protection laws and sector regulations provide for a notification duty in case of a data leak or data misuse.
We can advise you on whom, when and how to notify, as well as represent you against potential claims for damages or administrative fines following data security breaches. Better still, we can advise you on the implementation of the best data loss prevention software to protect your business.
IT remediation & review
Take advantage of our tailor-made legal “incident response” service focusing on the first steps to be taken after a security breach is detected (detection, containment, eradication, recovery, follow-up). Depending on your preference, we work together with international and local IT security specialists to recover your systems, whilst preserving evidence for possible criminal and civil actions.
Cybercrime
The internet and e-communication have brought unparalleled opportunities; unfortunately, not just for business. Cybercrime is one of the fastest-growing areas of criminal law with more and more criminals exploiting the anonymity and speed of the electronic world to commit an ever-growing number of crimes.
With offenders ranging from individual hackers to highly complex international cybercriminal networks, you need a team which has the size, the connections, the knowledge and the partners to react immediately. The close cooperation between our Data Protection, White Collar Crime, IT and Crisis Management specialists allows us to provide integrated solutions.
Get in touch
Whether you need an international team with extensive experience, Wolf Theiss can support your business goals through our profound legal practice.
Related experts
Related insights
Beyond VLOPs and Gatekeepers: Countdown to the full application of the EU Digital Services Act (DSA)
The Digital Services Act (DSA) is set to overhaul and expand the EU’s regulatory framework for online intermediary s...
Read more
ESG in a nutshell – for the board of directors and management
12- 23 October 2023
09-10 November 2023
30 November – 01 December 2023
In the coming years, sustainability will shape corporate supervision and management like no other topic. ESG has far-reach...
Read more
Convera acquires parts of Western Union business with legal assistance from Wolf Theiss
Vienna, 21 July 2023 – Wolf Theiss advised Convera on the acquisition of parts of the Austrian business of Western Unio...
Read more
Croatian Personal Data Protection Agency imposes a EUR 2.2 million fine on a debt collection company
In early May 2023, the Croatian Personal Data Protection Agency (AZOP) imposed a fine on a debt collection company in the ...
Read more
GDPR international data transfers: Commission’s Draft Privacy Shield Replacement
Transition period for new Standard Contractual Clauses to expire on 27 December 2022 Earlier this week the European Commis...
Read more
RBS Responsible Business Solutions strengthen service portfolio for comprehensive business consulting with acquisition of RE-Structure
Vienna, 31 August 2022 – With the merger of RBS Responsible Business Solutions and its sister company RE-Structure, ...
Read more
Magenta creates largest Austrian private fibre optic network partnership with legal assistance from Wolf Theiss
Vienna, 25 August 2022 – Austrian leading telecommunications operator Magenta relied on the legal advice of Wolf The...
Read more
Covid-19 testing and EU Certificates – rules and options for employers in Croatia
Topics concerning Covid-19 testing and EU Covid-19 certificates raise a number of questions for employers in the private s...
Read more
Covid-19 vaccination and the workplace: Common questions among employers in Croatia
The Croatian government aims to increase the percentage of vaccinated persons (currently approx. 50%). Topics concerning v...
Read more
Following in the footsteps of Italy: Will the right to work in Romania be conditional upon holding a Covid-19 Green Pass?
A new draft law in Romania prevents access to the workplace absent a Covid-19 Green Certificate. The new measures are appl...
Read more
Wolf Theiss advises Novalpina Capital LLP in the largest transaction in the betting & gaming sector in Romania
Bucharest, 5 July 2021 – Wolf Theiss was the legal advisor of Novalpina Capital LLP, a London based independent European...
Read more
International data transfers: EDPB’s final recommendations on ‘supplementary measures’
On 18 June 2021, the European Data Protection Board adopted its final version on ‘supplementary measures’ for ...
Read more
Harmonising consumer protection in the digital context: the EU digital content directive in Austria
The EU Digital Content Directive (EU) 2019/770, which regulates contracts for the supply of digital content and services, ...
Read more
Romania: Minimum network and information systems security requirements to be complied with by the operators of essential services in the next 6 months
On 26 November 2020, Romania adopted new technical rules on minimum requirements to ensure the security of network and inf...
Read more
E-Commerce platforms in the focus of the CJEU / E-Commerce Plattformen im Fokus des EUGH
E-commerce platforms are not obligated in all cases to make a telephone number available to consumers before the conclusio...
Read more
CJEU invalidates EU-US privacy shield framework and introduces further restrictions on data transfers to non-EU countries
On 16 July 2020, the Court of Justice of the European Union (CJEU) issued a long-awaited decision in a dispute between Fac...
Read more
Romanian parliament adopted new law regarding the competences of the local data protection authority
On 24 June Law no. 129/2018 entered into force. It had been published in the Romanian Official Gazette no. 503 of Ju...
Read more
Amendment of the Austrian act against unfair competition (UWG) – The directive on the protection of know-how enters into force in early 2019
Directive (EU) 2016/943 “on the protection of undisclosed know-how and business information (trade secrets) against ...
Read more
Romania: New law 362/2018 on the security of network and information systems / NIS directive
EU Directive 2016/1148 on Security of Network and Information Systems (the “NIS Directive”) regulates the main...
Read more
Romania: Wolf Theiss contributes to the release of two new reports on GDPR for the CPC platform
Wolf Theiss together with other qualified legal professionals from more than 30 European countries, contributed to the rel...
Read more
The first action plan for the application of the GDPR has been published by the Romanian data protection authority
WHAT IS TO BE DONE BY DATA CONTROLLERS? On September 21st, 2017, the National Supervisory Authority for Personal Data Proc...
Read more
Status update on the e-privacy regulation –The next key regulatory initiative after GDPR
On 10 January 2017, a proposal for a new Regulation of the European Parliament and of the Council concerning the respect f...
Read more
Cyber Attacks: Die ersten 72 Stunden zählen. Die jüngsten Cyberattacken – national und international
Laut aktuellen Schätzungen des FBI liegt der durch Cyber-Delikte verursachte Schaden jenseits der 3 Milliarden US-Dollar-...
Read more
Wolf Theiss Round-Up: Unternehmen sollten sich rechtzeitig auf die EU-Datenschutz-Grundverordnung vorbereiten
Die Europäische Datenschutz-Grundverordnung (DSGVO) hat weitreichende Auswirkungen auf das Datenschutzrecht der EU-Mitgli...
Read more
Wolf Theiss Warsaw conference sees value in enhancing whistleblowing best practices in Poland
Warsaw, 30 November 2017 – Polish companies should intensify efforts to strengthen their internal whistleblowing systems...
Read more
European privacy seal Europrise: Wolf Theiss CIO Helmut Waitzer and technology lawyer Roland Marko certify data protection fitness
Vienna, November 21, 2017 – Wolf Theiss is offering companies further support in preparing for the EU’s General Data P...
Read more
Wolf Theiss continues its expansion in CEE: Lana Sarajilic joins Wolf Theiss Sarajevo
Vienna/Sarajevo, 15. November 2017 - After hiring new partners in Poland and Romania, Wolf Theiss continues its expansion ...
Read more
Wolf Theiss strengthens its banking & finance and dispute resolution teams in Warsaw
Warsaw, 1 February 2017 – Wolf Theiss once again added new members to two of its practice groups: Stefan Feliniak joined...
Read more