Leading individual for data protection
Paul heads the German Technology, Media & Telecoms practice group. He advises his clients on national and international data protection projects and has proven expertise in IT security law and AI matters.
In addition, Paul regularly negotiates complex SaaS agreements on both the provider and customer side. He regularly advises tech clients from the US on their market entry in Europe. Numerous publications and recommendations attest to Paul’s expertise.
Voigt/Hullen, Handbuch KI-Verordnung
Voigt/Hullen, The Artificial Intelligence Act – A Handbook
Voigt/v.d.Bussche, EU-Datenschutz-Grundverordnung (DSGVO) – Praktikerhandbuch
Voigt/v.d.Bussche, The EU General Data Protection Regulation – a practical guide
Voigt, IT-Sicherheitsrecht (Handbuch)
Voigt, Die räumliche Anwendbarkeit der DSGVO auf Auftragsverarbeiter im Drittland
Voigt/v.d.Bussche (Hrsg.), Handbuch Konzerndatenschutz
v.d.Bussche/Voigt, Data Protection in Germany
Kommentierung der Artt. 1 und 2 KI-VO, In BeckOK KI-VO, 2025 (im Erscheinen)
Kommentierung des Art. 5 DSGVO, in Taeger/Gabel, DSGVO, 5. Aufl. 2025 (im Erscheinen)
Kommentierung der Artt. 37-39, 44-49 DSGVO, in Spindler/Schuster, Recht der elektronischen Medien, 5. Aufl. 2025 (im Erscheinen)
Kommentierung § 11 EnWG, in Reusch/Kipker/Ritter, Kommentar Recht der Informationssicherheit, 2023, gem. mit Markus Böhme
IT-Projektverträge, Kommentierung in Taeger/Pohle, Computerrechtshandbuch, gem. mit Nico Wiegand, 2021
Handbuch KI-Verordnung, gemeinsam mit Nils Hullen, Springer
Update zu Anforderungen an Drittlandsübermittlungen, in: DSB 2024, gemeinsam mit Wiebke Reuter
Der Digital Operational Resilience Act - Sektorspezifische Anforderungen an die digitale Resilienz von Finanzunternehmen, in: CR, Verlag Dr. Otto Schmidt, Köln, gemeinsam mit Verena Ritter-Döring
Verordnung zur Bekämpfung der Verbreitung terroristischer Online-Inhalte –
Weitreichende neue Pflichten für Hostprovider
MMR 8/2022, gemeinsam mit Elisa Eschborn und Hannes Bastians
Der Data Governance Act - Beschleunigung oder Bremse für die europäische Datenwirtschaft?
Der Betrieb, 27/28/2022, M4-M5, gemeinsam mit Daniel Tolks
Trans-Atlantic Data Privacy Framework – was sind die Folgen für internationale Datentransfers?
Datenschutzberater Mai 2022, gemeinsam mit Axel von dem Bussche / Alexander Schmalenberger
Leitlinien des Europäischen Datenschutzausschusses zu internationalen Datentransfers
Datenschutzberater, 2022, 56-58
INTERNATIONALE DATENTRANSFERS - Eine Handreichung
Stiftung Datenschutz, November 2021, gemeinsam mit Wiebke Reuter
EU- und UK-Datenschutzvertreter nach dem Brexit, in: Zeitschrift für Datenschutz, 08/2021
Neue Standardvertragsklauseln für internationale Datentransfers, in: Computer und Recht, 07/2021
Die Anwendung des datenschutzrechtlichen Marktortprinzips auf Auftragsverarbeiter im Drittland, in: Computer und Recht, 05/2021
Die räumliche Anwendbarkeit der EU Datenschutz-Grundverordnung auf Auftragsverarbeiter im Drittland, in: Oldenburger Beiträge zum Zivil- und Wirtschaftsrecht. Band: 53, 2020
Information Security Law 4.0, in Fenz, Industry 4.0, 2022
Kommentierung der Artt. 37-39, 44-49 DSGVO in Spindler/Schuster, Recht der elektronischen Medien, Kommentar, 4. Aufl. 2019
Konzerndatenschutz, Handbuch, von dem Bussche / Voigt, 2. Auflage, 2019
Kommentierung des Art. 5 DSGVO, in Taeger/Gabel, DSGVO, Kommentar, 4. Aufl. 2021
Thomson Reuters, Practical Law, Cyber Incident Response and Data Breach Notification: Germany, 2019
Thomson Reuters, Practical Law, Information Security Considerations: Germany, 2019
EU-Datenschutz-Grundverordnung (DSGVO) – Praktikerhandbuch, Voigt / von dem Bussche, 2018
IT-Sicherheitsrecht, Praktikerhandbuch, Voigt, 2. Aufl. 2022
Data Protection in Germany = Datenschutzrecht in Deutschland, including EU General Data Protection Regulation 2018, Handbuch, von dem Bussche / Voigt, 2017
The EU General Data Protection Regulation (GDPR), Handbuch, Voigt / von dem Bussche, 2017
Leading individual for data protection
“very good lawyer, solution-oriented, with an understanding of processes in the company”, “pragmatic and quick response with an understanding of business”, clients; “from up-and-coming partner to a force to be reckoned with in the market”, “exceptional expertise in the field of IT security law, special expertise in IT contract, data protection, IT security law and e-commerce”, “good at international data transfers”, “very broad-based”, “always great ideas”, “always has the latest developments on the screen”, competitors
Frequently recommended lawyer for data protection
Frequently recommended lawyer for information technology - Transactions/ Outsourcing
Frequently recommended lawyer for IT law -
Leading lawyer for Information Technology & Digitalisation
Top Lawyer for Data Protection Law
Leading individual: Technologierecht
Leading individual: Data Protection Law
Leading individual: Information Technology Law
Leading individual: Intellectual Property Law
"Paul Voigt has an extensive legal knowledge and understanding of data protection law. He is always able to find pragmatic and creative solutions."
Frequently recommended: IT
Frequently recommended: Data protection
Ranked as leading lawyer for Data protection in Germany
Top lawyer for data protection law
Leading individual: Data Security and Privacy Law
Leading individual: Technology Law
Leading individual: Information Technology Law
"very visible", "experienced, pragmatic", "expert for international data transfers", competitor
Leading name
Excellent lawyer: Innovation, technology & telecoms
Excellent lawyer: Data Protection & IT and Technology & Outsourcing
Top lawyer 2022 for data protection law
Leading individual: Information technology law
Leading individual: Data protection law
Leading individual for data protection
"Paul Voigt does a bombastic job! Precise and perfectly realisable advice. For companies, it is a real benefit to have him as an advisor at their side.", "Paul Voigt is extremely committed and knowledgeable. In addition sympathetic and very responsive."
Next Generation lawyer: Data protection law (“Paul Voigt combines an almost inexhaustible specialist knowledge with an equally large economic understanding.")
"really high presence in the area of cybersecurity ", good with topics of IT security law relations", "clear focus, clear statements", competitor
"outstanding competence, pragmatic, very fast and well connected, service oriented", "prime advice in every respect: excellent, resourceful, farsighted, judicious", client
Frequently recommended for data protection
Recognition as one of the top 3 data protection lawyers in Germany
Frequently recommended: IT-law
Frequently recommended : Data protection ("super and fast lawyer", "great competence", "good in IT security law issues")
Lawyer of the year 2020: Data protection law
The „authorised representative“ under the EU AI Act
CRA & PLD – new security requirements for digital products
by Dr. Paul Voigt, Lic. en Derecho, CIPP/E and Dr. Michael Kieffer
Transfer Impact Assessment Tool (TIA tool)
Simplify your Transfer Impact Assessments with Legal Tech by Taylor Wessing
Learn moreby multiple authors
by Lucas de Groot and Naomi Kannekens
by Jason Rawkins and Simon Jupp
by Dr. Markus Böhme, LL.M. (Nottingham) and Dr. Christian Ertel