Prof. Dr. Michael Schmidl LL.M. Eur.

Partner

Baker McKenzie Rechtsanwaltsgesellschaft mbH von Rechtsanwälten und Steuerberatern

Munich

T + 49 89 5 52 38 211

Email
Vcard

Biography

Prof. Dr. Michael Schmidl leads Baker McKenzie's German Data & Cyber team and chairs the DACH Commercial Practice. He has more than 20 years experience advising on high-stake and complex AI, cybersecurity and privacy matters. Michael has a particular industry focus on Healthcare & Life Sciences. He is an honorary professor at the University of Augsburg and a specialist lawyer for information technology law (Fachanwalt für IT-Recht).

Practice Focus

Michael advises on contentious and non-contentious technology matters, including AI governance, data protection, cybersecurity, software, media and outsourcing. He regularly supports multinational companies on digital transformation, global data governance, technology transactions and compliance projects. His sector focus includes Healthcare & Life Sciences, where he advises pharmaceutical, medical device and health technology companies on digital health solutions, health cloud structures and cross-border data strategies.

Representative Legal Matters

Advises multinational companies on global privacy governance, GDPR compliance and cross-border data strategies, including privacy compliance programs, health cloud structures, wearables roll-outs and international data protection projects.
Guides clients on AI, data use and data monetization initiatives, including data sourcing, governance frameworks, regulatory compliance and the commercial deployment of data-driven business models.
Has advised clients on cybersecurity preparedness and incident response since 2004, including breach notification assessments in more than 100 jurisdictions worldwide.
Supports medical device, pharmaceutical and other life sciences companies on digital health, product launches, global expansion, regulatory compliance and practical privacy governance.
Advises on software, copyright, cloud and technology transactions, including software licensing, IT project contracts, provider agreements and intra-group/shared services arrangements.
Represents clients in major outsourcing and digital platform projects, including global IT outsourcing in the banking and insurance sectors, gaming, e-commerce and internet-based business models.

Professional Honors

Ranked lawyer, TMT: Data Protection, Chambers Europe 2026
Hall of Fame, Data Law, Legal 500 Germany 2026
Leading Partner, Information Technology and Digitalisation, Legal 500 Germany 2026
Recognized in The Best Lawyers in Germany for Data Security and Privacy Law, Information Technology Law and Outsourcing; since 2013
Recommended as Top Lawyer for Data Privacy, Wirtschaftswoche, 28th edition 2024

Admissions

Germany (2000)

Education

Fachanwalt für IT-Recht (Attorney Specializing in Information Technology Law)
University of Munich (LL.M. Europe) (2004)
State of Bavaria (Assessor Exam) (2000)
University of Munich (Referendar Exam) (1998)
University of Bayreuth (Doctorate) (1997)
Chambre de Commerce et d Industrie de Paris (Diploma Supéerieur) (1996)
University of Bordeaux (Maîtrise en droit) (1995)
University of Bayreuth (Diploma Economics) (1995)

Languages

English
French
German

Previous Offices

Frankfurt

Selected Speaking Engagements

2024

Speaker to the topic "Drittstaatentransfer in der Rechtsberatung" at LfDi/Baden-Württemberg
Co-speaker with Frank Pflueger and Johanna Moesch (both Baker McKenzie) to the topic "Data Legislation to watch beyond GDPR and AI" at 19th Annual Healthcare and Life Sciences Legal and Compliance Forum in Zurich
Co-speaker with Michaela Nebel (Baker McKenzie) Webinar "EU Data Act", BeckAkademy
Co-speaker with Stefan Brink (Institut wida) Webinar "Vertiefung Beschäftigten-Datenschutz", BeckAkademy
Lecturer "Compliance Officer", University Augsburg/ZWW

Co-speaker with B. Trappehl, L. Determann (both Baker McKenzie), Michael Will (Präsident Bayer. Staats-ministerium des Innern/ Datenschutz), H. P. Wiesemann (BSH Hausgeräte) to the topic "AI Act and Data Act (Datengesetz)" at Baker McKenzie Office Munich
Co-speaker with Michael Will (Präsident Bayer. Staats-ministerium des Innern/ Datenschutz) and Stefan Köster (eConsulting) Webinar "Microsoft 365 - Löschkonzept, so geht es richtig", BeckAkademy
Co-speaker with Johannes Völker (Google) Webinar "IT-Mitbestimmung im Unternehmen", BeckAkademy
Co-lecturer with F. Tannen (Baker McKenzie) "Data Protection Officer", University Augsburg/ ZWW

2023

Co-speaker with Michael Will (Präsident Bayer. Staats-ministerium des Innern/ Datenschutz) and Stefan Köster (eConsulting) Webinar "Microsoft 365 - Löschkonzept, so geht es richtig", BeckAkademy
Co-speaker with F. Tannen (Baker McKenzie) Webinar "Cybersecurity und Datenschutz", BeckAkademy
Co-speaker with Johannes Völker (Google) Webinar "IT-Mitbestimmung im Unternehmen", BeckAkademy
Co-speaker with Michaela Nebel (Baker McKenzie) Webinar "EU Data Act", BeckAkademy
Co-Speaker with Michael Wulf (SAP) Webinar "DSGVO: Löschkonzepte rechtssicher gestalten", BeckAkademy
Co-speaker with Michael Kort (University Augsburg) Webinar "Datenschutz für die Unternehmenspraxis", BeckAkademy
Co-speaker with Stefan Brink (Institut wida) Webinar "Vertiefung Beschäftigten-Datenschutz", BeckAkademy

Publications

Co-author "Corporate Compliance" in Mossmayer/Lösler, Handbuch der Haftungsvermeidung, 4th edition 2024Co-author "Corporate Compliance" in Mossmayer/Lösler, Handbuch der Haftungsvermeidung, 4th edition 2024
Co-author with Eva-Maria Strobel "European Union: EU AI Act published – Dates for action," Baker McKenzie InsightPlus, 12 July 2024
Co-author with Michaela Nebel and Lothar Determann "United States: The EU – US data privacy framework and the impact on companies in the European Economic Area and USA compared to other international data transfer mechanisms," Baker McKenzie InsightPlus, 10 January 2024
Co-author with Florian Tannen "Corporate Governance und Compliance" in Dennis-Kenji Kipker, Cybersecurity Rechtshandbuch, 2nd edition 2023
Co-author with Julia Kaufmann, Michaela Nebel, Florian Tannen, Holger Lutz, "Another Million Euro Fine under the GDPR in Germany - What does it tell us?," Baker McKenzie InsightPlus, 16 October 2020
Co-author with Elisabeth Dehareng, Lukas Feiler, Francesca Gaudino, Julia Kaufmann, Holger Lutz, Michaela Nebel, Florian Tannen, Magdalena Kogut-Czarkowska, Joanna De Fonseka, Benjamin Slinn, "Europe: Guidelines on the concepts of controller and processor in the GDPR," Baker McKenzie InsightPlus, 22 September 2020
Co-author with Michaela Nebel, Holger Lutz, Julia Kaufmann, Florian Tannen, Nadine Neumeier, "Germany - Schrems II: Opinion of the European Data Protection Committee," Baker McKenzie InsightPlus, 24 July 2020
Co-author with Julia Kaufmann, Florian Tannen, David Pfahler, Frank Pfüger, Holger Lutz, Michaela Nebel, "Germany: How to get Governmental Funding for Digital Health Apps?," Baker McKenzie InsightPlus, 23 July 2020
Author, "Compliant Compliance – Ausgewählte Grenzen maximale Kontrolle," in Momsen/Grützner, Handbuch Wirtschafts- und Steuerstrafrecht, 2nd Edition, 2020
Co-editor, "Compliance from A to Z (2014 Edition)," December 2014
Contributor, "EMEA Legal Insights Bulletin," September 2013
Contributor, "EMEA Legal Insights Bulletin," June 2013
Author, "The Challenges of Subprocessing and Suggested Solutions Under German and EU Privacy Law," February 2013
Contributor, "Compliance Kompakt," December 2012

Baker McKenzie Rechtsanwaltsgesellschaft mbH von Rechtsanwälten und Steuerberatern is registered with the Local Court of Frankfurt/Main (registered seat) HRB 123975. It is associated with Baker & McKenzie International, a Verein organized under the laws of Switzerland.

Imprint