Adrian Brandauer
Biography
Mag. Adrian Brandauer, CIPP/E, is an associate in Baker McKenzie’s Commercial practice in Vienna.
Adrian specializes in technology litigations, focusing on regulatory and civil disputes in the areas of data protection, AI, and digital business models. Building on his litigation expertise, Adrian advises multinational and domestic clients on strategic compliance issues in the areas of AI, data protection, and cyber security.
Prior to joining the Firm in June 2022, he obtained professional experience as a judicial clerk at the Higher Regional Court Vienna and as a Paralegal in several Viennese litigation boutique law firms. Adrian is an active member of IT-LAW.AT, an independent association focusing on IT-laws, and is candidate of a post-graduate LL.M. degree in IT-, media, data protection, and telecommunication law from the University of Vienna.
Practice Focus
Since Adrian joined Baker McKenzie in June 2022, he has a strong focus on technology litigations, advising clients on complex regulatory and civil disputes at the intersection of data protection, AI, and digital business models. Drawing on his extensive litigation expertise, he has represented clients in high-profile cases for leading technology firms and advises on digital business models.
The landscape of EU legislation in the technology law sector is one of her areas of experience. Adrian has strong understanding of the AI and data protection regulatory landscape and is advising multiple international group companies regarding the development, implementation, use, and risk classification of AI systems considering AI regulations and data protection laws, helping them undertake global projects.
Representative Legal Matters
- Representing two Austrian regional governments in GDPR mass litigations with 900 separate proceedings, including before the Austrian Administrative Supreme Court and the CJEU (C-638/23).
- Defending a global tech company in the context of +32,000 mass claims in connection with websites embedding the client’s content in civil litigations and in parallel ex officio proceedings before the Austrian DPA.
- Representing Google before the CJEU in a landmark case that established for the first time that the E-Commerce Directive’s country-of-origin principle grants the EU Member State where a provider is established the exclusive authority to regulate such provider (C 376/22).
- Representing a technology company in a collective redress litigation against Max Schrems and other plaintiffs seeking immaterial damages and unjust enrichment claims for alleged GDPR violations.
- Representing a leading Austrian newspaper in a GDPR litigation concerning the lawfulness of their pay-or-ok online business model.
- Advising and representing a credit reporting agency in administrative proceedings before the Austrian Data Protection Authority and civil proceedings relating to alleged infringements of data subject rights.
- Defending a global financial services provider in a mass AI litigation concerning a claim for the disclosure of the logic of the client’s AI-powered AML algorithm in front of civil as well as administrative courts.
- Advising a global franchisor with the implementation of a centrally managed HR system, covering data protection regulations in EMEA, the Americas, and APAC.
- Strategic advice for a GenAI provider regarding privacy and commercial guardrails for offering its product and services in the EU/EEA.
- Advising multiple international group companies and domestic clients regarding the regarding the development, implementation, use, and risk classification of AI systems considering AI regulations and data protection laws.
Professional Associations and Memberships
- Certified Information Privacy Professional/Europe (CIPP/E)
- International Association of Privacy Professionals (IAPP)
- IT-LAW.AT - Scholarly Association for Information Law
Education
- University of Vienna (Mag. iur) (2021)
Languages
- English
- French
- German