Dr. Michaela (Weigl) Nebel

Dr. Michaela Nebel (geb. Weigl)

Baker McKenzie Rechtsanwaltsgesellschaft mbH von Rechtsanwälten und Steuerberatern


Dr. Michaela Nebel is a partner in the Frankfurt office of Baker McKenzie. Prior to joining Baker McKenzie she studied law at the University of Passau. She obtained her Doctor of Law degree on a topic related to privacy in the Web 2.0. From July until December 2014 she practiced at the San Francisco office of Baker McKenzie. She is a member of the International Association of Privacy Professionals (IAPP), since May 2015 a Certified Information Privacy Professional/Europe (CIPP/E) and since May 2017 a Certified Information Privacy Professional/United States (CIPP/US). She is also the author of numerous articles on information technology law, in particular on data protection law and e-commerce law, and the co-author of an English language commentary on the EU General Data Protection Regulation.

Practice Focus

Michaela advises German and international companies on all aspects of information technology law, data protection law, IT contract law as well as on e-commerce, IT / data litigation related matters. Her practice covers in particular advice of companies on issues concerning domestic and cross-border data privacy law.

Representative Legal Matters

  • Advising numerous globally operating companies from various industries on the implementation of the GDPR as well as on international data transfers.
  • Advising several globally operating companies on proceedings with the data protection authorities and on legal disputes regarding the GDPR.
  • Advising several globally operating companies on their website compliance requirements (including terms of use, imprints, privacy statements, use of cookies and similar technologies, price indications, unfair competition, consumer protection law, contract law).
  • Advising several globally operating companies on the implementation of eSignatures.
  • Advising a global operating financial institution on the acquisition of a provider of payment gateway software.
  • Seconded for two years to a large financial institution to advise on the implementation of the GDPR and on data protection law in general.
  • Advising a global operating automobile manufacturer on questions concerning data protection law in connection with the development of driver assistance systems.

Professional Honors

  • TOP lawyer 2020 for "IT law", WirtschaftsWoche, 2020
  • Germany's best lawyers 2020 for "data protection", Handelsblatt 
  • Germany's best lawyers 2021 for "data protection" and "information technology", Handelsblatt

Professional Associations and Memberships

  • Certified Information Privacy Professional/United States (CIPP/US) (2017)
  • Certified Information Privacy Professional/Europe (CIPP/E) (2015)
  • International Association of Privacy Professionals (IAPP)


  • Germany (2011)


  • Higher Regional Court of Munich (2011)
  • University of Passau (2010)
  • University of Passau (2008)


  • English
  • German

Previous Offices

  • San Francisco


  • Co-author (with Anna Verena Böhm, Gregor Dornbusch, Katja Haeferer, Guenther Heckelmann, Ludmilla Maurer, Matthias Scholz, Alexander Wolff, Matthias Köhler, Barbara Deilmann) "AR - Kommentar, Kommentar zum gesamten Arbeitsrecht," Luchterhand, 10. Auflage, 24.8.2021 
  • Co-author (with Brian Hengesbaugh and Lukas Feiler), "Top-10 do's and don'ts for service providers implementing the new SCCs with EU customers", IAPP, The Privacy Advisor, 22 June 2021
  • Podcast with Brian Hengesbaugh, ConnectOnTech, "Episode 32 - Enforcement of Schrems II - Focus on Germany"
  • Co-author (with Brian Hengesbaugh, Lothar Determann, et al.), "The New European Commission Standard Contractual Clauses: What you need to know", ConnectOnTech, 11 June 2021
  • Co-author (with Benjamin Slinn, Yann Padova, Magalie Dansac Le Clerc, Francesca Gaudino, Elisabeth Dehareng, Lukas Feiler et al.), "The third anniversary of the GDPR: Looking ahead", ConnectOnTech, 25 May 2021
  • Co-author (with Ben Slinn et al.), ConnectOnTech, "Data Protection Day - Looking ahead to 2021", 28 January 2021

Firm Committee Memberships

  • Head of Industry Group TMT GER