PARTNER | LAWYER | CERTIFIED SPECIALIST LAWYER FOR IT LAW

Experts in Tech Law (IT and Data Law)

LUTZ | ABEL offers you a strong team of experts in Tech Law (IT and data law). We provide comprehensive advice on all matters related to IT and data law, with the aim of helping our clients take a decisive step forward in achieving their strategic goals.

We support the development and implementation of new IT systems and complex IT projects, prioritizing legally sound, customized, and cost-effective solutions. A key focus of our advisory services is compliance and regulatory matters related to data collection, data security, and artificial intelligence. We review your projects and processes for regulatory compliance and offer pragmatic solutions.

“We do not only show risks, we also provide pragmatic solutions.”

Dr. André Schmidt, Head of the Practice Group

Our services in the field of tech law include, in particular:

IT Contract Law

This includes outsourcing agreements, cloud computing agreements (SaaS, PaaS, IaaS), software licensing, IT project agreements, and consulting for IT projects during times of crisis. We assist with structuring software distribution (partner agreements, reseller agreements, and customer agreements), contractual joint ventures, and group licensing agreements (e.g., SAP, Microsoft). We also represent you in IT litigation, IT lawsuits, and injunction proceedings.

IT Procurement Law

We advise on the specific aspects of IT procurement (e.g. the acquisition of software, hardware, maintenance and other services) as well as on procurement strategy and concept development. Our services include optimal procedure organization and management, the drafting of service descriptions in compliance with procurement law, and the legally certain preparation of IT contract documents, EVB-IT terms and IT framework agreements. We also represent you before the German Public Procurement Tribunal (Vergabekammer), in complaints proceedings, and before civil courts.

IT-related crimes

We provide advice on cyberattacks and cybercrime.

 

You can find more detailed information about selected services on the following pages:
eHealth | Digital Health | Medical Applications
DORA & NIS-2 – New Challenges for ICT Service Providers
Incident Response – Taking Legally Sound Action in the Event of a Cyberattack
Legally compliant development and use of IoT products
Artificial Intelligence (AI)
Problems in IT Projects from a Service Provider's Perspective
Legal Framework for Accessing Employee Email Accounts During Internal Investigations
Internet Law, E- and M-Commerce

We review data-sharing platforms, internet portals and online shops, and provide support in domain disputes. We also offer legal advice for viable marketing strategies.

Privacy Protection and Data Security

This includes data protection compliance (GDPR, BDSG, KDG, SGB, etc.), IT product liability law (including the Product Liability Directive and the Cyber Resilience Act), the Data Act (including the protection of user data and data access rights for IoT products), as well as corporate and employee data protection. We draft data protection agreements, data processing agreements and privacy policies, and provide support with data security concepts and compliance (NIS-2, DORA). Further areas include health data protection and eHealth, big data applications, as well as scoring and credit checks. We also accompany clients through data protection audits and data protection supervisory authority inspections.

Artificial Intelligence (AI)

We support the development of AI solutions and provide consulting on the use of training data, the implementation of AI solutions, AI governance, and compliance with the AI Act (risk assessment, scope of obligations, etc.).

02.04.2026

Employment Law, Venture Capital / M&A, Commercial, Intellectual Property Law, IT-Law and Data Security

LUTZ | ABEL advised AlphaPet Ventures on the acquisition of Tierliebhaber

The law firm LUTZ | ABEL has advised AlphaPet Ventures GmbH, a leading European digital brand platform for premium pet food, on the acquisition of the Berlin-based brand Tierliebhaber. With this transaction, AlphaPet further strengthens its position in the fast-growing pet health and wellness segment and continues to execute its successful buy-and-build strategy.

25.03.2026

IT-Law and Data Security

IT-related legal challenges for defense companies with dual-use products

The increasing focus of military procurement on commercial off-the-shelf (COTS) products raises the challenging question of whether, and to what extent, civilian regulations (e.g. under the AI Regulation) apply to dual-use products. This article demonstrates why the exemptions for the defense sector offer far less protection in practice than many defense companies assume, and what matters when it comes to drawing the line.

04.02.2026

IT-Law and Data Security

E-Commerce 2026: Additional Requirements, New Cancellation Button – What Businesses Need to Know Now

Co-Author: Andra Schlingemann

02.02.2026

IT-Law and Data Security

AI Due Diligence in M&A Transactions: When a Supposed Tech Asset Becomes a Regulatory Liability

The naive assumption that compliance requirements for AI software could always be addressed later has proven to be a...

27.01.2026

IT-Law and Data Security

AI Transcription of Meetings: Data Protection, Section 201 of the German Criminal Code (StGB), and the Limits of Consent

The automatic recording of meetings using AI tools promises enormous efficiency gains. Yet while the technology is...

IT-Law and Data Security

eHealth | Digital Health | Medical Applications

The increased use of modern technologies is revolutionizing the healthcare sector. Applications such as electronic...

IT-Law and Data Security

DORA & NIS-2 – New Challenges for ICT Service Providers

Regulatory requirements for companies in the information and communications technology (ICT) sector continue to grow....

IT-Law and Data Security

Incident Response – Taking Legally Sound Action in the Event of a Cyberattack

Cyberattacks, data breaches, and IT security incidents have long been part of everyday life for digital companies. Whether it’s a ransomware attack, unauthorized access to customer data, or the loss of sensitive information - what matters most is how quickly and effectively the company responds.

IT-Law and Data Security

Legally compliant development and use of IoT products

We provide customized legal advice for manufacturers, providers, and users of IoT products and the services associated with them.

IT-Law and Data Security

Artificial Intelligence (AI)

✔️ The development and implementation of AI solutions are subject to a wide range of regulations. ✔️ We combine a...