Partner
Languages spoken
English | German
Annette Demmel is a partner in the Data Privacy, Cybersecurity & Digital Assets Practice Group in Berlin.
Annette brings over 20 years of legal expertise advising domestic and international corporations on technology, privacy and commercial law, with a dedicated focus on digital product creation, data mobility and process transformation. Her areas of activity include:
Comprehensive Data Law and Cybersecurity
Leading the rollout of international compliance programmes and navigating complex frameworks across the full spectrum of data legislation, including the GDPR, the EU Data Act and the NIS2 Directive.
AI Governance and Labour Relations
Specialising in the development and deployment of artificial intelligence (AI), including high-stakes negotiations with works councils and trade unions regarding AI implementation.
Cross-industry Advisory
Delivering tailored counsel to a diverse portfolio of sectors, including chemicals, mobility, engineering, real estate, health, education, events, and the creative industries. Annette is a specialist lawyer for information technology law and a specialist lawyer for copyright and media law.
Setting up a data sharing platform for economic development in over 90 countries.
Providing strategic counsel to organisations within the education sector on leveraging AI to transform learning methodologies, streamline and optimise HR operations, and drive growth through cutting-edge, innovative marketing campaigns.
Supporting a software manufacturer of energy storage solution in implementing EU Data Act requirements.
Guided organisations in various sectors through NIS2 readiness assessments, compliance mapping and risk management frameworks.
Interim data protection management for all European companies of a global beverage group and legal support for their digital strategy.
Architecting compliant international data transfer mechanisms for global enterprises, with specialised expertise in designing and implementing binding corporate rules (BCRs) and managing post-acquisition privacy integrations for newly annexed group entities. Directing large-scale, cross-border project teams to successfully execute and roll out enterprise-wide global data protection programmes.
Advising automotive companies on navigating the complex legal and commercial landscape of autonomous driving and software-defined vehicles. Strategic compliance for advanced in-vehicle infotainment (IVI) platforms, including the integration of third-party app ecosystems and navigation software.
Advising a multinational company on the restructuring of the group IT services, as well as negotiations with local works councils regarding privacy and codetermination rights with regard to cloud services and centrally managed solutions.
Counselling a cancer research organisation on leveraging international data partnerships to advance in-house AI development. Advising on the compliance and governance of internal model training, including data preparation, pipeline orchestration, and utilising cross-border medical inputs to refine in-house diagnostic and research algorithms.
Handling data breaches for international businesses, coordinating notifications worldwide and negotiations with authorities.
Co-presenter, “AI Webinar Series: The ABC’s of GAI”, Webinar, June 2023.
Co-presenter, “Protect Your Business from Regulatory Risk: Mitigating the Threat of Dark Patterns,” MyLawCLE and Federal Bar Association webinar, April 19, 2023.
Co-presenter, “It’s Not Personal: The Role of Anonymization in Privacy Governance”, Webinar, April 2023.
Co-presenter, “Practical Privacy by Design”, Webinar, March 2023.
Co-presenter, “Update Your Standard Contractual Clauses Before the Festive Season: Practical Tips to Generate Good Cheer”, Webinar, December 2022.
Co-presenter, “Employee and Other HR Data Under the California Privacy Rights Act”, Webinar, June 2022.
Co-presenter, “Navigating Opportunities and Challenges: Cross-border Data, the Cookiepocalypse and Standard Contractual Clauses”, Webinar, May 2022.