Professional background
My main areas of practice
I advise national and international clients on all aspects of data protection, cybersecurity and other IT laws. My practice focuses on the implementation of regulatory requirements and the representation of clients in supervisory proceedings.
In addition, I advise on European and German cybersecurity frameworks, including the Digital Operational Resilience Act (DORA), the NIS-2 Directive, and regulations relating to critical infrastructure (KRITIS), as well as telecommunications law at both European and national levels. A further focus of my work lies in advising on the use of new and emerging technologies. I support clients in implementing innovative technologies in compliance with the applicable legal framework, in particular in the areas of Artificial Intelligence (AI), data-driven business models, and digital platforms.
I advise our clients in German and English.
Publications
I regularly publish with PL&B and in the jurisPraxisReport for IT law:
- “Requirements for Substantiating Non-Material Damages under Art. 82 GDPR: Impairment of Creditworthiness and Loss of Control over Data as Compensable Harm”, Fischer, jurisPR-ITR 25/2025, note 6 (in German, paywall)
- “Legitimate Interest as a Basis for Transmitting Positive Data to Credit Agencies”, Fischer, jurisPR-ITR 21/2025, note 5 (in German, paywall)
- "Landmark case on using publicly available data for AI development", first published in Privacy Laws & Business International Report, August 2025 (with Katharina A. Weimer) / Download as PDF
- "Germany’s new commissioner, update on laws, and future focus", first published in Privacy Laws & Business International Report, December 2024 (with Katharina A. Weimer) / Download as PDF