Thomas Kahl

Thomas is a specialist lawyer in the field of information technology law. He advises national and international companies on all legal questions relating to information technologies. With his expertise, he particularly coordinates digitisation projects and the implementation of innovative technologies. In this respect, he is an expert for the implementation of the provisions of the European General Data Protection Regulation as well as of area-specific requirements of data protection law with a focus on automotive and mobility and regulated industries such as healthcare and insurance.

In addition, Thomas has extensive experience in advising clients on data breach incidents, cyber attacks, and (data protection) supervisory procedures. He is a member, inter alia, of the German Association of Law and Informatics (DGRI), is active in Germany’s digital association BITKOM and in the German Association for the Digital Economy (BVDW), and is co-chair of an iapp Chapter. He regularly holds seminars and lectures and shares his knowledge as an associate lecturer at the Frankfurt School.

Autotech & mobility

Publications: RAW Journal

In-depth analysis

by Thomas Kahl

Click here to find out more

Digital, data and consumer regulation

Explore new and upcoming EU and UK legislative changes to AI, content and marketplace governance, data management, cyber security and digital resilience.

Access the guide

CV

Since 2020 Partner, Taylor Wessing

2016 - 2020 Salary Partner, Taylor Wessing

2015 Trainer, Frankfurt School of Finance & Management in the Certified Compliance Professional (CCP) Program

Career

Since 2020 Partner, Taylor Wessing

2016 - 2020 Salary Partner, Taylor Wessing

2015 Trainer, Frankfurt School of Finance & Management in the Certified Compliance Professional (CCP) Program

Education

2010 Admitted as a lawyer, Frankfurt am Main

2009 Second state examination, Frankfurt am Main

2007 – 2009 Legal clerkship, Frankfurt am Main

Publications

DORA, internationaler Datentransfer und der „neue“ EU-US Datenschutzrahmen, in: Compliance Berater, 11/2023

Autotech – Was Automotives 2018 besonders beschäftigt hat … und 2019 weiter beschäftigen wird!, PlugIn – Wir denken das Recht der digitalen Zukunft, Ausgabe #16, Dezember 2018

Lizenz zum Trollen – IoT-Produkte auf Basis von Open Source-Software sind die Regel, rechtliche Herausforderungen ebenfalls, PlugIn – Wir denken das Recht der digitalen Zukunft, Ausgabe #14, Oktober 2018

Auftragsdatenverarbeiterhaftung nach der DSGVO – Was ändert sich in der Praxis?, in: BvD News Ausgabe 03/2017

Wer haftet denn jetzt wofür, wem und woraus? Haftungsrechtliche Fragen der Auftragsverarbeitung unter der DSGVO und deren Auswirkungen auf die Vertragspraxis, in: Tagungsband „Recht 4.0 – Innovation aus den rechtswissenschaftlichen Laboren“, Hrsg. Jürgen Taeger, OLWIR Verlag, Edeecht, 2017, S. 101 – 113

Verarbeitung „sensibler“ Daten durch Cloud-Anbieter in Drittstaaten nach geltendem Recht und der DSGVO, in: Zeitschrift für Datenschutz (ZD) 02/2017, S. 54 – 57 (zusammen mit Dr. Gregor Schmid)

Wenn die Aufsichtsbehörde anklopft: Wem gehören die Gästedaten?, in: Allgemeine Hotel und Gastronomie-Zeitung (AHGZ) Nr. 49/2016 vom 09.12.2016

Der neue Auftrags(daten)verarbeiter in der EU-Datenschutz-Grundverordnung, in: BvD-News Sonderausgabe 2016, S. 13 f.

Die „neue“ Einwilligung in der DSGVO, in: BvD-News Ausgabe 02/2016, S. 23 f.

Das Konzernprivileg im Datenschutzrecht – Lösungsansätze für einen interessengerechten Datentransfer im Konzern, in: Deutscher Anwaltsspiegel, Jahrbuch 2011/2012, S. 61 – 64

Die Novellierung des Bundesdatenschutzgesetzes - Die Auswirkungen der BDSG-Novellierung auf die Unternehmenspraxis und die datenschutzrechtliche Beratung, in: ITRB 2009, S. 273–277 (zusammen mit Dr. Kai Westerwelle)

Memberships & Associations

Co-Chair of the Frankfurt Chapter of the International Association for Privacy Professionals (iapp)
Member Deutsche Gesellschaft für Recht und Informatik (DGRI)
Member to several working groups within BITKOM und BVDW

Additional languages

Awards

Legal 500 Germany 2024

Featured

Experience

Data Protection & Automotive

Providing data protection and telecommunications law advise to several OEMs in connected vehicle projects and authority proceedings

Thomas Kahl

Cyber Security & Data Protection

Advising a global company group in the chemicals sector during a cyber security attack and related authority proceedings

Thomas Kahl

IT projects & Insurance

Advising a leading insurance company in an IT outsourcing project on IT, data protection and related regulatory requirements

Thomas Kahl

Data Protection & Insurance

Advising a leading insurance company in a comprehensive GDPR implementation project

Thomas Kahl

Data Protection & Lifesciences

Advising a leading manufacturer of medical equipment in clinical trial projects and contract negotiations

Thomas Kahl

Thomas's news & insights

View Thomas's insights

Click here to find out more

Automotive & mobility

From regulation to implementation: Practical implications of NIS-2 for the automotive industry | TWheel

30 January 2026

by Thomas Kahl and Teresa Kirschner, LL.M. (Information and Media Law)

Automotive & mobility

FAQ: Access to Vehicle Data and Data Governance – EU Regulatory Frameworks and Practical Guidance for Automotive Industry Companies (Part 1) | TWheel

30 January 2026

In-depth analysis

by Thomas Kahl and Teresa Kirschner, LL.M. (Information and Media Law)

Click here to find out more

Automotive & mobility

FAQ: Access to Vehicle Data and Data Governance – EU Regulatory Frameworks and Practical Guidance for Companies in the Automotive Industry (Part 2) | TWheel

30 January 2026

In-depth analysis

by Thomas Kahl and Teresa Kirschner, LL.M. (Information and Media Law)

Click here to find out more

Thomas Kahl

Legal 500 Germany 2024

Expertise

Services and Groups

Sectors