Christina Ziegler-Kiefer
Attorney-at-law | LL.M.
Senior Associate | Lead of Digital Health
Certified company data protection officer (TÜV®)
Expertise
- Data Law, Data Protection, and Data Governance
- Artificial Intelligence and Cybersecurity Law
- IT Contracts, Licensing, and Open-Source Software
- Digital Health and Regulatory Compliance in the Healthcare Sector
Current projects (extract)
- Advising domestic and international companies and public-sector bodies
on data law and cybersecurity compliance - Drafting and managing software and IT agreements
- Providing legal advice to companies on the launch of digital products,
particularly in the healthcare sector
Career
- Law studies at Saarland University
- Master of Laws (LL.M.) in the program “Information and Communication
Technology (ICT) Law” at the University of Oslo - Legal clerkship at the Higher Regional Court of Saarbruecken with
stations at Bird & Bird LLP in Hamburg and at the Saarland Independent
Data Protection Centre in Saarbruecken, among others - Lecturer in AI Law at the University of Hagen
Latest Events
Latest News
Publications (selection)
- Dualer Rechtsschutz nach Art. 77 ff. DSGVO ($) (trans. „Dual Legal Remedies Under Arts. 77 et seq. GDPR“), Zeitschrift für Datenschutzrecht (ZD), Issue 10/2026, pp. 683 et seq.
- Beck’scher Online-Kommentar Produktrecht ($), (trans. „Beck Online Commentary on Product Law“), (Publisher) Reusch, Philipp/Kipker, Dennis-Kenji, 8th ed., Munich 2026, commentary on Arts. 11, 12, and 24–26 of the CRA
- Cybersicherheit für den Medizinbereich: wann CRA, wann MDR (trans."Cybersecurity in the Healthcare Sector: When to Use CRA, When to Use MDR"), Medizin+Technik, 23.09.2026
- Revision der MDR: Schärfere Regeln für KI & Co. (trans. "Revision of the MDR: Stricter Rules for AI and Related Technologies”), Medizin+Technik, 30.03.2026
- Der Cyber Resilience Act und Medizinprodukte – Welche Cybersicherheitsanforderungen gelten für Medizinprodukte? (trans. “The Cyber Resilience Act and medical devices – What cybersecurity requirements apply to medical devices? “) (with Miriam Schuh), MPJ – Medizinprodukte Journal 6/2025, starting p. 403
- Zwischen Cloud und Kontrolle - Datenschutz und digitale Souveränität bei Microsoft 365 (trans. "Between the cloud and control – data protection and digital sovereignty with Microsoft 365") (with Stefan Hessel and Moritz Schneider), Kommunikation & Recht 12/2025, starting p. 755
- Data Act und Geschäftsgeheimnisschutz in der Praxis (transl. "Data Act and trade secret protection in practice") (with Moritz Schneider) ($), GRUR-Prax Magazin 19/2025, 10.10.2025, starting p. 648
- AI Act: Der KI-Verhaltenskodex der EU (trans. "AI Act: The EU's AI Code of Conduct") (with Moritz Schneider) ($), iX Magazin 09/2025, starting p. 94 and heise online
- Liability for software under the new European Product Liability Directive (with Laura Herlitz), International Bar Association, 30.04.2025
- Privacy Policies generativer KI-Plattformen – ein Überblick (trans. „Privacy policies of generative AI platforms – an overview“) ($), heise online, 03.04.2025
- Datenschutz und Cybersicherheit von medizinischen Produkten (trans. "Data protection and cybersecurity for medical products") (with Stefan Hessel and Jeanne Dillschneider), DuD – Datenschutz und Datensicherheit, Issue 03/2025, starting p. 181
- Cyber Resilience Act – von der Theorie zur Praxis (trans. "Cyber Resilience Act – from theory to practice") (with Stefan Hessel and Annika Mischler), Phi Haftpflicht international – Recht & Versicherung, Issue 02/2025, starting p. 66
- AI Act in der Praxis: EU veröffentlicht Leitlinien für Betriebe und Behörden (trans. "AI Act in practice: EU publishes guidelines for businesses and public authorities"), heise online, 11.02.2025
- Nach Trump-Entscheidung: Kippt das Abkommen für Datenübermittlungen in die USA? (trans. "After Trump's decision: Will the agreement on data transfers to the US be overturned?") (with Stefan Hessel), heise online, 29.01.2025
- Software-Anbieter aufgepasst: Sie haften jetzt für fehlerhafte Produkte (trans. "Software providers take note: you are now liable for faulty products"), heise online, 12.11.2024
- Steigende Anforderungen an Cyberversicherungen (trans. "Increasing demands on cyber insurance") (with Stefan Hessel) ($), ZdiW - Zeitschrift für das Recht der digitalen Wirtschaft, 2023, Issue 9-10, starting p. 245
- Aktuelle Rechtsprechung zum Datenschutz- und Cybersicherheitsrecht (trans. "Current case law on data protection and cyber security law") (with Stefan Hessel) ($), ZdiW - Zeitschrift für das Recht der digitalen Wirtschaft, 2023, Issue 9-10, starting p. 253
- Data Privacy Framework: Das zählt beim Datenexport (trans. "Data Privacy Framework: What matters when exporting data") (with Christoph Callewaert) ($), iX Magazin, Issue 10/2023, 19.10.2023, starting p. 100 and heise online, 08.09.2023
- Der Abschlussbericht der Datenschutzkonferenz zu Microsoft 365 – eine kritische Bewertung (trans. "The final report of the Data Protection Conference on Microsoft 365 – a critical assessment") (with Stefan Hessel) ($), RDi - Recht digital, Issue 6/2023, p. 282
- Supply-Chain-Cybersecurity: Neue Herausforderungen (trans. "Supply chain cybersecurity: new challenges") (with Stefan Hessel), iX Magazin, Issue 2/2023, starting p. 74
- Rechtsprechungsreport – Der halbjährliche Praxisüberblick zum Produkthaftungs- und Produktsicherheitsrecht (trans. "Case law report – The half-yearly practical overview of product liability and product safety law") (with Philipp Reusch) ($), Deutscher AnwaltSpiegel, Issue 6/2022, starting p. 11
- Datenschutzrechtliche Herausforderungen beim Einsatz von Microsoft 365 - Kritikpunkte und praktische Umsetzung (trans. "Data protection challenges when using Microsoft 365 – points of criticism and practical implementation") (with Stefan Hessel) ($), Deutscher AnwaltSpiegel, Issue 21/2022, starting p. 7
Award
- 2026: Recognised by Handelsblatt in the category "Deutschlands beste Anwälte – Ones to Watch | Anwälte der Zukunft" in the field of „Data Security and Privacy Law“
- 2026: Recognised by Best Lawyers, LLC. „Best Lawyers: Ones to Watch in Germany (2027 Edition)" in the field of „Data Security and Privacy Law“