Amy Wittmann is a global expert in digital law and emerging technologies, with over 20 years of legal experience spanning the United States, Europe, and international jurisdictions. She advises leading companies on the legal, regulatory, and ethical challenges of innovation—particularly in areas involving artificial intelligence, data protection, platform governance, software licensing, and digital infrastructure.
Her practice is focused on enabling responsible growth in fast-evolving areas such as:
– Artificial Intelligence (AI Act, high-risk systems, algorithmic accountability)
– Data Protection & Privacy (GDPR, UK GDPR, Schrems II, EU–US Data Framework, U.S. state laws)
– Cloud Computing & SaaS Contracts (vendor risk, localization, NIS2/DORA/CRA compliance)
– Open Source & Software Licensing (audit defense, IP strategy, OSS governance)
– Cross-Border M&A and Outsourcing (tech due diligence, compliance carve-outs, integration support)
– Digital Infrastructure & Data Governance (Data Act, cybersecurity, data ethics, digital sovereignty)
– IP Law (patents, trademarks, copyrights in U.S. and Europe)
Amy is admitted to practice law in:
– Germany (Rechtsanwältin, since 2008)
– Ireland (Solicitor, since 2021 – with EU-wide practice rights)
– England & Wales (Solicitor, since 2009)
– United States – Illinois (Attorney at Law, since 1995)
She began her career as a Judge Advocate General (JAG) and civilian attorney for the U.S. Department of Defense, developing deep expertise in public procurement, U.S. federal contracting, and the Federal Acquisition Regulation (FAR). She has held senior counsel and Head of Legal roles in major technology, telecom, and SaaS companies and worked in global law firms advising on digital risk, compliance, and innovation policy.
Amy regularly advises on regulatory interactions and investigations involving national Data Protection Authorities (DPAs) in Germany, Ireland, Italy, and beyond. She is a member of the International Association of Privacy Professionals (IAPP) and the Organization Software Escrow (OSE e.V.).
In addition to her core work in tech law, Amy has extensive experience in international labor law and cross-border HR advisory, including employee data, whistleblowing, internal investigations, and restructuring. She has also advised on complex criminal and fraud matters involving digital forensics, sanctions, and corporate misconduct.
Wittmann Legal Services is an independent international law boutique founded in 2018 by Amy Wittmann, JD. With offices in Munich, Rome, and Chicago, we advise technology-driven companies on global regulatory compliance, digital transformation, and responsible innovation.
Our Core Areas of Expertise
Digital & Emerging Technologies
• – Artificial Intelligence & Algorithmic Risk (AI Act, governance frameworks)
• – Smart infrastructure, autonomous systems, IoT
• – Open Source Software compliance & audits
Data Protection & Privacy
• – GDPR, UK GDPR, Schrems II, EU–US Data Privacy Framework
• – Data Transfer Impact Assessments (TIAs), Binding Corporate Rules, DPIAs
• – U.S. compliance (CCPA/CPRA, HIPAA, state-level privacy regulation)
Cloud, SaaS & IT Contracts
• – Cloud migration, SaaS models, XaaS
• – Vendor audits, security standards, SLA negotiations
• – Compliance with DORA, NIS2, CRA
Digital M&A & Outsourcing
• – Tech-sector due diligence (data, IP, regulatory)
• – Post-deal integration support
• – Outsourcing risk and contract restructuring
Data Governance & Infrastructure
• – EU Data Act, cybersecurity, digital resilience
• – Platform accountability & digital sovereignty
• – Multijurisdictional data policy alignment
Intellectual Property & Innovation
• – Patent, trademark, and copyright strategies (U.S. and EU)
• – IP due diligence and commercialization
• – OSS license compliance, branding & portfolio protection
Defense Contracting & Public Procurement
• – U.S. government contracts (FAR, DoD, civilian agencies)
• – EU digital procurement frameworks (DIGIT, CEF, IT & cloud projects)
• – Risk management for public-private innovation partnerships
Complementary Practice Areas
– Cross-Border Labor & HR Law: Whistleblowing, employee data protection, works council rights, international employment structures, restructuring & mobility.
– Investigations & Criminal Law: Internal investigations, digital evidence, cybercrime, white-collar crime, sanctions compliance, international enforcement support.
Why Clients Choose Us
– Global Practice Authority: Licensed across Germany, Ireland (EU), the UK, and the U.S. (Illinois), with active client engagements worldwide.
– Regulatory Foresight: Early mover in AI Act, DORA, NIS2, CRA, Data Act, and global data governance frameworks.
– Pragmatic Legal Strategy: Legal solutions built to support operational realities, innovation speed, and compliance integrity.
Our Mission
To empower clients to innovate securely, scale globally, and lead with confidence in a rapidly evolving digital world.
Germany ,
United Kingdom ,
Illinois ,
Ireland
