What lexICT Data Protection Consultants does

lexICT GmbH is a privately-held boutique data protection consulting firm headquartered in Hannover, Lower Saxony, with a second office in Vienna, Austria, operating through two national legal entities (HRB 205615 in Hannover; FN 578688m in Vienna). The firm is organized around an exclusively lawyer-based team specialized in data protection, positioned at the intersection of law and technology, and delivers services through direct, individualized client engagement rather than templated delivery. The business model is professional services / sales-led, with a free initial consultation as the funnel entry and direct sales to enterprises and mid-market clients across German-speaking Europe.

The core service portfolio covers external Data Protection Officer (DPO) mandates under GDPR Article 37, GDPR/BDSG consultation, data protection research support, legal opinions and assessments, IT-security advisory, and corporate training. Adjacent specialized lines extend the franchise into EU AI Act (KI-VO) consulting anchored on a dedicated ai-act.io platform, GDPR audits, Hinweisgeberschutz (Whistleblower Protection Act / HinSchG) advisory, and industry-specific offerings for e-sports and gaming. The firm has also productized training via the lexICT Academy and operates the Digital Health Law Network as an ecosystem platform linking data protection, IT/IP law, and research law for healthcare clients. Thought leadership is reinforced through regular blog content, webinar programming (e.g., "5 Jahre DSGVO"), and participation as a partner, speaker and exhibitor at the Handelsblatt Datenschutzkongress.

Commercially, lexICT operates without disclosed pricing, no external funding, and no parent company; the managing directors (Prof. Dr. Fabian Schmieder, Kai Korte, Jonathan Stoklas) appear to hold ownership/control. Headcount is approximately 11, the geographic footprint covers Germany and Austria, and the firm has invested in senior credibility hires — notably Barbara Thiel, former Lower Saxony State Data Protection Commissioner, joining as Of Counsel in January 2025. Marketing is primarily content-driven (blog, webinars, conferences, the Digital Health Law Network) with direct consultative sales through Hannover and Vienna offices plus a website callback service.

Name

lexICT Data Protection Consultants

Legal name

lexICT GmbH

Website

https://lexict.de

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Ownership category

akta.pro rank

Headquarters

HQ city

Hannover

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Data Protection Consulting Services: lexICT generates revenue through professional consulting services including external Data Protection Officer (DPO) services, legal consultation, research support, legal opinions/assessments, IT security, and training. The firm operates as a boutique consultancy with a team of specialized lawyers.

Go-to-market motion1 record

Distribution channels2 records

Marketing channels4 records

Core offering

lexICT is a boutique data protection consulting firm providing specialized advisory services at the intersection of law and technology. Its core offerings include external Data Protection Officer (DPO) services under GDPR Article 37, GDPR/BDSG consultation, legal opinions and assessments, research support for data protection in research contexts, IT security advisory, and employee training programs. Services are delivered by a team of exclusively lawyer-staffed specialists who tailor each engagement to the client's unique processes rather than using generic templates.

Product overview

lexICT Data Protection Consultants operates as a data protection consulting firm offering a portfolio of specialized services. The core offerings include External Data Protection Officer services, GDPR/BDSG consultation, research support, legal opinions and assessments, IT-security, and employee training. Specialized services expand into AI-Act/KI consulting, GDPR audits, whistleblower protection, and industry-specific consulting for e-sports and gaming. The company also maintains the lexICT Academy for structured training programs and hosts the Digital Health Law Network as a community platform for healthcare and digital law professionals.

Differentiator

Problem solved

Functional benefit

Products and services

• External Data Protection Officer (External DPO) Provision of external data protection officer services for organizations that need to appoint a qualified DPO under GDPR Article 37. Delivered by lexICT's team of specialized lawyers serving as the outsourced DPO.
• Data Protection Consultation Advisory services on GDPR and BDSG compliance providing pragmatic solutions for data protection matters tailored to individual client needs.
• Research (Data Protection in Research) Research services focused on data protection in research contexts, supporting academic and commercial research organizations with data protection compliance matters.
• Legal Opinions and Assessments Preparation of data protection legal opinions and assessments, including surveys and evaluations of organizational data protection compliance status.
• IT-Security IT security and data protection services combining information security expertise with data protection compliance requirements for client organizations.
• Training Data protection training programs for businesses and employees to build awareness and ensure compliance understanding across organizations.
• KI-VO / AI Act Consulting Consulting services on artificial intelligence and the EU AI Act (KI-VO), helping organizations navigate AI regulation compliance requirements.
• Data Protection Audit (Auditierung) GDPR-compliant data protection audits to assess and verify organizational compliance with data protection requirements.
• lexICT Academy Educational platform offering structured training programs for data protection professionals and organizational compliance training.
• E-Sport und Gaming Data Protection Specialized data protection consulting services tailored for the e-sports and gaming industry sector.
• Whistleblower Protection (Hinweisgeberschutz / HinSchG) Consulting on whistleblower protection and HinSchG (Whistleblower Protection Act) compliance requirements for organizations.
• Digital Health Law Network Network platform connecting organizations and individuals interested in the digital transformation of healthcare, digital health applications, and innovation, combining ethics, law, and security expertise.

Segments1 record

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

Six partnerships are on record, tiered minor and core.

• Handelsblatt DatenschutzkongressminorGTM or Marketing Partner · 8 May 2025lexICT is a partner of the Handelsblatt Datenschutzkongress, participating as a speaker and exhibitor at the 26th congress in Berlin.
• Barbara ThielminorOthers · 20 January 2025Barbara Thiel, former data protection authority official, joined lexICT Data Protection Consultants and lexICT legal as Of Counsel. Barbara Thiel previously served as the Lower Saxony State Data Protection Commissioner (LfD Niedersachsen).
• Lawford Davies & Co. Ltd.minorStrategic or Co-development PartnerProf. Dr. Nils Hoppe, Partner at Lawford Davies & Co. Ltd. and Managing Director of Centre for Ethics and Law in the Life Sciences (CELLS), is involved in the Digital Health Law Network organized by lexICT.
• Hochschule Hannover (Hanover University of Applied Sciences)minorStrategic or Co-development PartnerProf. Dr. Fabian Schmieder serves as Professor for Media Law at Hochschule Hannover. The university connection supports lexICT's academic and research activities.
• lexICT legal PartG mbBcoreOtherslexICT legal PartG mbB is a separate legal entity (law firm) that works alongside lexICT GmbH. Key team members including Prof. Dr. Fabian Schmieder (Of-Counsel) and Kai Korte (Partner) are part of lexICT legal. The two entities collaborate to provide comprehensive data protection and legal services.
• Wirtschaftsförderung der Region Hannover (Region Hannover Economic Development)minorGTM or Marketing PartnerThe Wirtschaftsförderung der Region Hannover co-organized the KI.WI Stammtisch (AI meetup) with lexICT in November 2025 on the topic of personal reference of AI models.

Scale indicators1 record

Recent moves3 records

Expansion highlights6 records

Direct peers

• Bird & Bird: International law firm with one of Europe's strongest data protection and technology law practices, including a major German team in Düsseldorf and Frankfurt. Directly competes for sophisticated German GDPR and AI Act mandates with similar high-end, specialist positioning.
• Taylor Wessing: UK/German law firm with a well-known technology, IP, and data protection practice and German offices in key cities. Comparable to lexICT in serving tech-oriented clients needing data protection and digital law advice, though at significantly larger scale.

Broad incumbents

• Hogan Lovells: Global law firm with a prominent German data protection and cybersecurity practice serving enterprise clients. Competes with lexICT for complex German GDPR matters, but as part of a much broader full-service legal offering.
• Deloitte Germany: Big 4 firm offering data protection, privacy engineering, and AI compliance consulting in Germany. Overlaps with lexICT on DPO services, GDPR implementation, and AI Act readiness for enterprise clients.
• Linklaters: Global law firm with German offices (Frankfurt, Munich) and a strong data protection and digital regulation practice. Overlaps with lexICT on sophisticated GDPR/AI Act work but competes across many other practice areas.
• EY Germany: Big 4 firm with a German risk and compliance practice covering GDPR, DPO-as-a-service, and AI governance. Competes with lexICT for mid-market and enterprise compliance mandates, but through a broader advisory platform.
• Baker McKenzie: Global law firm with significant German presence and established data protection practice. Competes with lexICT for cross-border GDPR advisory, especially for multinational clients, as part of a broad corporate/regulatory offering.
• PwC Germany: Big 4 consulting firm with a sizable German risk, compliance, and data protection advisory practice. Overlaps with lexICT on GDPR consulting, audits, and DPO services, but as part of a much wider consulting portfolio.
• KPMG Germany: Big 4 firm with established German data protection, cybersecurity, and AI compliance practices. Competes with lexICT on enterprise GDPR audits and AI Act advisory, leveraging larger delivery capacity and cross-disciplinary teams.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/lexict-datenschutzberatung

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about lexICT Data Protection Consultants