Pascal Bronner

Attorney at Law

FOREIGN LANGUAGES

English

PRACTICE AREA

Pascal Bronner provides comprehensive advice on IT, data, and data protection law, as well as on artificial intelligence law. He assists clients in designing legally compliant digital business models, implementing IT projects and digital transformation processes, and ensuring compliance with national and European regulatory requirements. With a practical and solution-oriented approach, he supports companies in the development and deployment of innovative technologies. A particular focus of his practice is the comprehensive legal support of AI projects.

His legal practice builds on several years of interdisciplinary academic experience in research and teaching at the Technical University of Munich in his current areas of practice. Pascal Bronner contributed to the design and implementation of projects at the intersection of law and digitalization and deepened his expertise through his dissertation on AI regulation.

CAREER

· High school diploma in Tuttlingen
· Studied at the University of Konstanz and Ludwig Maximilian University of Munich
· First state examination in Munich
· Legal clerkship at the Munich Higher Regional Court, with placements in Munich and Brussels
· Second state examination in Munich
· Currently a doctoral candidate (Dr. iur.) at the Technical University of Munich
· Admitted to the bar in 2026

• Commentary on Articles 2, 18, and 19 of the GDPR (co-authored with P. Gola) and Section 86 of the BDSG, in: Gola/Heckmann/Rost (eds.), GDPR/BDSG Commentary, 4th ed. 2026 (forthcoming).
• Commentary on Articles 10, 24, and 25 of the CRA, in: Heckmann/Paschke (eds.), CRA, 1st ed., 2025.
• Expert opinion for the Transportation Committee of the German Bundestag: Draft bill by the Federal Government for a Fifth Act Amending the Road Traffic Act (StVG) and Road Traffic Regulations (specifically regarding digital driver’s licenses and digital parking enforcement), Committee Document 21(15)56-F, February 19, 2026 (co-authored with D. Heckmann and J. Klauser).
• ECJ: The GDPR Includes a “Right to an Explanation,” Note on ECJ Decision of Feb. 27, 2025 – C-203/22, in: Journal of Private Law of the European Union (GPR) 2025, p. 214 ff.
• Enforcement in the Context of the AI Regulation, in: Communication and Law (K&R) 2025, p. 164 ff.
• Cyber Resilience through Data Protection (with D. Heckmann and N. Ziegler), in: Data Protection and Data Security (DuD) 2024, pp. 572 ff.
• Risk Classification, Risk Assessment, and Risk Mitigation under the AI Regulation, in: Artificial Intelligence and Law (KIR) 2024, pp. 55 ff.
• Lawfulness of Data Processing in Scientific Research at Public Universities (with F. Wiedemann), in: Journal of Data Protection (ZD) 2023, pp. 77 ff.