Skip to content
About
Andreas Maetzler

Andreas Maetzler

Datenschutzbeauftragter

Certifications

Certification badgeCertification badgeCertification badge

Biography

Dr. Andreas Mätzler ist Datenschutzanwalt und Partner bei IURO – der Anwaltskanzlei, die für alle unsere Produkte juristische Expertise bereitstellt. Er verfügt über Datenschutzzertifikate verschiedener Institutionen und ist designierter Datenschutzbeauftragter für Banken, Finanzinstitute, Technologie- und Gesundheitsunternehmen. Prighter basiert auf seinem fundierten juristischen Wissen und seiner praktischen Erfahrung in der Durchführung von Datenschutzprojekten.

Education

  • 2007 Universität Wien (Mag. jur.)
  • 2009 Universität Wien (Dr. jur.)
  • 2011 Anwaltsprüfung

Weitere Positionen:

  • Botschafter der European Legal Tech
  • Association (ELTA)
  • Gründungspartner ANTOMED OG

Publications

  • The Right to Sanitation in Austria (gemeinsam mit Otto Dietrich)
  • The Right to Water in Austria (gemeinsam mit Otto Dietrich)
  • Handel mit Wertpapieren durch juristische Personen erfordert eine Bankkonzession (gemeinsam mit Otto Dietrich)
  • Der andere Weg zum Geld - Finanzierungen von Immobiliengesellschaften abseits von Bankkrediten
  • Neue Möglichkeiten für Verpfändungen – Die Änderung des
  • Finanzsicherheitengesetzes (gemeinsam mit Thomas Hebein)
  • Die neue Zeitrechnung – Geldwäsche
  • Compliance für Rechtsanwälte nach dem BRÄG 2016
  • Checkliste – Geldwäscheprüfung bei der Aktanlage

Articles by Andreas Maetzler

Auto-generated banner for EU AI Act: Obligations of providers of general-purpose AI (GPAI)

EU AI Act: Obligations of providers of general-purpose AI (GPAI)

As artificial intelligence increasingly plays a central role in innovation, the European Union has taken an important regulatory step with the AI Act. ...

Andreas Maetzler's profile pictureKatharina Jokic's profile picture
By Andreas Maetzler, Katharina Jokic
Auto-generated banner for NIS 2 Self Assessment

NIS 2 Self Assessment

Take our self assessment today to check your status under the NIS 2!

Andreas Maetzler's profile pictureKatharina Jokic's profile picture
By Andreas Maetzler, Katharina Jokic
Auto-generated banner for Enforcement of the Digital Services Act is Coming. What Does It Mean for You?

Enforcement of the Digital Services Act is Coming. What Does It Mean for You?

The EU is ramping up DSA enforcement, especially for VLOPs like X. With the 16 April 2025 reporting deadline ahead, businesses should act now to ensure compliance.

Andreas Maetzler's profile picture
By Andreas Maetzler

NIS Representation in the EU and UK – Is the March 31 deadline a turning point?

Digital service providers had to appoint a NIS rep in the UK by Mar 31, 2021. Check if this applies to you and learn about the EU/UK requirements and background.

Andreas Maetzler's profile picture
By Andreas Maetzler
Auto-generated banner for The EU Digital Services Act: Are you ready to meet your reporting obligations?

The EU Digital Services Act: Are you ready to meet your reporting obligations?

The DSA applies to intermediary services, with obligations increasing by service type—especially for hosting, online platforms, and VLOPs/VLOSEs. This article explores the details.

Andreas Maetzler's profile pictureKatharina Jokic's profile picture
By Andreas Maetzler, Katharina Jokic
Auto-generated banner for DSA Checklist: Information to be included in the Transparency Report under the Digital Services Act

DSA Checklist: Information to be included in the Transparency Report under the Digital Services Act

Intermediary service providers must publish annual Transparency Reports, with requirements varying by service type to match their societal impact and risk level.

Katharina Jokic's profile pictureAndreas Maetzler's profile picture
By Katharina Jokic, Andreas Maetzler
Auto-generated banner for The role of the legal representative under the Digital Services Act

The role of the legal representative under the Digital Services Act

The Digital Services Act (DSA) is another key corner stone of the "Digital Strategy for Europe" and part of a new generation of regulations for digital governance.

Andreas Maetzler's profile pictureKatharina Jokic's profile pictureCharlotte Mason's profile picture
By Andreas Maetzler, Katharina Jokic, Charlotte Mason

CCPA: Managing Consumer Rights - CPRA regulations now enforceable

Enforcement of CPRA regulations can now begin immediately, following a court ruling—organizations should prepare for stricter enforcement and potential penalties going forward.

Andreas Maetzler's profile pictureCharlotte Mason's profile picture
By Andreas Maetzler, Charlotte Mason

Ready for the new Swiss Data Protection Law? Implications for organizations outside Switzerland

The revised Swiss Federal Act on Data Protection (RevFADP), which takes effect from September 1, 2023, brings Switzerland's data protection regime in line with the GDPR and has significant implications for organizations outside Switzerland.

Andreas Maetzler's profile pictureCharlotte Mason's profile picture
By Andreas Maetzler, Charlotte Mason

Private or public, does it matter?

Data protection is becoming increasingly complex in the education sector. Learn more about the extraterritorial scope of privacy laws and the need for education providers to appoint a representative.

Andreas Maetzler's profile pictureCharlotte Mason's profile picture
By Andreas Maetzler, Charlotte Mason
Auto-generated banner for From CCPA to CPRA: New rules for handling consumers’ rights

From CCPA to CPRA: New rules for handling consumers’ rights

With 1 January, 2023, the CPRA entered into force. Main changes are related to privacy rights of Californian residents with the CPRA introducing new rights as well as amending rights already granted under CCPA.

Andreas Maetzler's profile pictureCharlotte Mason's profile picture
By Andreas Maetzler, Charlotte Mason

Turkish Data Protection Law (KVKK), VERBIS registration and what to do before December 31st, 2021!

Compliance with the Turkish data protection law (KVKK) is getting serious. 31 December 2021 is the deadline for the registration with the Data Controller Registry (VERBIS) and for the appointment of a representative in Turkey.

Andreas Maetzler's profile picture
By Andreas Maetzler

“The bad guys do not appoint Art. 27 representatives” but get fined!

Commentary on the Dutch Data Protection Authority imposing a fine of up to EUR 645,000.

Andreas Maetzler's profile pictureClara Sator's profile picture
By Andreas Maetzler, Clara Sator

The Role of a Representative under EU and UK GDPR after Brexit

As of Jan 1, 2021, EU/UK firms must appoint a privacy rep, like non-EU firms. Learn more about this legal obligation, no matter where your company is based.

Andreas Maetzler's profile picture
By Andreas Maetzler

Brexit and UK Privacy Representation

We put together information on the most burning questions when it comes to Brexit and UK Privacy Representation. To get the topic off your mind in an easy and hands-on way.

Andreas Maetzler's profile picture
By Andreas Maetzler