Dr. Nils Lölfing

As Senior Counsel in our Technology & Communications Sector Group at Bird & Bird, I provide pragmatic, solution-driven advice on all aspects of data and information technology law. With over a decade of experience as a Tech, AI, and Data Lawyer, I have a strong focus on and extensive expertise in projects involving AI, particularly generative AI, advising clients across a range of industries, including life sciences, healthcare, automotive, and technology.

I have deep expertise in AI-related legal matters, including data usage under the EU GDPR, product regulation in the context of EU product safety and liability laws, and AI governance. My work in AI governance focuses on helping clients implement effective processes and tools, such as algorithmic impact assessments, transparency frameworks, and risk management protocols, to ensure compliance with emerging regulatory standards like the EU AI Act and to foster ethical and responsible AI development.

I also have a strong background in European and German product safety law and extensive experience representing clients before market surveillance authorities. This unique combination positions me as a trusted advisor on the EU AI Act, which is grounded in EU product safety principles.

A frequent speaker at AI conferences in Europe and internationally (e.g., the US and UK), I have presented at major events such as ITechLaw and AI Assurance in Mobility. I am also a regular contributor to leading AI industry publications. Notably, I serve as the co-editor of Wolters Kluwer's International Handbook of AI Law (2025) and the general editor of the Chambers Artificial Intelligence Guide (2024 and 2025).

• Advising various global companies on the requirements of the EU AI Act: Supporting compliance with transparency requirements and assessing high-risk AI systems in accordance with the provisions of the EU AI Act, including strategic recommendations to mitigate compliance risks. Comprehensive analysis of the regulations for General Purpose AI (GPAI) and their impact on products and services.
• Developing a comprehensive contractual framework for AI projects for a leading payment service provider: Drafting contract templates and playbooks with a focus on data rights, liability, and regulatory requirements, including GDPR and EU AI Act compliance.
• Advising an international company on the implementation of an AI governance strategy: Developing a framework for responsible AI use, risk management, and ethical considerations in alignment with European and local regulations.
• Supporting a social media company in the deployment of an AI chatbot: Providing data protection advice under GDPR, particularly regarding end-user data processing and innovative AI functionalities.
• Advising a globally leading sportswear manufacturer on AI projects in customer service and HR: Evaluating emotion recognition technologies and automated decision-making systems, focusing on GDPR and EU AI Act compliance.