Home / People / Philippe Heinzke
Portrait of Philippe Heinzke

Philippe Heinzke, LL.M.


CMS Hasche Sigle
Kasernenstraße 43-45
40213 Duesseldorf
Languages German, English

Philippe Heinzke advises technology-driven companies at the intersection of technology and law, in particular on the legally compliant implementation of digital business models. As part of the CMS equIP program, he also works with selected start-ups.

The focus of his advice is often on securing and exploiting intellectual property rights (especially in copyright and trade secret law) and the commercial exploitation of data of any kind. In the case of data-driven business models, he provides solution-oriented advice to ensure the legally compliant use of data in accordance with data protection law requirements. In addition to the data protection-compliant implementation of business processes and IT systems, his advice often focuses on the drafting and negotiation of complex data contracts, especially in the case of cross-border data exchange within a group or between customers and suppliers. Philippe Heinzke has negotiated and successfully concluded numerous project, license and software agreements. He also represents clients in court or administrative proceedings, including before regulatory authorities.

A particular specialization of Philippe Heinzke is open source law. He has analyzed well over a hundred open source licenses, works closely with IT partners to identify open source software, and is CMS's contact for Open Chain, a standard for ensuring open source compliance in companies. In the event of violations of open source licenses, he develops solution strategies and assumes representation in and out of court in disputed cases.

Philippe Heinzke has been an attorney at CMS since 2013 and completed a secondment at Hewlett Packard Enterprises in the area of IT outsourcing in 2015. He has been a partner since the beginning of 2022. Prior to joining CMS, he worked for several technology companies, most recently as a software developer.

more less

Listed as top 100 lawyer

Kanzleimonitor 2020-2022

Leading lawyer for IT law and contract law

Kanzleimonitor 2020-2022

Recommended lawyer for IT law

Kanzleimonitor 2019, 2020

"very experienced in IT and data protection"

Mandant, IT-Start-up, 2018

Memberships & Roles

  • International Association of Privacy Professionals (IAPP)
  • German Association for the Protection of Intellectual Property (GRUR)
  • Licensing Executives Society (LES) - Deutsche Landesgruppe e.V. (German member society of LESI)

more less


  • Die EU-Verbandsklagen zur Durchsetzung von datenschutzrechtlichen Schadensersatzansprüche, CR, Heft 9/2021, 582 ff.
  • "Entstehung von Bearbeiterurheberrechten bei möglichem GPL-Verstoß", GRUR-Prax, Heft 18/2021, S. 532
  • Die kollektive Rechtsdurchsetzung bei Verletzungen des Datenschutzrechts, CR, Heft 5/2021, S. 299 ff.
  • "Datenschutz und Cloud-Computing", PRev, Heft 02/2021, S. 101 ff.
  • Kein Anspruch auf Schadensersatz bei entgeltfreier Lizenzierung, Grur-Prax, Heft 02/2021, p. 53
  • Schrems II: Neue Anforderungen an den Transfer personenbezogener Daten in Drittlaender, Grur-Prax, Heft 19/2020, S. 436 ff.
  • Kennzeichenrechtliche Haftung des Werbenden bei Adword-Anzeigen, Grur-Prax, Heft 15/2020, S. 338
  • Datenverarbeitung zur Vertragserfuellung – Anforderungen und Grenzen, ZD, Heft 4/2020, p. 189 seqq.
  • Recht auf Auslistung von Treffern aus Suchmaschinen, GRUR-Prax, issue 24/2019, p. 545 et seqq.
  • Open-Source-Software in Webapps, CR, issue 11/2019, p. 697 seqq.
  • Zum Recht auf Vergessenwerden nach Art. 17 DS-GVO, GRUR-Prax, issue 16-17/2019
  • Der Schutz von Geschaeftsmodellen, Legal Management of Innovation, 2018, p. 136 et seqq., co-authors: Markus Deck and Paetrick Sakowski
  • Kein Anspruch auf Schadensersatz bei GPL-Verletzung, GRUR-Prax, issue 18/2017
  • Abwägung beim Recht auf Vergessenwerden, GRUR-Prax, issue 15/2017
  • Beweislast beim Recht auf Vergessenwerden, GRUR-Prax, issue 09/2017
  • Open-Source-Compliance, CCZ, issue 2/2017, p. 56 et seqq.
  • Softwarelizenzierung mit Creative-Commons-Lizenzen?, CR issue 3/2017, p. 148 et seqq.
  • Unterscheidungskraft durch ungewoehnliche Verkuerzung, GRUR-Prax, issue 21/2016
  • Die Richtlinie zum Schutz von Geschaeftsgeheimnissen, CCZ, issue 4/2016
  • Juristische Fallstricke beim Open-Source-Einsatz im Unternehmen, iX Magazin für professionelle Informationstechnik, iX Special 2016 - Open Source im Unternehmen
  • Vergiss mich: Das Recht auf Loeschung von Suchergebnissen, GRUR-Prax, issue 06/2015, co-author: Jan Freialdenhoven
  • Tell-a-Friend – Ist Online-Empfehlungswerbung noch empfehlenswert?, Kultur & Recht, issue 12/2014
  • Eingesammelt und ausgewertet – was man beim Social-Media Monitoring beachten muss, iX Magazin für professionelle Informationstechnik, issue 06/2014
  • E-Mail Weiterempfehlungen als Werbung? Warum die aktuelle Rechtsprechung des BGH nicht ueberrascht., IP-Update, issue 03/2014
  • Author of various contributions to the CMS Blog and Lexology

more less

Lectures list

  • "Die neuen Standardvertragsklauseln – Übersicht, Tipps zum Umgang und Bedeutung für Datentransfers nach Schrems II", CMS Webinar, 11.06.2021
  • "Schrems II & Cloud Act – Was Unternehmen beachten müssen", OVHcloud Event, 19.05.2021
  • "Update IT- und Datenschutzrecht", SThree Executive Event, 25.02.2021
  • "Der Schutz von Geschaeftsmodellen", Startplatz Accelerator, 05.02.2021
  • "The Protection of Business Models", Startplatz Duesseldorf, 11.08.2020
  • "Key Note: Das Loeschen im Datenschutzrecht", Information Day GDPR, 06.02.2020, Stuttgart
  • "Datenschutz für chinesische Unternehmen", Roadshow Datenschutz für chinesische Unternehmen, Duesseldorf, 05.06.2019
  • "Open Source Compliance", SThree, Duesseldorf, 22.05.2019
  • "Impulsvortrag 'Open Source Compliance'", Coaching Day des Berufsverbands der Compliance Manager (BCM), Duesseldorf, 19.10.2018
  • "Herausforderung Open Source Compliance", Computerfutures, Duesseldorf, 18.01.2018
  • "Herausforderungen durch Digitalisierung", Commercial Roadshow, Duesseldorf, 17/11/2016
  • "Open Source – Freie Software für alle?", Compliance Roadshow, Duesseldorf, 02/11/2016
  • "Know-how-Schutz: Neuerungen. Risiken. Loesungen.", Know-how-Schutz im Unternehmen, Duesseldorf, 07/09/2016
  • "Datenkrake Internet – Warum Sie das Netz (nicht) vergisst", IP-Tea 1/2015, Duesseldorf
  • "Big Data – bigger legal problems?", Bitkom BigData Summit 2014, Hanau

more less


  • 2014: LL.M in Media Law
  • 2013: Second state examination in law and admitted as a qualified German lawyer
  • 2012: Degree (Diplom Sozialwirt) in business studies, business psychology and sociology
  • 2010: First state examination in law

more less
CMS Ex­pert Guide to Schrems II
On 16 Ju­ly 2020, the Court of Justice of the European Uni­on (CJEU) de­clared the EU-US Pri­vacy Shield De­cision to be in­val­id by judge­ment in the “Schrems II” case (C-311/18). Even though the Pri­vacy Shield 2.0 (Trans-At­lantic Data Pri­vacy Frame­work) a


Opin­ion of the CJEU Ad­voc­ate Gen­er­al on Art. 82 GDPR
Ac­cord­ing to the Opin­ion of the CJEU Ad­voc­ate Gen­er­al, not every in­fringe­ment of the GDPR or mere an­noy­ance or dis­pleas­ure about it trig­gers a claim for com­pens­a­tion.   In some cases, the data pro­tec­tion...
CMS ad­vises di­git­al care start-up ucura (DeineP­flege) on Series A fin­an­cing...
Düs­sel­dorf – Di­git­al care start-up ucura, which of­fers in­nov­at­ive di­git­al solu­tions for out­pa­tient care un­der the name “DeineP­flege”, has suc­cess­fully closed its sev­en-di­git Series A round of fin­an­cing...
CMS ad­vises MER­ULIN Garten­baus­er­vice on mer­ger with Raif­feis­en Garten­bau
Düs­sel­dorf – Raif­feis­en Garten­bau GmbH & Co. KG, a hor­ti­cul­ture com­pany based in Korschen­broi­ch (North Rhine-West­phalia), has been merged in­to MER­ULIN Garten­baus­er­vice GmbH & Co. KG, which is headquartered...
Ger­man de­cision may (not) ex­clude US sub­si­di­ar­ies with cloud pro­viders...
In a con­tro­ver­sial data-pro­tec­tion de­cision that has been the sub­ject of crit­ic­al dis­cus­sions, on 13 Ju­ly 2022 the Baden-Württem­berg Pro­cure­ment Cham­ber (Ref. 1 VK 23/22) ruled that even the pos­sib­il­ity...
CMS ad­vises AkzoNo­bel on ac­quis­i­tion of al­loy wheel li­quid coat­ings busi­ness...
Düs­sel­dorf – AkzoNo­bel N.V., a glob­al man­u­fac­turer of paints and spe­cialty chem­ic­als headquartered in the Neth­er­lands, has ac­quired the al­loy wheel li­quid coat­ings busi­ness of Lank­witzer Lack­fab­rik...
CMS Ex­pert Guide to Schrems II – Cyprus
1. Re­quire­ments for data trans­fers us­ing SCC Ex­plains the judg­ment and refers to the EDPB FAQ. 2. Need for ac­tion for the data ex­port­er Data ex­port­ers must check the level of pro­tec­tion in the third...
Schrems II: Re­ac­tions to the judge­ment and the su­per­vis­ory au­thor­it­ies'...
“Schrems II”: Opin­ions of the su­per­vis­ory au­thor­it­ies on Schrems II and re­com­mend­a­tions on the im­ple­ment­a­tion of the judge­ment in in­ter­na­tion­al data trans­fers On 16 Ju­ly 2020, the Court of Justice...
CMS ad­vises Aareal Bank Group on ac­quis­i­tion of Ham­burg-based fintech Col­lect...
Frank­furt/Main – The Aareal Bank Group has ac­quired all the shares in Col­lect Ar­ti­fi­cial In­tel­li­gence GmbH (Col­lectAI), an Otto Group pay­ment solu­tions pro­vider that of­fers AI-based in­tel­li­gent in­voicing...
CMS ad­vises Tech­nia on ac­quis­i­tion of Desys Group
Düs­sel­dorf – Tech­nia, a glob­al know­ledge lead­er in PLM and En­gin­eer­ing, has ac­quired the DESYS Group, a lead­ing Dassault Sys­tèmes part­ner in Ger­many, by way of a 100% share deal. The Desys Group provides...
CMS ad­vises Na­tion­al Ex­press Rail on busi­ness trans­fer fol­low­ing in­solv­ency...
Düs­sel­dorf – Co­logne-based Na­tion­al Ex­press Rail has taken on all the em­ploy­ees in­volved in op­er­at­ing the RE 1 (RRX) and RE 11 (RRX) lines fol­low­ing the in­solv­ency of rail com­pany Abel­lio NRW. Abel­lio...
Series B fin­an­cing round: CMS ad­vises US tech com­pany Bruker Cor­por­a­tion...
Frank­furt/Main – PreO­m­ics GmbH, which is headquartered in Mar­tin­sried near Mu­nich, has raised EUR 13.5 mil­lion in a Series B round of fin­an­cing from Bruker Cor­por­a­tion, a NAS­DAQ-lis­ted US tech com­pany...
De­vel­op­ments in Open Source Law in 2021 in Ger­many: High­er Re­gion­al Court...
Ger­man courts made new rul­ings on Open Source li­censes in 2021, such as the de­cision by the Karls­ruhe High­er Re­gion­al Court deal­ing with the ef­fect of the co­pyleft clause of the GPL-2.0. Ac­cord­ing to...