German precision, boutique agility. We advise US and global technology companies — quietly, precisely, and on Pacific time.
Navigating the Digital Services Act and AI Act for international tech companies: From strategic advising and practical implementation to legal support for your representative obligations under Art. 13 DSA and Art. 22/54 AI Act — the appointed representative function itself is available from Regingada UG (haftungsbeschränkt) under a separate contract. We provide comprehensive legal guidance across both frameworks.
Learn MoreMeet us in our meeting- and office spaces in Munich, at our law firm in Bamberg, or online.
Contact UsWhat might have risen to an eagle's flight can be reduced to a snail's pace by the law.
After Friedrich Schiller, The Robbers (Act 1, Scene 2)
Kanzlei Theo Funk is a Bavaria-based EU digital regulation boutique advising US and global technology companies. With a core focus on the Digital Services Act and the AI Act, we navigate high-stakes mandates across the full stack of EU digital law. We provide top-tier, academically rigorous advocacy designed for the complexities of the European tech market. Our counsel spans the full compliance lifecycle — strategic advisory, practical implementation, ongoing monitoring, and legal support for statutory-representation duties under Art. 13 DSA and Art. 22/54 AI Act.
Practice areasDigital Services Act (DSA) · German Digital Services Act (DDG) · AI Act · Digital Markets Act (DMA) · GDPR · Data Act · Digital Content Directive · Consumer Rights Directive · E-Commerce Directive · Portability Regulation
Services
End-to-end advisory on DSA, AI Act, DMA and adjacent EU digital frameworks for technology companies.
Read moreAbout
Rechtsanwalt, Bamberg. Specialist in EU digital regulation — DSA, AI Act, DDG.
Read moreEngagement
Phased scoping, compliance roadmap, and structured implementation — adaptable to project or retainer.
Read moreEngagement
Confidential, no-fee briefings for boards and senior leadership preparing for EU digital obligations.
Read moreServices
Counsel on representative obligations under Art. 27 GDPR, Art. 13 DSA and Art. 22 / 54 AI Act — the appointed function itself via Regingada UG (haftungsbeschränkt) under a separate contract.
Read moreAbout
Direct partner-level handling with statutory safeguards under §§ 51, 53, 55 BRAO.
Read moreFees
Transparent pricing for EU digital compliance — fixed-fee modules and structured retainers.
Read moreContact
Reach the firm directly by phone, email, or short request form.
Read moreLegal
Statutory disclosures under § 10 BORA — registration, regulator, and professional rules.
Read moreRegingada Compliance Suite
Five EU regimes — mapped, sourced, mandate-ready.
Self-check Regulation map Handover to counsel
Start the self-check Free · about 10 minutes · no registrationSoftware by Regingada UG (haftungsbeschränkt), in cooperation with Kanzlei Theo Funk. Orientation only, not legal advice; assessment and mandate rest exclusively with Kanzlei Theo Funk.
Counsel on Art. 13 DSA representative obligations for providers without an EU establishment: applicability analysis, appointment and contract setup, and legal support for communications with Digital Services Coordinators and the European Commission — including proceedings where required. The appointed representative function is provided, where desired, by Regingada UG (haftungsbeschränkt) under a separate contract — while Kanzlei Theo Funk remains engaged in its own mandate for ongoing compliance and regulatory support.
Read more...Counsel on authorised-representative obligations under Art. 22 AI Act (high-risk systems) and Art. 54 AI Act (GPAI models) for providers without an EU establishment — appointment setup, technical-documentation duties, EU database registration (Art. 49) and serious-incident processes (Arts. 72–73). The appointed function is provided, where desired, by Regingada UG (haftungsbeschränkt) under a separate contract — while Kanzlei Theo Funk remains engaged in its own mandate for ongoing compliance and regulatory support.
Non-EU providers may need to appoint an EU representative under Article 27 GDPR. Counsel on applicability, Article 27(2) exemptions, designation requirements, and related data-protection compliance. The representative function is provided, where desired, by Regingada UG (haftungsbeschränkt) under a separate contract — while Kanzlei Theo Funk remains engaged in its own mandate for ongoing GDPR and regulatory support.
Audit prep for DSA-regulated services. Review of transparency reports under Arts. 15 and 24 DSA, content-moderation procedures, notice-and-action systems, internal complaint-handling per Art. 20, and trusted-flagger protocols. We brief the audit team and stay in the room.
DMA, Data Act, Digital Content Directive, Consumer Rights Directive, E-Commerce Directive, Portability Regulation. The framework around the framework — usually where the unexpected obligations live. We map exposure across the full stack and flag what actually applies to your service.
Out-of-court dispute resolution under Art. 21 DSA, plus bespoke arbitration and mediation clauses for tech-IP disputes. WIPO and JAMS standards where they fit; ad hoc panels where they don't. The aim: keeping proprietary algorithms out of public discovery.
AI Act work for providers and deployers. Risk classification (prohibited / high-risk / GPAI / minimal), Annex III mapping, conformity assessment routes, technical documentation under Art. 11 and Annex IV, post-market monitoring per Art. 72. We translate the obligation list into a working compliance program.
Attorney at Law — EU Digital Regulation
Attorney Theo Funk (Rechtsanwalt) advises US technology companies on matters of EU digital regulation — as the strategic bridge between US innovation and European regulation. His practice focuses on the Digital Services Act (DSA), the AI Act, and the German Digital Services Implementation Act.
The firm secures its clients' "right to operate" in the European market — from counsel on representative obligations under Art. 27 GDPR, Art. 13 DSA and Art. 22 / 54 AI Act, through to in-depth gap analyses and risk-mitigation strategies. Southern German precision meets the speed of digital markets.
Digital Services Act
AI Regulation
Digital Services Implementation Act
We work with digital service providers and AI system operators on a phased or retained basis. Engagements can be scoped to a single phase or structured as an integrated compliance program — phases integrate into a single, continuous regulatory mandate and do not stand alone.
Initial scoping engagement to determine your exposure under the Digital Services Act, AI Act, and adjacent EU frameworks. We classify your service, map territorial reach, and establish a clear regulatory risk profile as the baseline for all subsequent work.
Detailed legal analysis of applicable obligations across all relevant regimes, including cross-regime coherence (DSA · AI Act · GDPR · Data Act). We deliver a written compliance roadmap with prioritized actions, timelines, and risk categorization — in line with recognized compliance management principles (including ISO 37301).
Structured implementation led and coordinated centrally, covering the full compliance program: documentation frameworks, policy drafting, transparency reporting, and authority communication. Where required, we structure and paper the appointment of your EU representative — performed, where desired, by Regingada UG (haftungsbeschränkt) under a separate contract — and provide legal support for communications with the Bundesnetzagentur and the European AI Office.
Ongoing advisory relationship led by the firm to track regulatory developments, enforcement trends, and guidance from national Digital Services Coordinators and the European Commission. Structured as a monthly or quarterly retainer with scheduled compliance reviews, incident response support, and on-call counsel.
If your digital service, data processing, or AI system reaches the EU without an establishment here, more than one EU regime may require you to appoint a representative in the Union: Art. 13 DSA, Art. 27 GDPR, and Art. 22/54 AI Act. Without the required designation, you are in technical non-compliance from day one.
Direct partner-level handling with structured safeguards.
Engagements are led and handled directly by Rechtsanwalt Theo Funk. This structure provides clients with a single point of accountability, direct partner-level involvement throughout the mandate, and consistent strategic oversight across all phases.
I.
For matters requiring specialist input outside the core scope of EU digital regulation — such as German civil litigation, tax structuring, or corporate transactions — clients can be referred to established specialist counsel on a transparent, case-by-case basis. Any such referral is subject to the client's prior consent and is documented in writing.
II. §§ 51, 53, 55 BRAO
The firm maintains professional indemnity insurance substantially exceeding the statutory minimum under § 51 BRAO. In the event of extended unavailability, all client matters are subject to the statutory succession framework of the German Federal Bar under §§ 53 and 55 BRAO, which ensures orderly continuation of representation and protection of client interests in any circumstance.
III. § 43a BRAO · § 203 StGB
All specialist counsel arrangements are bound by the same professional confidentiality obligations under § 43a BRAO and § 203 StGB that apply to the firm itself. Client files, communications, and data remain protected under attorney-client privilege at all times.
briefings
Non-EU digital businesses face three parallel EU representative duties (Art. 13 DSA, Art. 27 GDPR, Arts. 22/54 AI Act), each with its own trigger, mandate and liability profile.
Read Morebriefings
Overview of Germany’s NIS2 national transposition, the expanded obligations, and the official BSI affected-party assessment tool.
Read Morenews
Analysis of the CJEU’s Russmedia decision and its consequences for US and international platforms operating in the EU.
Read Morenews
Legal analysis of how Regulation (EU) 2024/1689 applies to agentic AI systems whose output is no longer text, but action.
Read MoreFixed-price packages for predictable budgets; hourly billing for work beyond scope. All terms are agreed in writing (§ 3a RVG text form) in a separate fee agreement before the engagement begins.
Hourly rate
175 € per hour, net · billed in 6-minute incrementsFor business clients outside Germany, reverse charge applies pursuant to § 3a(2) UStG (EU B2B) or non-taxability for third-country services.
Fixed-price packages
Compact entry-level analysis for an initial risk assessment.
890 €net
approx. 6 hours
Full DSA compliance assessment with prioritised roadmap.
2.250 €net
approx. 14 hours
Comprehensive review incl. AI Act, vendor review, and policy drafting.
3.750 €net
approx. 25 hours
Flagship Engagement
For companies with significant EU market presence and ongoing strategic regulatory needs. Dedicated retainer engagement covering ongoing counsel on Art. 27 GDPR, Art. 13 DSA and Art. 22 / 54 AI Act representative obligations and continuing regulatory support (appointed representative, where desired: Regingada UG (haftungsbeschränkt) under a separate contract), priority response, and regular board-level briefings.
The retainer works hand in hand with Regingada UG as appointed representative: separate contract, coordinated onboarding — no bundle price.
*SME terms apply to the firm's out-of-court legal services, not to Regingada UG's representation agreement.
Project engagement from
25.000 €
custom scope · net
SME-qualified: from €20,000 — under our SME programme*
Monthly retainer from
2.500 €
incl. allocated hours · net
SME-qualified: from €2,000 — under our SME programme*
Alternatively billed hourly under a fee agreement.
Offered exclusively on the basis of individual scoping in the initial consultation.
Different billing regimes apply depending on the nature of the engagement. Hourly rates and fixed-price packages relate to advisory and out-of-court work.
§ 34 RVG
Gap analyses, due diligence, ongoing compliance advisory, legal opinions and memoranda on DSA and AI Act.
Freely negotiable via fee agreement. Specifically: hourly rate or fixed-price package (see above).
§ 3a RVG
Representation before supervisory authorities in DSA and AI Act proceedings (the appointed representative function under Art. 13 DSA / Art. 22, 54 AI Act sits with Regingada UG — separate contract), submissions to authorities, regulator communications, pre-litigation correspondence.
Fee agreement (hourly rate or monthly retainer) or alternatively statutory business fees pursuant to VV RVG No. 2300 et seq.
VV RVG 3100 ff.
Action and appeal proceedings before administrative and civil courts, interim injunctions, representation in administrative-fine proceedings.
Statutory fees based on amount in dispute (§ 49b(5) BRAO). A fee agreement is possible but must not fall below statutory fees (§ 49b(1) BRAO).
Complementary offering
EU digital compliance matters just as much for growing companies — and it should be accessible. The programme offers qualifying SMEs and early-stage companies a 20% reduction on all out-of-court services.
Eligibility · EU Recommendation 2003/361/EC
Programme terms
| Service | List price | SME programme |
|---|---|---|
| Hourly rate | 175 € | 140 € |
| DSA Quick Scan | 890 € | 710 € |
| Gap Analysis & DD Report | 2.250 € | 1.800 € |
| Full Compliance Review | 3.750 € | 3.000 € |
Evidence via commercial register extract, latest annual accounts, or confirmation by a duly authorised officer. Programme terms apply for the first twelve months of the engagement, after which pricing automatically reverts to list. Capacity-limited to three concurrent programme mandates. The reduction applies exclusively to out-of-court advisory and representation under § 34 RVG; statutory minimum fees under § 49b(1) BRAO cannot be undercut for court representation.
Troppauplatz 1d, 96052 Bamberg, Germany
