Bird & Bird excels in handling complex regulatory and advisory data protection matters, including cross-border compliance and emerging technologies. The team regularly advises on international data transfers, data compliance, and blockchain issues for large tech companies. Regulatory enforcement also falls within the scope of the practice. Berend Van Der Eijk and Wilfred Steenbruggen both lead the practice, with van der Eijk handling clients that rely on technology and data for their businesses as well as fintech companies. Steenbruggen was promoted to partner in 2023 and advises both international clients and start-ups on regulatory issues. Chloë Baartmans and Shima Abbady are also noted for assisting with all data-related issues.

Brinkhof continues to excel in the field of data privacy and data protection, representing key tech clients in enforcement proceedings and investigations by the Dutch Data Protection Authority, as well as appeals against its decisions. The team also handles GDPR matters and other regulatory issues for a variety of sectors including financial services, healthcare, pharmaceuticals, platforms, and TMT companies. Clientele includes major US technology platforms, which the firm advises on complex enforcement matters. Practice head Quinten Kroes is a key contact in this area for many notable clients. Remon van Saane is key to the team assisting in a wide range of data protection matters. Media expert Remy Chavannes handles issues that span both privacy and media law, while Dorien Verhulst is a specialist in lawful interception. Manon Oostveen is also noted.

‘The go-to team for larger and complex data protection matters‘, De Brauw Blackstone Westbroek is an expert in handling high-risk privacy and cybersecurity issues. The team focuses largely on public and private enforcement, regularly assisting clients with investigations and litigation. Follow-on mass claims civil litigation, data infringement, and cybersecurity incident responses are particular strengths of the group. Clients typically include multinational technology companies and online platforms. Geert Potjewijd leads the practice together with Axel Arnbak. Potjewijd specialises in complex multidisciplinary litigation and regulatory enforcement, while Arnbak is an expert in both privacy and cybersecurity matters. Arjan Kleinhout adds public law knowledge to the practice, and Mirjam van Dam assists in high-stake litigation.

The data privacy and cybersecurity practice at Hogan Lovells International LLP is led by Joke Bodewits, who is praised for her expertise in privacy regulations. Bodewits advises on both European and global data compliance projects, data governance strategies, and cybersecurity matters. The firm is known for its strong life sciences and health care sector advice, but also advises IT, technology, and large corporations on their data privacy issues. It also routinely advises on cross-border mandates. Working closely alongside Bodewits is Chantal van Dam who is well-versed in the fields of data protection and cybersecurity. Van Dam has actively been supporting global clients with company and personal data issues related to acquisitions and sale of companies.

Kennedy Van der Laan is well-versed in administrative enforcement law and data protection law, allowing it to advise on a range of contentious and non-contentious privacy issues. The firm excels in assisting clients in the financial, logistics, telecommunications, entertainment, and healthcare sectors. The team routinely undertakes investigations and enforcement proceedings carried out by data protection regulators both locally and internationally and recently formed a 24/7 incident response team. Hester de Vries, Quirine Tjeenk Willink, Rosalie Brand, and Judica Krikke all jointly chair the practice. De Vries handles issues at the forefront of data protection such as AI, open data, platforms for data sharing, and adtech. Litigator Tjeenk Willink is an enforcement law specialist, Brand was promoted to partner in 2023 and mainly supports clients with cybersecurity incidents. Krikke focuses on complex digital transformation processes, IT and cloud outsourcing issues. Elise Troll was appointed counsel in 2023 and advises on data protection particularly in relation to telecoms.

Pels Rijcken & Droogleever Fortuijn NV is a stand-out firm for data protection and privacy, with broad coverage including litigation and advising on technologies including artificial intelligence. The practice is known for its skills in advising clients within the public sector but also excels in advising private sector clients. As a result of this the team often advises on data exchange arrangements between entities governed by both private and public law. Gerrit-Jan Zwenne and Marte Van Graafeiland both co-lead the privacy and data protection team. ‘Top authority‘ on data protection Zwenne has extensive experience in a number of data protection issues including AI, biometrics, blockchain, sensor data, and other upcoming technologies. Van Graafeiland is especially knowledgeable on public sector data privacy and protection issues, advising a range of ministries to local authorities and regulators.

 

Van Doorne focuses on contentious data protection matters including high risk and multijurisdictional issues. The team has handled numerous high profile data breaches for its clients as well as enforcement actions, class actions, and mass claims, as well as a full spectrum of non-contentious regulatory work. Practice head Elisabeth Thole  handles the full gamut of data privacy issues; she is supported by Özer Zivali  who specialises in contentious data protection matters and is well-versed in handling cross-border data breaches and enforcement mandates.

Clients of A&O Shearman include both Dutch corporations and large multinational companies who require comprehensive advice on their data privacy and data protection issues. The practice also handles numerous cybersecurity incidents and issues, as well as cross-border work. Nicole Wolters Ruckert chairs the practice, she advises on the full gamut of data privacy issues including both compliance and enforcement processes. Marleen Huisman and Marleen Van Putten are core members of the team with the former assisting e-commerce platforms in data privacy and the latter handling the crossroads of IP and data protection.

Loyens & Loeff covers a notable range of data protection and privacy issues from representing clients in court before the Data Protection Authorities for data beaches to advising on the GDPR and other key topics such as the data issues concerning M&A deals, AI, e-health, and wearables. The firm combines its expertise from other practice areas to give fully rounded advice to clients in projects and are especially adept at handling the intersection of life sciences and healthcare with data privacy. Practice head Kim Lucassen is ‘highly experienced in all fields of privacy and data protection‘ and regularly advises on both contentious and non-contentious data issues. She is supported by Nina Orlić who assists tech and e-commerce companies with data compliance, data transfers, data infrastructure, and outsourcing. Céline Van Waesberge  left the firm in May 2023.

Boutique firm Project Moore Advocaten specialises in the field of data protection and privacy, typical work includes data breaches, cross-border data transfers, and data compliance. The team has been increasing its capabilities with regards to M&A-related privacy advice and litigation disputes. The arrival of Céline van Waesberge from Loyens & Loeff in June 2023 has greatly bolstered the practice. Van Waesberge is well-respected for her data privacy expertise and has strengthened the firms ability to assist life sciences and healthcare clients with all their data-related issues. Eva Visser is a expert in IT and data protection and leads on technology and data-driven transactions. Lieneke Viergever regularly advises local business media companies on data privacy issues, while Jeroen Koëter handles a range of IT and data privacy disputes and advisory work.

The team at CMS is sought out by clients to help with incident response and management. The team has worked on numerous high-profile cyber incidents and continues to assist major cyber insurers. Erik Jonkman leads the privacy and cybersecurity practice lading on key cyber incidents and data breaches. Simon Sanders and Edmon Oude Elferink are also key names in the team.

Dentons assists international and Dutch companies with a slew of cross-border privacy and cybersecurity issues. The team has been increasingly involved with matters involving emerging legislation, such as the use of non-personal data. Clients of the firm largely come from technology, finance, hotel, retail and manufacturing sectors. Rosemarie Schaar is particularly knowledgeable on IT contracts and data protection issues in the finance services industry.

Olaf Van Haperen leads the data privacy practice at Eversheds Sutherland . The firm regularly advises on regulatory data privacy and protection issues, as well as handles cybersecurity matters such as data breaches. Clientele range from TMT companies to data centres, science institutions, and healthcare insurers. Van Haperen is an expert in IP, IT, privacy and cybersecurity issues, combining his knowledge of these sectors to advise technology and science-driven clients. Robbert Santifort assists a range of clients with matters involving personal data, data processing, and data breaches. Also noted is Judith Vieberink who aids with cybersecurity incident responses and the intersection between IT and data privacy.

The data and cyber group at Freshfields Bruckhaus Deringer sits as part of the wider dispute resolution practice; the team advises on data compliance projects, data incidents, transactional work involving data, and regulatory issues. The Amsterdam-based group works closely with its wider international practice to assist in a range of cross-border data-related issues. Financial institutions are key clients of the firm. Mark Egeler heads up the group focusing on data protection, e-privacy, compliance, and data governance issues as well as data-heavy transactional matters.

Greenberg Traurig LLP advises a range of clients, including notable entities in the technology and public sectors. The team routinely handles matters involving the GDPR, data compliance, and cybersecurity threats. Practice head Herald Jongen specialises in IT outsourcing, data protection, and complex transactions and is supported by Nienke Bernard who mainly assists the Dutch state and education sector in data privacy issues. Emre Yildirim and Wouter van Wengen are also key to the team.

Regulatory enforcement and litigation alongside data compliance and privacy advice are all handled by the data team at Houthoff. The team sits within the IP and IT practice and has been increasingly working on issues such as profiling, automated decision-making, and representing clients before the European Data Protection Supervisor (EDPS). Chairing the practice, TMT expert Thomas de Weerd handles both privacy and cybersecurity issues. Jurre Reus is key to the practice, he focuses on tech and platform-related data issues and is also particularly adept at matters involving mobility and automotive industries. Nicole Bilderbeek advises clients on the GDPR.

The Benelux-based data protection and cybersecurity team at NautaDutilh primarily handles data protection compliance issues, advising its local and international clients on data privacy matters that often cross over into other practice areas such as finance and employment. Other than advisory work, the team also handles data protection litigation such as contentious data subject rights requests and issues involving sensitive personal data. TMT specialist Joris Willems leads the practice focusing on IT outsourcing, data monetisation, and cyber security. Terrence Dom, Sarah Zadeh, Danique Knibbeler, and Anke Holtland all assist with the full range of data privacy matters.

Osborne Clarke focuses its practice on technology, media, and telecoms sectors, enabling it to advise on online advertising and marketing, virtual and augmented reality, as well as e-commerce. The team advises large multinational technology companies on data protection issues as well as retail, healthcare, hotels, and leisure industries. The practice is led by Joanne Zaaijer, who is well-versed in many areas of data privacy including cross-border data transfers, GDPR compliance, implementing privacy policies, and telecom specific legal and regulatory data issues. Senior associate Dewi Harkink joined the firm in April 2023 from Van Iersel Luchtman Advocaten and combines his specialist knowledge in IT with data privacy and data protection.

Stibbe mainly advises clients on data compliance regulations and ensuring that clients can keep up-to-date with new legislative requirements. The team assists the firms’ finance, employment, and administrative law practices with data privacy and data protection aspects of their work. Cyber insurance is also a notable focus of the practice. Team lead Nynke Brouwer is a specialist in cyber security and cyber insurance issues, she handles advisory and contentious work for clients such as insurers, brokers, healthcare, and public authorities. Frederiek Fernhout is also noted.

Recently established boutique firm Turing Law has continued to grow in the data privacy space focusing on international and national companies in the public sector, advising on GDPR compliance, contract reviewing, data transfers, and data security. The firm merged with an IT specialist firm Lawrence Privacy (Due Diligence) & Tech, welcoming  Jeroen van Woezik to the team in August 2023, bringing specific expertise on data privacy in relation to M&A transactions. The team is jointly led by Huub de Jong and Tom de Wit who both assist on a range of complex privacy mandates. Also key to the team are Marijn Rooke who mainly assists healthcare clients with data privacy issues and Corine d’Hulst who assists with privacy contracts.

Specialist dispute resolution and prevention firm bureau Brandeis handles a mix of contentious and non-contentious data protection mandates. Collective actions and other litigation issues are also a focus for the practice, which has a track record of work in areas such as telecoms. Vita Zwaan and Christiaan Alberdingk Thijm jointly lead the team.

The privacy team at Holla legal & tax is based in ‘s-Hertogenbosch and has sector-specific expertise in e-sports, healthcare, recruitment, and public entities. The practice largely advises on GDPR issues and other data protection matters and is sought out for its skills in international data transfers. Kim de Bonth leads the team and combines her knowledge of IT contracting and data protection law to assist clients. Femmie Schets aids clients with international data transfers and advises on any potential data breaches.

Ploum is sought-out by clients for its expertise in e-health data protection matters, regularly advising and assisting life sciences and health care companies with a slew of data and cybersecurity issues. The team is also adept at advising on marketing and e-commerce sectors, including issues relating to processing employee data and international data transfers. The privacy team is co-headed by Dennis Zieren and Dorine ten Brink who are well-versed in issues that span IT and data privacy including contracts and data transfers. Nina Witt is also noted for her knowledge on privacy in the health care sector.

SOLV Advocaten is known for its internet and technology focus, assisting technology-driven clients such as software and e-commerce platforms with data protection and privacy issues. In particular the team handles a number of class actions in this space. The team is co-led by Douwe Linders and Wanda Van Kerkvoorden. Thomas Van Essen left the firm in March 2023.

As part of the wider technology and data practice, the data privacy team at Taylor Wessing is led by Otto Sleeking , who leads on IT-related data protection issues such as data processing agreements, security measures, and data transfers. The firm also handles data breaches and technology-related disputes. Complex cross-border issues are also a key area for the practice which assists a myriad of technology clients from start-ups to international companies. Martijn Loth excels in technology-related issues and assists with data protection regulatory compliance.

Vondst Advocaten N.V assists with GDPR compliance, as well as related matters such as data privacy issues related to M&A deals, assisting clients with investigations that arise as well as data breach notifications. Innovative businesses make up a portion of the firm’s client base from sectors including retail, media and clinical research. Practice head Herwin Roerdink is experienced in data protection and online marketing matters, often lecturing on e-privacy law. IT specialist Polo van der Putt assists with issues involving new technology, while newly promoted partner Tineke van de Bunt is well-versed on GDPR compliance audits and M&A data privacy mandates.