Data privacy and data protection in Netherlands


Brinkhof’s dedicated data protection practice ‘goes the extra mile’ to assist a high-profile list of national and international clients with the full range of data protection mandates; the team is particularly active in the TMT sector and counts T-Mobile, DLL and VoetbalTV on its client roster. The group is highly experienced in complex data work and has been increasingly active in data litigation; it is currently representing Google in Supreme Court litigation relating to the right to be forgotten. Quinten Kroes leads the department, which also fields online platform specialist Remy Chavannes, newly promoted partner Dorien Verhulst and associate Manon Oostveen.

Practice head(s):

Quinten Kroes


‘The Brinkhof Data Privacy and Data Protection practice is well equipped to make sure that they go that extra mile to get a real sense about your business and the issue at hand, before providing any advice. This results in a good working relationship, with pragmatic and directly applicable advice that fits your industry perfectly.’

‘Eager to understand your business, your products, and the types of customers that we typically work with. They have the ability to match the speed of a growing tech or SaaS company and have a risk-based decision making process that focuses on resolving that matter at hand, rather than providing us as a client with a wide range of potential scenarios we need to choose from ourselves.’

‘The data privacy and data protection practice is spot on with regard to the latest developments in data privacy and data protection. They act proactively and are able to transfer their knowledge to practical solutions. Their exceptional knowledge serves their ability to solve problems and advise proactively.’

‘Quinten and Manon have an exceptional knowledge of data protection, know the boundaries and are able to advise proactively. They are also able to acknowledge your risk appetite and come with practical solutions to make things possible. I also appreciate their no-nonsense style.’

Key clients









Duchenne Parent Project (and associated Duchenne initiatives)


Work highlights

  • Representing VoetbalTV in ongoing enforcement proceedings initiated by the Dutch DPA regarding the GDPR legal basis for its filming and online distribution of amateur football matches.
  • Advising Google on the data protection impact assessment undertaken on behalf of the national government and subsequent negotiations regarding the potential use of Google’s cloud services by government bodies.
  • Defending Google in Supreme Court litigation about the so-called ‘right to be forgotten’ in relation to sensitive personal data.

De Brauw Blackstone Westbroek

De Brauw Blackstone Westbroek is praised by clients as 'one of the strongest firms in strategic privacy litigation’ and is also a key name in the market for enforcement proceedings, data subject access requests, cybersecurity issues and compliance work. The group has been leading in mass claim proceedings and recently represented Salesforce in a €10bn claim for alleged infringements of European data protection laws. Geert Potjewijd and senior associate Axel Arnbak jointly lead the group, Arjan Kleinhout is a key contact for administrative law and enforcement work, and senior associate Salima Guettache is active in data litigation.

Practice head(s):

Geert Potjewijd; Axel Arnbak


‘This is one of the strongest firms in strategic privacy litigation. They don’t forget about any angle, privacy related or not, or any regional issues that could affect the strategy. They don’t take risks, unless on client instructions.’

‘Very deep knowledge of privacy and AI. Good service, of which knowledge sessions for clients deserve special mention.’

‘Axel Arnbak is always available as a sparring partner, which is good as sometimes no extensive advice is needed.’

‘Top-notch advice and relevant experience in high-profile cases.’

‘Axel Arnbak: very knowledgeable and pragmatic.’

‘Axel Arnbak is an expert in his field.’

Key clients Inc.


Uber International B.V.

TikTok Technology Limited

Grand Vision


Public Interest Litigation Project (PILP)

Talpa Network

Port of Rotterdam

Nationale Nederlanden



KVK (Chamber of Commerce)

Work highlights

  • Defending Salesforce in €10bn mass claim proceedings for alleged infringements of European data protection laws.
  • Defending Uber in various proceedings filed by UK drivers for alleged infringements of European data protection laws regarding automated decision making, data portability and data subject access requests.
  • Defending TikTok in three related mass claim proceedings for alleged infringements of European data protection and consumer protection laws.

Kennedy Van der Laan

Kennedy Van der Laan ‘always strives to deliver high-quality work’ across data protection regulatory mandates, investigations and enforcement proceedings. The group has also seen an increase in data breach and cybersecurity instructions and leverages the firm’s newly expanded corporate department to assist with data transactions. With expertise in the publishing, telecoms, technology, transport and entertainment sectors, key clients include Azerion, Keolis Nederland and Royal Schipol Group. Noteworthy individuals include group co-heads Hester de Vries and Quirine Tjeenk Willink, and senior associates Elise Troll and Rosalie Brand.


‘Very good and large team. Experienced members and more junior members providing a good and opportune mix for larger clients requiring broad privacy assistance.’

‘Hester de Vries is very experienced and knowledgeable. Hester stands out through her in-depth knowledge of the laws, regulations and case law in combination with her knowledge of the key players in terms of privacy experts. Rosalie Brand is a pleasure to work with. She is intelligent, dedicated, very knowledgeable and pragmatic.’

‘The firm has much relevant knowledge and expertise (all but criminal law). Collaboration, mostly behind the scenes, is almost seamless.’

‘Rosalie Brand is proactive and flexible in her thinking. She is willing to take over the work of the other party when needed. Knowledgeable.’

‘Highly skilled team. Always striving to deliver high quality work. Pragmatic and able to talk the language of business.’

‘Elise Troll: thorough knowledge of GDPR and Telecommunications law. Eye for detail. Strives for high quality work, but very much able to talk the language of the business. Senior level.’

‘Laura Poolman: great communicator. Excellent interaction with business. Great knowledge of GDPR and risk assessments. Brings structure and keeps an eye on the details.’

‘Hester de Vries’ team has expert knowledge of data privacy and data protection. Hester and her team are always very available; either in person or by phone. The pandemic did not change any of that. We also did not experience any change when we went to court, Hester and her colleagues were there.’

Key clients


Keolis Nederland

Royal Schiphol Group



Stichting BKR

VAN Kansspelen

Translink Systems B.V.


Stichting Aidsfonds – SOA Aids Nederland

Work highlights

  • Advised Azerion on the legal assessment of and contractual arrangements between the many parties involved in the complex AdTech ecosystem in the gaming industry, including supply side platforms, demand side platforms, data management platforms, advertisers and publishers.
  • Assisted Stichting Aidsfonds with obtaining a permit with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) for the implementation of a warning system.
  • Coordinating the BCR implementation within the FedEx group, expanding over 62 countries.

Pels Rijcken & Droogleever Fortuijn NV

Leveraging the expertise and reputation of team head Gerrit-Jan Zwenne, who clients praise as 'an absolute authority in his field of expertise', Pels Rijcken & Droogleever Fortuijn NV is highly active in data litigation with experience in claims relating to data subject access requests, right to be forgotten issues and data collection methods. The group is also a key name in the market for public sector clients with examples including the Dutch Ministry of Health, Welfare and Sport, the City of Amsterdam and the Dutch Tax Authority; the team is also acting for the Data Privacy Foundation in a class action against Facebook relating to the use of cookies. Meine Dijkstra and senior associate Marte Van Graafeiland also contribute to the department.

Practice head(s):

Gerrit-Jan Zwenne


‘Instant access to quality advice.’

‘I work with Mr. Gerrit-Jan Zwenne who in my opinion is the authority in the Netherlands with regard to privacy matters.’

‘Strong privacy and IT team with solid and broad knowledge on this topic. Also has good connections in these fields.’

‘Gerrit-Jan Zwenne is an excellent privacy lawyer, very reputable and knowledgeable about data protection matters. Provides excellent and solid advice.’

‘Jeroen Naves is a great IT lawyer, very hands-on and provides very good and pragmatic advice.’

‘Gerrit-Jan Zwenne is an absolute authority in his field of expertise. We have reached out to him on behalf of several of our clients who were struggling with Covid-19 measures and how to ensure a safe work place without being in breach of GDPR. Gerrit-Jan is the personification of an expert, he can reduce hugely complex matters to simple proportions with pragmatic solutions.’

‘Swiftness in handling. Smart and practical solutions to problems. Good knowledge of procedural aspects.’

Key clients

Data Privacy Foundation (Data Privacy Stichting, DPS)


University of Amsterdam

Dutch Ministry of Health, Welfare and Sport

City of Amsterdam

Dutch Tax Authority

Work highlights

  • Acted for the Data Privacy Foundation (Data Privacy Stichting), in close cooperation with the Consumer Association (Consumentenbond) in the first major class action case against Facebook Inc, Facebook Ltd and Facebook Netherlands BV, for infringements of both the Dutch Data Protection Act, the GDPR and telecoms regulations regarding cookies.
  • Advising a provider of innovative IoT- consumer products on a matter concerning an international investigation conducted by several EU Data Protection Authorities led by the Dutch Data Protection Authority.
  • Involved in the development of multiple the Dutch National Covid-19 apps, including the national contact tracing app and the official Dutch app that users can use to demonstrate they are vaccinated or have tested negatively for Covid-19.

Van Doorne

The ‘pragmatic and fast-paced’ practice at Van Doorne handles the full range of data protection and cybersecurity mandates with significant expertise in high-risk, multi-jurisdictional matters including contentious work. Recent highlights include advising GGD GHOR on a Dutch DPA investigation in relation to a data theft involving the processing of Covid-19 health data; and acting for New York Pizza, which was involved in an extortion threat following the theft of its customer and employee data. ‘Calm, precise and pragmatic practitionerElisabeth Thole heads up the group, which also includes newly promoted counsel Özer Zivali, who is active in contentious matters.

Practice head(s):

Elisabeth Thole

Other key lawyers:

Özer Zivali 


‘Pragmatic and fast-paced while absolute experts in their field.’

‘Elisabeth Thole is very experienced and an absolute expert in data protection law.’

‘Highly experienced, boardroom level, flexible, both strategic and hands on.’

‘Elisabeth Thole: absolute top-level, strong in analysis and strategy, gets the right team in place and is very clear in communication, she delivers.’

‘The team is very diverse and open minded. It has a very good standing in the market (and is well known in Europe). Quick and clear advice. Reflection of business needs and framework.’

‘I like to work with Elisabeth. She has a very bright personality. She is extremely well known in the industry and shapes it in the Netherlands. She is always accessible. A smart and very diligent lawyer. She is definitely leading. Özer Zivali has a very similar approach. Elisabeth is the star, Özer is rising.’

‘Always very fast and transparent communication.’

‘Completely on top of new developments, high technical understanding.’

‘Elisabeth Thole is a calm, precise and pragmatic practitioner.’

‘Elisabeth Thole is my go-to person when I need data protection advice in the Netherlands. She is extremely knowledgeable and nice to work with.’

‘We had a big emergency and within hours, Van Doorne was there to help us and to support us during the process.’

‘Elisabeth and Özer were the best. Supportive, understanding and specialists.’

‘Van Doorne’s teamm, which is led by Elisabeth, is always super responsive and provides an excellent quality. They are my go-to firm for privacy matters in the Netherlands.’

Key clients

Achmea / InShared

Ahold (Koninklijke Ahold Delhaize)






Jacobs Douwe Egberts (JDE)

New York Pizza

TU/e – Eindhoven University of Technology



Work highlights

  • Assisting GGD GHOR with the investigation started by the Dutch Data Protection Authority in February 2021 in relation to a data theft involving the processing of Covid-19 health data.
  • Assisted New York Pizza, which was a victim of an extortion threat, in relation to the theft of customer data and employee data.
  • Successfully assisting TU/e with various data protection matters, including acting in proceedings on the right of inspection started by a data subject, under both the former data protection regime and the GDPR.

Bird & Bird

As ‘truly a one-stop shop’ thanks to the firm’s global network of offices, Bird & Bird excels in international data mandates, acting as a hub for EU and mainland Europe issues. With experience in the healthcare, telecoms and finance sectors, the group counts Teva Pharmaceuticals, ABB and the European Commission as clients, and assists with cross-border compliance work, contentious matters and new technology mandates; the team has also been significantly active in international data transfers. The practice is jointly lead by senior counsel Wilfred Steenbruggen and counsel Berend Van Der Eijk.


‘The Dutch team provides excellent privacy advice, and they have the full force of Bird & Bird’s other European offices when you have issues in other countries. It’s truly a one-stop shop, which takes the stress out of finding local counsel when new questions crop-up.’

‘Berend is an incredible partner and resource. He understands the privacy legal landscape across Europe, and he is incredibly responsive and able to manage matters across Bird & Bird’s European offices. But what really makes Berend stand out is that he is always translating complex legal principles into practical solutions that a business can implement. It’s been a pleasure working with him.’

‘Strengths include experience, market knowledge and a hands-on approach.’

‘Mr. Van der Eijk is my go-to person at Bird & Bird. He is knowledgeable, responsive and great to spar with.’

Key clients


Teva Pharmaceuticals





Nuts Groep

European Commission

Domino’s Pizzas

Work highlights

  • Advised Teva Pharmaceuticals as DPO on daily data protection law compliance.
  • Advised the European Commission on the implementation of its groundbreaking European Blockchain Services Infrastructure (EBSI) project.
  • Advising a leading global payment provider on data protection law compliance.


The ‘smart, responsive and measuredMarc Elshof heads up the data privacy and security practice at Dentons, which excels in international data projects, benefitting from the firm’s global platform and experience in global data privacy and risk management programs. The group also utilises a broad range of tools developed by the firm including a cookie law comparison tool and a data breach hotline. At the senior associate level, Anouschka van de Graaf joined the team from an in-house position in 2020.

Practice head(s):

Marc Elshof

Other key lawyers:

Anouschka van de Graaf


‘Highly knowledgeable, professional and responsive team of privacy experts.’

‘Marc Elshof has been our primary contact, he has provided excellent guidance, is highly responsive, and delivers a work product of the highest quality.’

‘Dentons is our go-to firm for data privacy, employment, and immigration matters. Dentons is a unique firm in that they are worldwide and their partners have detailed and working knowledge of the laws in the areas in which they are located. As a software company which sells its products worldwide, we need to know specifics of relevant laws in each jurisdiction as well as practical guidance on how to apply the laws. Dentons has provided us with guidance ranging from organisational level data mapping to specific product features designed with privacy in mind.’

‘I go to Marc Elshof for anything relating to data privacy. I have enjoyed Marc’s availability, willingness to work with me in any time zone during my working hours. Marc is also able to tell me when he will have a complex project back to me and stick with that timeline. Furthermore, Marc is able to give practical legal application guidance regarding the best manner in which to follow a particular law.’

‘It’s always a pleasure to work with Dentons’ Data Protection team in the Netherlands. The firm has a highly competent privacy team in the Netherlands headed by Marc Elshof. Where other law firms sometimes tend to give more theoretical, academic advice, Dentons’ privacy team in the Netherlands delivers practical solutions that we can work with straight away. Also the fact that the team in the Netherlands can call upon their international network for knowledge covering other jurisdictions, is very much appreciated.’

‘All lawyers in Marc Elshof’s team I’ve worked with are highly knowledgeable, committed and creative in their thinking. Their advice is always of a very high quality and can be used in practice. Marc Elshof stands out as he is a very dedicated and thoughtful lawyer who has a deep knowledge of data protection law. He is nice to work with as he is always available, proactive and understands our challenges. He provides solid but to the point legal advice that really helps us.’

‘It is an outstanding team for data privacy and data protection. Marc Elshof has developed an excellent team that handles real complex national and international matters. Compared to other firms I would like to highlight their practical no-nonsense approach. They also provide a solution instead of a legal overview.’

Key clients

CNA Hardy


FIN Analytics


Playa Hotels & Resorts



The Student Hotel

Unibail Rodamco Westfield

Maxim Integrated

a.s.r. real estate


Nationale Nederlanden


Boursa Kuwait


Work highlights

  • Provides strategic data protection advice to Seattle-headquartered SkyKick, a cloud services provider offering cloud migration and back-up services.
  • Advising Fin Analytics, a start-up that has developed state-of-the-art software to allow corporate employers using call centres to track and monitor employees’ activity, on the roll out of its products in Europe.
  • Advised Nationale Nederlanden, a Dutch financial services provider, after it acquired a stake in Invers, which develops smart technology to analyse financial data and supplies this to banks.

Hogan Lovells International LLP

Hogan Lovells International LLP’s team of ‘extremely good privacy experts’ is led by Joke Bodewits, who ‘always strives to reach the best goal for the client’. The practice is a key name in the market for binding corporate rules issues and international data transfers and also handles cross-border data strategies, multi-jurisdictional litigation and cybersecurity mandates. It also excels in mandates at the intersection of public and data law, working closely with data regulators. Senior associate Chantal Van Dam is also a name to note.

Practice head(s):

Joke Bodewits

Other key lawyers:

Chantal Van Dam


‘Joke Bodewits is a very capable, hands-on lawyer, who always strives to reach the best goal for the client. And with a touch of humour, which is really appreciated.’

‘Extremely good privacy experts!’

‘Joke is always on top of all the privacy topics, she takes the time to explain them very well and manages to turn what could be complex privacy advice into a very understandable explanation for in-house lawyers as well as business people. Always available for a quick check-in when needed or for a short explanation, she has the quality of a top lawyer working in a top law firm but keeps herself reachable as if it was a smaller size law firm. Her work quality is impeccable and she is very nice to work with. One of my favourite privacy experts!’

‘The team stands out not only for Joke’s outstandingly broad knowledge of GDPR, also her pragmatic business-oriented advice, unlike other GDPR legal advisers, Joke’s advice is usually on one page and can be used as is!’

Key clients


Wolters Kluwer

Keystone Heart


Zimmer Biomet




Loyens & Loeff

The data protection and privacy team at Loyens & Loeff takes a cross-border approach to data work, leveraging its Benelux and Swiss offices to handle regulatory mandates and global data strategies. The group also advises on GDPR compliance frameworks, data breach responses, enforcement proceedings, data litigation and the data elements of notable M&A transactions, and has recently established a distinct digital economy team. Kim Lucassen leads the department, which also fields senior associate Céline Van Waesberge and associate Nina Orlić.

Practice head(s):

Kim Lucassen 


‘Loyens & Loeff N.V. is a highly professional law firm with dedicated and competent specialist lawyers. The firm has a broad range of legal specialisms, and is always willing to assist in new or ongoing files/cases.’

‘Kim Lucassen, Partner: Easy access and easy to communicate with, very interested in the company’s business and the industry, willing to go the extra mile.’

‘This team has very expansive knowledge about the data privacy and data protection field, one that covers multiple industries and practices. I am always impressed by their ability to address my convoluted issues in an immediate way with an understanding of how the law would apply based on the specific context of the matter.’

‘It surprises me that Nina Orlić is not already a partner given her professionalism, demeanour and expertise. I always seek out her assistance with my matters for her ability to give thorough understanding of issues and give practical advice for real-world situations.’

‘It’s about law, but with a business twist. They for sure understand how that works.’

‘During one of the sessions with our internal stakeholders, I was happy to see how Nina was able to immediately spot the main points of the discussion, act upon what she spotted and jumped quickly in, rather then staying aside and solely referring to the legal don’ts.’

‘Very professional team that stands out in terms of legal support and that leads by example in terms of what clients look for when engaging with outside counsel. The team has a strong innovation focus and is keen on sharing insights about innovations with clients. The team leads by example in showcasing the importance of diversity and inclusion.’

‘The team has a very high level of knowledge. When necessary, colleagues or experts are quickly involved in sub-questions. Our work was new to us (as a result of the crisis), but there was also a new playing field for stakeholders. The team contributed ideas about the organisation of the work and its legal consequences.’

Key clients


DPG Media

PrivateTracer consortium

Tata Communications Netherlands B.V.

Zilveren Kruis Achmea

Jaguar Landrover

Pioneer Europe

Stichting Hartwig Medical Foundation (HMF)


Colosseum Dental Group

Work highlights

  • Assisting Jaguar Landrover in data protection law matters with regard to intelligent cars.
  • Led the IT infrastructure transition project of Hartwig, which moved from a Dutch private cloud to the Google Cloud platform, from a legal perspective involving extensive negotiation of the applicable license and data protection and security terms with Google.
  • Assisting VGZ, one of the largest Dutch health care insurers, on numerous data protection, privacy and IT matters.

Project Moore Advocaten

Data protection boutique Project Moore Advocaten ‘consists of a highly specialised team with unique team players who are always willing to take the next step for clients’. The practice handles the full breadth of data work with notable expertise in the transport, retail, health and public sectors; the team is currently advising the Dutch Police on its new push-to-talk app. Within the practice, Lieneke Viergever, Jeroen Koëter and Eva Visser are all highly regarded practitioners.


‘Project Moore Advocaten consists of a highly specialised team with unique team players who are always willing to take the next step for their clients!’

‘The individuals working for Project Moore Advocaten are all highly capable of transforming a clients’ question into hands-on advice!’

‘This practice is unique because the entire team is open for quick and hands-on communication, discussion and service. Even the partners of the firm are easy to get hold of and to work with. There is no operational hierarchy, and as a result of that a lot of experience and expertise is quickly available for clients. Another key strength is that the data knowledge is always complementary to your own and Project Moore is always looking at how they can help a client become more self-reliant. They help as long as needed but actively try to make themselves expendable.’

‘Project Moore works with very kind, hardworking and approachable professionals that have a lot of high-quality expertise and a lot of experience. The professionals are not only friendly but always perfectly up-to-date on what matters for me as a client, but also up to date as to what matters professionally and materially.’

‘The team operates as a cohesive team, though of course they have individual differences. They have a “warm” feeling and combine this with strict knowledge of the laws, the field and previous cases. They are easy to work with because they behave as being part of our team with commitment to our goal instead of acting behind a perceived barrier of a distant law firm. This while taking into account of their responsibilities.’

‘What makes the individuals stand out and is for me a typical Project Moore profile is being very communicative, and being able to explain issues clearly and being able to think about the position of me as a client or of our project. They are able to give you personal treatment and won’t make you feel like just a case. And, also very important: they have a nice attitude and are pleasant to work with in combination with being an authority for their knowledge and skills. I specifically mention: Christian van Seeters and Eva Visser.’

‘Excellent knowledge of the subject, both in legal terms but also in understanding underlying technologies. Good in assessing political risks that come with privacy issues.’

‘Lieneke Viergever: Pragmatic, proactive, highly qualified and specialised. Outstanding in understanding the needs of the clients. Highly recommended.’

Key clients


Dutch Police

Dutch State: Ministry of Justice and Security

Custodial Institutions Agency ( Dienst Justitiële Inrichtingen or DJI )

Employee Insurance Agency (UWV)

KLM Royal Dutch Airlines

MLE (Mitsubishi Logisnext Europe)



Public Health Service (GGD GHOR Nederland)


Work highlights

  • Appointed as lead counsel for the Dutch Police’s acquisition of the new push-to-talk application that can be installed on the smartphones of Dutch security officers.


Stibbe’s digital economy team leverages experts from the firm’s civil and administrative, IT and employment teams to handle a broad range of data issues with particular expertise in cloud contracting work; it recently advised the Dutch State on its move towards cloud computing methods. Judica Krikke leads the department and established the team with employment group head Jaap van Slooten. Astrid Helstone is also recommended for employment-related work and Tom Barkhuysen handles issues combining data and administrative law.

Practice head(s):

Judica Krikke 


‘We dealt with Stibbe as part of a data protection project. The team around Judica Krikke is very professional and has extensive data protection knowledge.’

‘Able to not only listen and act on challenges presented, but also asks for constructive feedback on their reactions so the outcome is a collective “product”.’

‘Approaching problems from different angles and considering issues from multiple points of view; open to criticism on deliverables. Delivering on their commitments to us, as a customer. Upbeat attitude; beat and not just meet deadlines.’

Key clients



The Dutch State

Dutch Police


Royal Reesink


Schoeller Allibert



Nuvei Corporation

Schneider Electric


Technology Crossover Ventures

Accel KKR


Work highlights

  • Acting as trusted adviser for the Dutch State on its strategic software supplier management, including recently assisting the Dutch State with the renegotiation of Oracle’s standard data processing terms for the benefit of the Dutch central government.
  • Advised Q-Park on the (re)structuring of its worldwide data protection corporate governance and on data protection solutions for new business initiatives.
  • Advising Agendia on its general data protection compliance and on various data protection arrangements with partners and customers of Agendia.

Allen & Overy LLP

Following the recruitment of counsel Nicole Wolters Ruckert in 2019 to lead the department, Allen & Overy LLP’s data and privacy team utilises the firm’s wider global network to advise its high-profile client roster on international data transfers, advisory and compliance mandates and enforcement issues. The team also has experience in handling ransomware attacks and criminal investigations as well as assisting with the data elements of M&A deals.

Practice head(s):

Nicole Wolters Ruckert


‘The client service, in terms of responsiveness and reliability, really set this firm apart. They deliver when they say they will and you don’t have to chase them. The quality of work is consistently very high.’

‘Nicole Wolters Ruckert is exceptional. A very experienced and personable privacy lawyer. Nicole is impressively knowledgeable on an extensive range of privacy related matters – from data privacy requirements in Artificial Intelligence through to navigating the complex path of international data transfers. Nicole has the ability to think with you, separate the core issues from the ancillary and finds solutions. She is a pleasure to work with and importantly, understands the dynamics of managing in-house stakeholders.’

‘Very knowledgeable team, good insights on data protection authorities.’

‘In-depth knowledge and overview of developments in the legal area.’

‘I have worked a lot with Nicole Wolters Ruckert for big important projects with complex legal angles. Her pragmatic approach and hands on attitude combined with in-depth legal knowledge and understanding of our business, makes her a well-trusted adviser.’

Key clients



WPP and GroupM

Wolters Kluwe


CMS’ data protection and privacy group, which is led by advocaat Erik Jonkman, sits within the firm’s technology, media and communications group, which is headed up by Katja Van Kranenburg-Hanspians. The practice handles a broad range of work including commercial and transactional matters, disputes and enforcement work; Jonkman is particularly recommended for data breach matters and cyber incidents. Senior counsel Simon Sanders and Edmon Oude Elferink also contribute to the practice.


‘Excellent business acumen and knowledgeable people. Focused on good collaboration during complex cases, excellent listeners and filtering out the essence quickly.’

‘Excellent understanding of the case. Open and respectful style, modest but fair and with a good sense of humour (we like that). Sharp on the details and bring these back to the essentials (no-nonsense). Onboarding us as a customer in the matter. Willing to achieve the utmost, deliver high standards.’

Key clients



Liberty Global

Leading Care Technologies

Telxius (Telefonica)

Capgemini / Sogeti





BIOS Group

Stichting Open Nederland

Work highlights

  • Advising the Bios Group on a case concerning a very substantial leak of trade secrets and highly confidential personal data by a consortium of Dutch municipalities.
  • Advising Insurtech Lemonade on the challenging Data Protection domain.
  • Representing LCT and LifeWatcher in a case against a competitor which sells similar products, albeit making use of free software from China, which has no proper safeguards provided in order to protect the data in question.

Eversheds Sutherland (Netherlands) B.V.

With ‘a unique understanding of the technological landscape and trends’, Eversheds Sutherland (Netherlands) B.V. acts for a high-profile client roster of domestic and international companies including Shell, Microsoft and Nokia. Olaf Van Haperen leads the group from the Rotterdam office and advises on all elements of privacy, data protection and cybersecurity issues. In Amsterdam, Benjamin Van Kessel is the key contact to note.

Practice head(s):

Olaf Van Haperen


‘The Privacy Team at Eversheds Sutherland Netherlands has been hands-on from the beginning to assist us in GDPR compliance.’

‘Olaf van Heperen and Robbert Santifort (Netherlands) have always been available and proactive in helping us reach our goals.’

‘Unique understanding of the technological landscape & trends.’

‘Involved on a human level, they are true business partners always thinking also how they can help grow our business.’

‘They were quick and responsive, always in touch with us. Have a complex vision of the problem. Provide their feedback in the way and form suitable for our business.’

‘Robbert Santifort was the one that helped us. He was very quick, staying in connection all the time. He was also helping us to address a question in different jurisdictions and was coordinating the activity of partners in other countries. It was very professional governance.’

‘The team was able to pick up quickly on our request and provided an efficient risk review.’

Key clients

Cyrus One

QTS Datacenters



Core Laboratories





Kering Group







Dimension Data



Stichting Koningin Wilhelmina Kankerfonds


Aalberts Industries



Work highlights

  • Set up and subsequently implemented a full data protection compliance program for the joint Dutch Healthcare Insurance companies.
  • Advised on the legal contractual framework of the well-known cyber security firm ESET, offering ESET end point security products.

Freshfields Bruckhaus Deringer

Providing ‘excellent privacy advice that is to-the-point and pragmatic’, Freshfields Bruckhaus Deringer’s cross-departmental data and cyber focus group divides its expertise into four distinct areas of work: standalone data and cyber mandates, incident response issues and the related preventative advice, data-driven transactions, and data litigation. The team also leverages the firm’s global network on cross-border mandates, acting for a broad range of domestic and international clients. Senior associate Mark Egeler leads the practice and Rutger Kleemans, who is head of the IP and IT department, also contributes.

Practice head(s):

Rutger Kleemans; Mark Egeler


‘Excellent privacy advice, to-the-point and pragmatic.’

‘Excellent responsiveness with timely replies and most importantly, pragmatic answers with clear explanations that permit taking actions as needed, within legal framework.’

‘Large cross-border network and experience and capacity to coordinate complex legal cross-border issues.’

‘Senior Associate Mark Egeler has made impression with his in-depth knowledge on data protection and to-the-point answers in a hectic situation.’

‘The data privacy and data protection practice of Freshfields Amsterdam consists of a small team that consistently punches above its weight. In particular on the transactional side, they have excellent capabilities.’

‘Mark Egeler is a very knowledgeable, fun and nice lawyer to work with.’

‘Mark Egeler is a very experienced but pragmatic lawyer with top-notch legal advice, especially related to media and adtech.’

Key clients

Talpa Network

Huntsman Corporation

Liberty Global


Advent International


Volkswagen AG

Vitruvian Partners



Work highlights

  • Advised Talpa Network on the data elements of the proposed joint venture with RTL Nederland, merging their broadcasting and affiliated media businesses in the Netherlands.
  • Advising Essent on various strategic data protection queries.
  • Provided Liberty Global with strategic data protection advice.


Houthoff’s privacy and data protection practice is led by Thomas de Weerd, who also has notable expertise in IT, e-business, outsourcing and contractual mandates. The group assists with a broad range of data protection issues and has also been notably active in data litigation; it recently defended Ola Cabs in a claim relating to the right to data portability. PayPal, eBay and a variety of car manufacturers are also clients of the team.

Practice head(s):

Thomas de Weerd 

Other key lawyers:

Jurre Reus


‘Houthoff is practical, no lengthy advice, but crisp and clear advice.’

‘Jurre Reus is a very practical and smart lawyer, with good knowledge of the industry and the legal aspects.’

‘The team’s knowledge on GDPR-related issues is comprehensive and always well substantiated with references to specific articles in the GDPR or other relevant regulations. The team seems to work together very well and take over for each other when someone is absent. They keep each other up-to-date on communication with us so that we have multiple people to reach out to about specific issues/questions.’

‘Practical legal advice, which is short and concise. They know the business really well.’

‘Jurre Reus is a very valuable partner to my legal team. He is aware of a lot of things happening in the business and advises accordingly. He thinks out of the box to include more than just the matter we sought his advice for.’

Key clients

eBay Classifieds Group /


eBay Inc

Media Markt / Saturn


Volvo, Polestar, Hyundai, Kia, Stellantis (Fiat, Peugeot, Citroën), Mazda, Renault, Ford, Pon’s Automobielhandel (Volkswagen Netherlands), Jaguar Land Rover and other car manufacturers and importers

Ola Cabs

RDW (Dienst Wegverkeer)

NewMotion (Royal Dutch Shell)

Exact Software

Stichting BREIN

ShareNow (Car2Go)

Work highlights

  • Handling a wide variety of matters for Marktplaats (eBay Classifieds Group), the largest Dutch classifieds website, including all its data protection matters, commercial disputes, commercial contracting and consumer protection matters.
  • Advising various major car companies and Dutch car importers on a wide variety of data protection compliance matters and e-commerce projects.
  • Defended Ola Cabs in a case before the Amsterdam district court brought by three London ‘app drivers’ concerning the right to ‘data portability’ (under Article 20 of the GDPR).


The ‘driven, hands-on and knowledgeable’ team at NautaDutilh sits within the firm’s Benelux data protection and cybersecurity practice and was recently bolstered following the recruitment of new group head Joris Willems from DLA Piper in early 2021. Key areas of expertise for the team include coronavirus-related data matters and sensitive data issues, cross-border work, employment data mandates and direct marketing practices. Albert van der Kolk, Jolize Lautenbach and newly promoted senior associate Terrence Dom also contribute to the practice.

Practice head(s):

Joris Willems

Other key lawyers:

Albert van der Kolk; Jolize Lautenbach; Terrence Dom


‘Proactive, on-time, and always available.’

‘We worked directly with Terrence Dom and his combination of detailed legal advice while at the same time having an excellent overview of the practices in the “real business world” made his advice essential for and suitable to our business.’

‘The team is well reachable, driven, hands-on and knowledgeable. Their understanding of our case was quick and advice was proactive and practicable.’

‘Terrence Dom advised us in a very professional and timely fashion. The advice was strong and easy to act on. Terrence has strong knowledge of privacy legislation and was able to guide us in the right direction. We have very much liked the cooperation.’

Key clients


Airbnb, Inc.

American Express

ASR Nederland

Bank of America Merrill Lynch



CBRE Global Investors



Dynamic Credit



Ginkgo Bioworks

HAL Investments

ING Bank


Keensight Capital

Levine Leichtman Capital

Mizuho Bank


Nationaal Park De Hoge Veluwe


NPM Capital







Rooftop Energy

RTL Group



Stichting Stimuleringsfonds Volkshuisvesting Nederlandse Gemeenten (SVn)

Syntrus Achmea Real Estate & Finance (SAREF)

The Norinchukin Bank





Work highlights

  • Assisting Prosus with a wide variety of data privacy and data protection matters.
  • Advised numerous clients, especially (listed) multinationals and financial institutions, on international data transfers, especially regarding the use of the new 2021 EU standard contractual clauses, Brexit and the Schrems II judgment.
  • Advising ING Bank on a wide variety of data privacy and data protection-related matters.

bureau Brandeis

Litigation boutique bureau Brandeis is highly active in data litigation and also regularly handles data compliance matters, particularly GDPR compliance projects. Vita Zwaan and Christiaan Alberdingk Thijm jointly lead the group, specialising in privacy compliance and digital copyright litigation respectively. Noteworthy clients include Pathé, Dutch Digital Agencies and The Privacy Collective.

Other key lawyers:

Marieke Berghuis


‘Bureau Brandeis has a great team that gives excellent advice. Quick, thorough, seem to be on top of all new developments. Always very approachable and friendly.’

‘Vita Zwaan stands out, she always has a practical solution or has a great and calm way to explain in clear language why it would be better not to proceed with certain plans.’

‘Individuals have an eye for your company’s best interest.’

‘Marieke specialised in privacy law well before the GDPR came into force. Due to these years of experience, she is very well aware of both the establishment of legislation and upcoming relevant developments, and can make a well-considered assessment of how the rules can be efficiently implemented in daily company business. Marieke knows how to convert her knowledge into pragmatic advice that is easy to apply for both lawyers and other specialists.’

‘What makes them strong for me? Their people and their team as a whole. I like how they focus on high-level litigation cases, giving them a very deep knowledge of data protection. But we can also contact them for regular data protection matters.’

‘I love working with Christiaan Alberdingk Thijm and Vita Zwaan. Very professional, very reliable, very profound, very approachable.’

Key clients



Dutch Digital Agencies

Fieldlab Evenementen


The Privacy Collective


Ploum’s privacy team advises on the full spectrum of data issues and has recently been active on e-health issues, marketing work and international data transfers; the group also has expertise in issues pertaining to software, innovative technology and e-commerce mandates. Dennis Zieren  and Dorine ten Brink jointly lead the Rotterdam-based practice, which also includes associate Nina Witt, who has key knowledge of the healthcare sector.

Other key lawyers:

Nina Witt


‘Nina Witt (associate): great knowledge of pharmaceutical/healthcare sector and therefore very capable in handling/advising on specific data privacy/GDPR matters. Manages to make complex issues understandable and (more importantly) workable for those with a non-legal background.’

‘Strong team. Their service level is just excellent and everything is handled in a user-friendly way. They are a pleasure to work with. The team is really focused on the needs of clients.’

‘Dennis Zieren; clever lawyer covering all aspects of data privacy and data protection. Very client focused. He is able to put advice in the right context and framework for the situation.’

‘Rotterdam firm that understand the culture and business we are in. Very pleasant way of communicating.’

‘Ploum’s Data Privacy Practice has a very broad knowledge of all area’s within Data Privacy. And if a question is linked to employment law for example, they are quick to ensure these elements are included in their advice. This to ensure all legal angles are covered. Overall the practice has a clear understanding of what a company requires from them, not just legally correct advice but also very much usable in daily business life.’

‘All individuals are always easy to be reached and quick to react and answer any question you might have. They are very much aware of what is needed in company life, so not too focused on the academic side of things but also ensure a good amount of practicality.’

Key clients

Libéma Exploitatie B.V.

Ace Pharmaceuticals B.V.

BovenMaas Prenataal B.V.

Codeless Technology B.V.

AVH Dairy Trade B.V.

Arbo Unie B.V.

Jacobs Douwe Egberts Pro NL B.V.


Portbase B.V.

Unit4 N.V.

Univé Het Groene Hart Organisatie B.V.

Momo Medical B.V.

Tamoil Nederland B.V.

Stichting SWKGroep

Work highlights

  • Involved in the privacy matters of the SWKGroep including GDPR implementation for the foundation and its 18 operating companies.
  • Advised Libéma regarding a contract with a processor that sometimes processes personal data outside the European Economic Area, in order to ensure appropriate safeguards with regard to the Schrems II judgement.
  • Assisted Ace Pharmaceuticals with very specific privacy-related matters relating to pharmaceuticals legislation and medication distribution.

Taylor Wessing

Leveraging the firm’s global strength in technology mandates, Taylor Wessing’s technology and data practice is led by Otto Sleeking and is a key name in the market for cross-border matters and technology-related data issues. The team’s clients also have access to several tools provided by the firm, including cyber response and compliance tools. Noteworthy clients include Kawasaki Motors Europe and Unisys.

Practice head(s):

Otto Sleeking

Other key lawyers:

Martijn Loth


‘Technical knowledge, friendly service, no nonsense and down to earth.’

‘Martijn Loth as a senior associate is quickly developing his skills and I expect that he’ll be appointed as partner shortly. His friendly approach and technical knowledge make him an outstanding lawyer who is also very pleasant to work with.’

‘Taylor Wessing’s Data Privacy and Protection practice is a very professional practice with knowledgeable and professional people providing support to all kind of detailed and high-level questions regarding data privacy, data processing and GDPR.’

‘Over the last year we’ve mainly worked with Otto Sleeking. He is our go-to person when questions regarding data privacy, data processing, DPA and/or GDPR pop-up. His support is very reliable and professional and is proven by the limited response time used (usually with acknowledgement of receipt of the question/advice request) and the guidance which allows immediate use or continuation of a certain negotiation or issue resolution. Otto is always willing and able to help and available for joining calls/meetings if needed as well.’

Key clients

Unisys Nederland NV / Unisys Europe Limited

Technische Unie BV / Sonepar Group

Kawasaki Motors Europe NV

Lidl Nederland GmbH

Stichting Incident Management Nederland

Astrata BV

CZ Groep Zorgverzekeraar


Leen Bakker



Technische Universiteit Delft (TU Delft)

Sociale Verzekeringsbank

Argenta Bank

Vondst Advocaten N.V

Herwin Roerdink leads the data protection practice at boutique firm Vondst Advocaten N.V, which advises on all issues relating to data protection and online marketing. The team also handles investigations instigated by supervisory authorities and also assists with the data elements of M&A transactions, direct marketing litigation and enforcement issues. Polo van der Putt and senior associate Tineke van de Bunt also contribute to the practice.

Practice head(s):

Herwin Roerdink 

Other key lawyers:

Tineke van de Bunt


‘The team is very professional and I consider them to be a true strategic partner and value driver for our business.’

‘The individuals from Vondst I work with are proactive, approachable, very responsive, they provide practical advice, always employ a broad perspective based on their knowledge of our business and proactively consider potential future legal risks and opportunities.’

‘Vondst Advocaten has a team of collaborative lawyers, as they are easily available when you need support from them. Also, they are a boutique firm specialised in the field of law and technology – which makes a difference when compared to other law firms.’

‘Good in depth knowledge of IT & IP law (including privacy law), high level of service and responsiveness and always eye for the commercial considerations.’

‘Herwin Roerdink and Tineke van de Bunt – Good in-depth knowledge of IT & IP law (including privacy law), high level of service and responsiveness and always an eye for the commercial considerations.’

Key clients





National Postcode Lottery



University of Amsterdam



Credit Europe Bank