When a company enters bankruptcy proceedings within the European Union, insolvency practitioners must navigate a complex intersection of duties: administering the estate while ensuring strict compliance with GDPR requirements for processing personal data. The recent Co-Med healthcare bankruptcy in the Netherlands illustrates how modern insolvency practice requires careful handling of sensitive information, from medical records to employee data, while balancing statutory obligations with fundamental privacy