Windt Le Grand Leeuwenburgh Advocaten

Data, privacy & cybersecurity

Our ‘Data, Privacy and Cybersecurity’ team advises clients on their most challenging issues relating to data, privacy and cybersecurity. Our clients range from start-ups to internationally operating companies in various regulated sectors, including maritime, transport, healthcare and e-health, online platforms, app developers and the pharmaceutical industry.

How can we help?

  • Data governance, digital duty of care and GDPR compliance
  • Digital (content) regulation (DSA), telecoms law, consumer law and obligations for online providers
  • Advice on the Cybersecurity Act (NIS2) and the Cyber Resilience Regulation (CRA)
  • Advice on innovation and new technologies, including AI and IoT
  • Online regulation such as cookies, direct marketing and e-privacy
  • Data sharing within organisations, corporate structures and partnerships
  • Due diligence and advice on restructuring, transactions, acquisitions, reorganisations and insolvency
  • IT outsourcing and commercial contracts
  • Privacy in the workplace, including staff monitoring and internal investigations
  • Cyber incidents and data breaches, including notifications to supervisory authorities
  • Investigations, complaints and enforcement by supervisory authorities
  • Handling data access requests or complaints from data subjects
  • Claims for damages and disputes relating to privacy and cybersecurity

We combine legal expertise with a practical and results-oriented approach, focusing on risks, impact and business objectives.

Data breach or cyber incident?

Contact our team immediately.

Recent matters

Advising on the conditions for data migration of customer and CRM data to a central database within a group.

Advising on the qualification of processing responsibility of parties in public-private partnerships and the resulting obligations under the (U)AVG towards data subjects.

Advising a client on the conditions for (covert) employee monitoring and access to email in the event of absence.

Drafting processing agreements and contracting privacy in commercial contracts.

Advising on data retention requirements for trustees in the context of a bankruptcy.

Advising on the conditions for making new employment offers to the former employees of a bankrupt company.

Other jurisdictions

Also interesting

‘Very impressed with Nina Orlić who gives accurate and pragmatic advice in the area of data privacy. She has very thorough knowledge of the subject matter and is a true talent!’ - Legal 500, 2025