Privacy & Data Protection

The growing use of personal data by companies, government bodies and other organisations has created a legal framework that is constantly evolving. Almost every organisation processes personal data, such as information on users, customers, employees and business contacts.
Privacy & Data Protection

Artificial intelligence (AI) and increasing digitalisation pose new challenges in ensuring that personal data is processed securely and correctly. As regulations become ever more complex and detailed, we consider it our mission to help clients keep sight of the big picture and to provide them with practical advice. We also represent our clients in court where necessary, including in collective actions.

Our Privacy & Data Protection Team has in-depth expertise across a wide range of sectors, including e-commerce and online services, automotive, financial services and fintech, real estate, healthcare and retail.

Our expertise in privacy and data protection

Drawing on our extensive experience, we can assist your organisation in various ways with privacy and data protection issues.

Advice

Our experts advise clients (companies, public authorities, charities and other organisations) on a wide variety of data-related topics, such as:

  • direct marketing and advertising;
  • connected cars and the Internet of Things;
  • data breaches;
  • sector-specific privacy legislation;
  • compliance with the General Data Protection Regulation (GDPR), Telecommunications Act (Telecommunicatiewet), Data Act and AI Act;
  • requests, claims and complaints (access, rectification, objection, data portability and damages);
  • data sharing with third parties;
  • AI model training;
  • business activity outsourcing
  • employee monitoring;
  • corporate investigations.

Dispute resolution

The GDPR and other new data legislation offer data subjects many opportunities to exercise their rights. They can file a complaint with the supervisory authority or go to court. The number of interest organisations representing specific groups in collective actions is also on the rise.

We regularly litigate in data cases, both before supervisory authorities and judicial bodies (in administrative and private law cases), including the Supreme Court.

Our team also has considerable experience dealing with the Dutch Data Protection Authority and the Netherlands Authority for Consumers and Markets, including in investigations and enforcement procedures.

Multidisciplinary approach

We work seamlessly with our expert colleagues in other fields, such as Litigation, Consumer Law, Financial Regulatory, Employment, Competition and Corporate/M&A.

IT
IT plays a crucial role in today’s business operations – and with rapid innovation come complex legal challenges. From cloud services and outsourcing agreements to data protection and litigation, we help navigate risks and seize opportunities.
Technology
Whether it's about the largest and fastest-growing companies having technology at the core of their business model, financial institutions developing new ways to commercialise their services or industrials relying heavily on technology for their products – technology is top of mind.

Recent
Work

Represented Risepoint (Unibet) in GDPR class action proceedings initiated by Gokverliesterug on behalf of online gamblers.

Represented Ola Cabs before the Amsterdam Court of Appeal in the case of three London app drivers invoking their data protection rights to get personal data and information from Ola Cabs regarding automated decision-making.

Advised Royal VolkerWessels on the company-wide implementation of the General Data Protection Regulation, the development and implementation of a data breach policy and the development and implementation of a cloud services policy.

Provided strategic guidance to an automotive OEM on assessing the implications of the EU Data Act for vehicle data and developing effective compliance measures.

Acted on behalf of RDW (Netherlands Vehicle Authority) in GDPR litigation before the Raad van State (Council of State), addressing issues related to automated decision-making.

Acted on behalf of a leading online platform in court proceedings opposing requests for the disclosure of user information.

Represented Risepoint (Unibet) in GDPR class action proceedings initiated by Gokverliesterug on behalf of online gamblers.

Represented Ola Cabs before the Amsterdam Court of Appeal in the case of three London app drivers invoking their data protection rights to get personal data and information from Ola Cabs regarding automated decision-making.

Advised Royal VolkerWessels on the company-wide implementation of the General Data Protection Regulation, the development and implementation of a data breach policy and the development and implementation of a cloud services policy.

Provided strategic guidance to an automotive OEM on assessing the implications of the EU Data Act for vehicle data and developing effective compliance measures.

Acted on behalf of RDW (Netherlands Vehicle Authority) in GDPR litigation before the Raad van State (Council of State), addressing issues related to automated decision-making.

Acted on behalf of a leading online platform in court proceedings opposing requests for the disclosure of user information.

"Houthoff offers in-depth knowledge about both the legal context as well as market specificities, resulting in concrete advice that is workable and quick to implement."

Chambers Europe

TMT: IT & IT Outsourcing

Latest
publications

1 May 2024
1 May 2024
Een datalek betekent niet zonder meer een inbreuk op art. 24 en 32 AVG. Noot bij Hof van Justitie EU. Jurisprudentie Bescherming Persoonsgegevens.
9 September 2023
9 September 2023
Misleidende omissie inzake gebruik persoonsgegevens. Noot bij Rechtbank Amsterdam. Jurisprudentie Onderneming & Recht.
9 December 2022
9 December 2022
Grenzen waarbinnen een representatieve vordering gebaseerd op de AVG mogelijk is. Noot bij Hof van Justitie EU. JBPR.
This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.