David advises large, multinational clients on various aspects of EU privacy, data protection and cybersecurity law. As a result of his extensive experience in this area, he has developed a strong knowledge of the key privacy, data protection and cybersecurity issues companies are facing.David assists clients on all aspects of the EU General Data Protection Regulation (GDPR). In addition to managing comprehensive data protection compliance projects such as GDPR readiness projects, David advises clients on cutting-edge privacy and data protection law questions, such as on those related to the use of employee monitoring technologies, innovative customer analytics, AI applications and medical devices. He has also helped numerous clients implement mechanisms to legitimize international data flows, such as EU Standard Contractual Clauses and Binding Corporate Rules.On the cybersecurity front, David helps clients prepare for and respond to various types of system and information security incidents. In addition, he has extensive experience assisting clients on their compliance journey with the full spectrum of new digital laws in the EU, including NIS2, DORA, the Data Act, the AI Act and the Cyber Resilience Act.Clients value David's practical approach in an area that is generally considered highly theoretical.

Bar Admissions
Brussels

Education
LLM, International and European Law, University of Brussels, magna cum laude, 2010

BA, University of Brussels, magna cum laude, 2008

A Guide for Binding Corporate Rules, Bloomberg Law

Advocate General finds cookie consent must be active and separate, LexisNexis

AI Act: Next Steps for Businesses

Belgium - Time to Comply with the Amended Telecom Act, The Privacy Advisor, International Association of Privacy Professionals, Volume 12, Number 10

Belgium Data Retention

Belgium Data Retention

Belgium Data Retention

Belgium, The International Comparative Legal Guide to: Data Protection 2016, 3rd Edition

Chapter 4, Belgium, The International Comparative Legal Guide to Data Protection 2015, 2nd Edition

Chapter 4: Belgium, The International Comparative Legal Guide to: Data Protection 2017, 4th Edition

Comprehensive EU Cyber Security Law in the Pipeline, CPO Magazine

COVID-19 and Business Continuity in the EU, National Law Review

COVID-19 and GDPR, HRO Today

COVID-19 and GDPR: Organizational Considerations for Business Continuity of Privacy Compliance Programs, CPO Magazine

Data Protection & Privacy ‒ Belgium

Data Protection & Privacy 2027 ‒ Belgium

Data Protection & Privacy 2019, Belgium, Getting the Deal Through

Data Protection & Privacy 2020, Belgium, Getting the Deal Through

Data Protection & Privacy 2021, Belgium, Getting the Deal Through

Data Protection & Privacy 2022, Belgium, Getting the Deal Through

Data Protection & Privacy 2022, EU Overview, Getting the Deal Through

Data Protection & Privacy 2023, Belgium, Getting the Deal Through

Data Protection & Privacy 2023, EU Overview, Getting the Deal Through

Data Protection & Privacy, Belgium, Getting the Deal Through

De Elektronische Handtekening, Wet en Duiding, Part V: Bank en Zekerheden - series Economisch Recht, Larcier

EU Deep dive into Q&As regarding the 'local laws and government access' section of the new SCCs, OneTrust DataGuidance

EU: Commission releases long-awaited SCCs for international data transfers, OneTrust DataGuidance

EU: New draft SCCs from the Commission, OneTrust DataGuidance

European Commission's International Data Transfer Standard Contractual Clauses: What Businesses Need to Know, Practical Law

Flexible but robust cybersecurity compliance programs are essential to comply with new EU digital laws

GDPR, AI and Cybersecurity Considerations in M&A Transactions

International: Navigating cross-border data transfers: Implications of the OECD Declaration

Key GDPR Compliance Issues to Watch in the Artificial Intelligence Space, Infosecurity Magazine

Key Takeaways From the European Commission's Article 28 Standard Contractual Clauses, Thomson Reuters Practical Law Data Privacy Advisor

Lessons Learned from Key GDPR Enforcement Cases, Bloomberg Law

Privacy en evenementen: Wat te doen met die berg aan persoonsgegevens?, Handboek manifestaties en evenementen, Part V, Chapter 3, Politeia

Privacy, E-Commerce, and Data Security - International Legal Developments Year in Review: 2011, The International Lawyer, Volume 46, Number 1

Records Retention: Belgium, Thomson Reuters Practical Law Data Privacy Advisor

Records Retention: Overview (Belgium)

Schrems II Update and Data Transfer Assessment, Bloomberg Law

The EU AI Act: Guide for In-House Lawyers

The Impact of the European Union's Artificial Intelligence Act on Human Resources Activities

The Impact of the European Union's Artificial Intelligence Act on the Development and Use of Medical Devices

The NIS2 Directive: How far does it reach?

To test, or not to test? Key data protection considerations for reopening workplaces in the EU, Thomson Reuters

UK/EU Privacy & Cybersecurity: Current Legislative Trends

Use of artificial intelligence in e-commerce fraud detection and prevention: GDPR risks, Thomson Reuters Regulatory Intelligence

What's New in the EU's Updated Standard Contractual Clauses?, Infosecurity Magazine