David assists large, multinational clients with various aspects of EU privacy and data protection law. As a result of his extensive experience in this area, he has developed a strong knowledge of the key privacy and data protection issues companies are facing.

Since the beginning of the legislative process of reforming Europe’s data protection laws, David has worked extensively in preparing clients for all aspects of the new EU General Data Protection Regulation (GDPR). In addition to managing compliance projects such as GDPR readiness projects, David advises clients on cutting-edge privacy and data protection law questions, such as on those related to the use of employee monitoring technologies and mobile applications. He has also helped numerous clients implement mechanisms to legitimize international data flows, such as EU Standard Contractual Clauses and Binding Corporate Rules.

Clients value David’s practical approach in an area that is generally considered highly theoretical. 

Bar Admissions

Education
LLM, International and European Law, University of Brussels, magna cum laude, 2010

BA, University of Brussels, magna cum laude, 2008

• Privacy, E-Commerce, and Data Security – International Legal Developments Year in Review: 2011, The International Lawyer, Volume 46, Number 1
• COVID-19 and GDPR, HRO Today
• De Elektronische Handtekening, Wet en Duiding, Part V: Bank en Zekerheden – series Economisch Recht, Larcier
• What's New in the EU's Updated Standard Contractual Clauses?, Infosecurity Magazine
• Use of artificial intelligence in e-commerce fraud detection and prevention: GDPR risks, Thomson Reuters Regulatory Intelligence
• Advocate General finds cookie consent must be active and separate, LexisNexis
• Data Protection & Privacy 2020, Belgium, Getting the Deal Through
• A Guide for Binding Corporate Rules, Bloomberg Law
• EU: Commission releases long-awaited SCCs for international data transfers, OneTrust DataGuidance
• Comprehensive EU Cyber Security Law in the Pipeline, CPO Magazine
• Chapter 4, Belgium, The International Comparative Legal Guide to Data Protection 2015, 2nd Edition
• COVID-19 and GDPR: Organizational Considerations for Business Continuity of Privacy Compliance Programs, CPO Magazine
• Data Protection & Privacy 2021, Belgium, Getting the Deal Through
• Schrems II Update and Data Transfer Assessment, Bloomberg Law
• Data Protection & Privacy 2022, Belgium, Getting the Deal Through
• Privacy en evenementen: Wat te doen met die berg aan persoonsgegevens?, Handboek manifestaties en evenementen, Part V, Chapter 3, Politeia
• Data Protection & Privacy, Belgium, Getting the Deal Through
• Belgium – Time to Comply with the Amended Telecom Act, The Privacy Advisor, International Association of Privacy Professionals, Volume 12, Number 10
• What’s New in the EU’s Updated Standard Contractual Clauses?, Infosecurity Magazine
• Key Takeaways From the European Commission's Article 28 Standard Contractual Clauses, Thomson Reuters Practical Law Data Privacy Advisor
• Key GDPR Compliance Issues to Watch in the Artificial Intelligence Space, Infosecurity Magazine
• Data Protection & Privacy 2023, Belgium, Getting the Deal Through
• Belgium, The International Comparative Legal Guide to: Data Protection 2016, 3rd Edition
• European Commission’s International Data Transfer Standard Contractual Clauses: What Businesses Need to Know, Practical Law
• Data Protection & Privacy 2023, EU Overview, Getting the Deal Through
• COVID-19 and Business Continuity in the EU, National Law Review
• Data Protection & Privacy 2019, Belgium, Getting the Deal Through
• To test, or not to test? Key data protection considerations for reopening workplaces in the EU, Thomson Reuters
• Data Protection & Privacy 2022, EU Overview, Getting the Deal Through
• EU Deep dive into Q&As regarding the ‘local laws and government access’ section of the new SCCs, OneTrust DataGuidance
• UK/EU Privacy & Cybersecurity: Current Legislative Trends
• Chapter 4: Belgium, The International Comparative Legal Guide to: Data Protection 2017, 4th Edition
• Lessons Learned from Key GDPR Enforcement Cases, Bloomberg Law
• Records Retention: Belgium, Thomson Reuters Practical Law Data Privacy Advisor
• EU: New draft SCCs from the Commission, OneTrust DataGuidance