- Represented a global company offering products and manufacturing/logistics services in numerous privacy and data protection projects. Providing advice on global data protection compliance issues impacting the company’s business, including the creation and implementation of global data protection standards and advising on compliance with the GDPR. Advised on the implementation of alternative data transfer mechanisms and the impact of the proposed ePrivacy Regulation.
- Represented a U.S.-based aerospace and defense technology company on all aspects of EU data protection law, including the company’s GDPR compliance project. Assisted with the implementation of SaaS-based critical communications and enterprise safety solutions.
- Counseled a global media company on its pan-EU GDPR compliance efforts and managed a two-year GDPR compliance project.
- Advised a Swiss-based biopharmaceutical company on a variety of pan-EU data protection questions, including the launch of medical apps, the collection and use of patient data, the processing of personal data in the context of clinical trials, and general compliance with the GDPR.
- Advised a U.S.-based manufacturer of cosmetics, fragrance, and hair care products on EU data protection and privacy matters. Assisted with GDPR compliance and advised on the offering of free Wi-Fi in its stores.
- Advised a multinational conglomerate corporation on cross-border employee monitoring questions.
- Represented a multinational manufacturer of sports apparel and footwear in various matters, including innovative marketing initiatives, privacy in the context of wearables, and compliance with the GDPR.
- Advised a private bank and investment services provider on EU data protection compliance matters, including the provisions of anti-money laundering services and the cross-border transfer of personal data.
- Counseled a multinational human resources consulting firm on the implementation of GDPR compliance measures and the launch of a new talent management system.
- Represented a global provider of business intelligence, mobile software, and cloud-based services on all aspects of EU data protection law.
Wim Nauwelaerts
Partner,
- Phone: +32 2 486 8822
- Other Phone: +1 202 239 3709
- Email: wim.nauwelaerts@alston.com
With over two decades of experience, Wim provides critical privacy, cybersecurity, and data protection support for multinational organizations to ensure their valuable data assets are used appropriately and safeguarded from risk.
Wim Nauwelaerts is the partner-in-charge of Alston & Bird’s Brussels office, leading the firm’s European Privacy, Cyber & Data Strategy Team.
A true veteran in his field, Wim Nauwelaerts has been advising multinational companies on privacy, data protection, and cybersecurity matters for almost 25 years. His practice spans a variety of industries, with a particular emphasis on life sciences, media, and technology.
Wim has developed internationally recognized experience in assisting clients with General Data Protection Regulation (GDPR) compliance projects, including implementing cross-border data transfer strategies and preparing transfer impact assessments. He frequently counsels clients on data subject access requests, and is also well-versed in drafting and negotiating GDPR-related contract terms.
In his cyber practice, clients who have suffered a cyber breach incident usually bring Wim in at an early stage to help assess their legal obligations and develop a strategy on notifications to regulators and affected individuals.
Wim has written and spoken widely on privacy and cyber-related topics, such as data transfers out of Europe, cross-border breach notifications, and data protection enforcement.
Languages
- Dutch
- English
- French
Bar Admissions
- Antwerp and Brussels, Belgium
Education
- University of Georgia (LL.M., 1994)
- Vrije Universiteit Brussel (J.D., 1992)
Memberships
- Brussels Bar
- Antwerp Bar
- International Association of Privacy Professionals (IAPP)
Wim Nauwelaerts, Technology & Privacy partner, describes how Alston & Bird meets the needs of banks and financial institutions with combined experience in financial services, privacy and data security.