Vonne Laan
Privacy lawyer / advocaat
Phone
+31 (0)6 11 38 85 26

Biography

Vonne assists Dutch and international clients with various matters in the field of privacy, data protection and cybersecurity. She provides strategic advice that aligns commercial goals with compliance obligations.

More specifically, Vonne’s work entails the design and implementation of GDPR compliance plans, drafting and negotiating privacy agreements (e.g. data processing agreements), drafting other privacy documentation (e.g. privacy statements) and developing processing registers (data mapping). She also advises on privacy-related matters such as cookie policies, direct marketing campaigns and whistleblowing schemes. In addition, Vonne assists her clients in the event of enforcement by the competent authority or court proceedings.

Public speaker and writer

Vonne is a frequent speaker at conferences and seminars. She also gives guest lectures at Nyenrode Business University and the Windesheim University of Applied Sciences. In addition, she provides courses at private training institutions as well as for clients. Vonne also has many legal publications to her name and is the author of the privacy law edition of a Dutch standard series (Boom Basics Privacyrecht). She is furthermore a permanent contributor to the Dutch journals on internet law (Tijdschrift voor Internetrecht) and data protection case law (Jurisprudentie Bescherming persoonsgegevens).

Memberships

Vonne is an active member of the International Association of Privacy Professionals (IAPP), currently acting as the Co-Chair for the Dutch chapter. Furthermore, she is a member of various Dutch law associations such as the Netherlands Association of Privacy Lawyers (Vereniging Privacyrecht Advocaten). This association is only open to members specialised - demonstrably and extensively - in the field of privacy law. Her other memberships include the Association for Privacy Law (VPR) and the Netherlands Association for Information Technology and Law (NVvIR).

Background

Vonne became interested in the concept of privacy while working as an independent copywriter. How do we perceive privacy in a continuously digitalizing society? She became a privacy lawyer at a renowned internationally operating Dutch law firm in 2013 and gained further experience in this area. She was part of the Information Technology Team for five years until she started her own law firm – Value Privacy Law – in November 2018 and combined forces with Eliëtte Vaal in May 2020 to start The Data Lawyers.

Latest Posts
Update ePrivacy rules: valid consent for cookies

What are the exact rules in relation to cookie consent? How can consent be obtained in a compliant but also user friendly manner? The Data Lawyers published a white paper about this topic in cooperation with IIR.

Arrow Icon
Boom Basics Privacy Law

Vonne Laan is the author of the book Boom Basics Privacy Law (Boom Basics Privacyrecht). This is an introductory book on privacy law, especially the General Data Protection Regulation (GDPR) and the Implementation Act thereof in the Netherlands.

Arrow Icon
Day of the Privacy Officer 2020

Vonne Laan has been invited to speak about sharing data sets at the Day of the Privacy Officer 2020.

Arrow Icon
Privacy issues concerning corona (COVID-19)

The Dutch Data Protection Authority published guidance on the privacy rules in relation to corona (COVID-19). But how does this guidance relate to the vision on this of other European Data Protection Authorities? Read more on this in our blog “Privacyperikelen rond Corona (COVID-19): wat zeggen de Europese privacytoezichthouders?” (in Dutch).

Arrow Icon
Introduction Privacy Law at Nyenrode Business University

On 18 November 2019, Vonne Laan gave her two-yearly presentation at Nyenrode Business University (Nyenrode Business Universiteit)

Arrow Icon
Back to the basics: controller or processor under data protection law?

Vonne Laan and Eliëtte Vaal wrote an overview article which can be used as easy point of reference in practice. It discusses two concepts under data protection law that have been endlessly debated: that of “controller” and “processor”. How workable are these concepts nowadays? What are the complications in practice and how can they be solved? Read more about this in our article “Back to the basics: Verwerkingsverantwoordelijke of verwerker onder de AVG?”.

Arrow Icon
Autumn meeting Dutch Association for Information Technology & Law (NVvIR)

Vonne Laan spoke at the Autumn meeting of the Dutch Association for Information Technology & Law (Nederlandse Vereniging voor Informatietechnologie & Recht; NVvIR). A society for approx. 500 legal counsels and lawyers that are specialised in IT and the law. 

Arrow Icon
The CNIL about privacy issues related to blockchain

The Commission nationale de l'informatique et des libertés (CNIL) – the French Data Protection Authority – published guidelines on how the data protection rules should be applied to blockchain technology. Next to possible issues, the CNIL also provides pointers on how blockchains can be built in a privacy compliant manner. This article provides an overview of these pointers with some additions and critical notes. 

Arrow Icon
Give prompt payers of privacy fines an “early bird discount”

In this article Vonne Laan argues that giving an “early bird discount” to prompt payers of privacy fines in the Netherlands, would alleviate and facilitate the congested enforcement department of the Dutch Data Protection Authority (the Autoriteit Persoonsgegevens). It’s an opinion piece written for a Dutch newspaper (het Financieel Dagblad).

Arrow Icon