David Dumont

David advises large, multinational clients on various aspects of EU privacy, data protection and cybersecurity law. As a result of his extensive experience in this area, he has developed a strong knowledge of the key privacy, data protection and cybersecurity issues companies are facing.

David assists clients on all aspects of the EU General Data Protection Regulation (GDPR). In addition to managing comprehensive data protection compliance projects such as GDPR readiness projects, David advises clients on cutting-edge privacy and data protection law questions, such as on those related to the use of employee monitoring technologies, innovative customer analytics,  AI applications and medical devices. He has also helped numerous clients implement mechanisms to legitimize international data flows, such as EU Standard Contractual Clauses and Binding Corporate Rules.

On the cybersecurity front, David helps clients prepare for and respond to various types of system and information security incidents. In addition, he has extensive experience assisting clients on their compliance journey with the full spectrum of new digital laws in the EU, including NIS2, DORA, the Data Act, the AI Act and the Cyber Resilience Act.

Clients value David’s practical approach in an area that is generally considered highly theoretical. 

• Advised numerous multinational clients on compliance with EU data protection law requirements, including drafting and reviewing pan-European privacy policies and notices.
• Assisted clients with the development and implementation of various international data transfer mechanisms, including EU Standard Contractual Clauses and Binding Corporate Rules.
• Represented clients in negotiations of data processing agreements, such as cloud services agreements.
• Advised clients on data protection issues related to the use of new technologies, the launch of new products/services/websites/applications and the roll out of databases.
• Successfully represented clients in interactions with the Belgian Data Protection Authority.
• Managed various data protection compliance projects, including GDPR readiness projects.
• Assisted clients in handling data breach incidents.
• Advised clients on the implementation of employee monitoring tools and technologies, such as data loss prevention programs and CCTV systems.

• Recommended for Belgium: EU Regulatory – Privacy and Data Protection in Legal 500 EMEA, 2024-2025