Danielle van der Merwe advises multinational clients on a range of data privacy and cybersecurity matters, including in connection with the compliance with privacy and cybersecurity requirements and privacy laws in the United Kingdom, Europe, the United Arab Emirates, and the Kingdom of Saudi Arabia.

Drawing on over a decade of experience, Danielle counsels a variety of global companies on their most complex and sensitive data privacy issues. Her industry experience spans a number of cutting-edge sectors, including technology, healthcare, finance, social media, and gaming.

Danielle regularly advises clients throughout the corporate lifecycle, serving as an extension of their in-house legal team. She brings particular experience handling cross-border matters arising from product developments, transactions, and investments, including large-scale privacy compliance reviews. Danielle also delivers sophisticated insight on privacy issues in connection with white collar investigations.

Her practice includes advising on:

  • Global data privacy compliance programs 
  • Complex data localization and data transfer solutions 
  • Sensitive internal and external investigations
  • Strategic management of data breach incidents and regulatory inquiries 
  • Product counselling
  • Data subject rights requests
  • Online advertising, profiling, and marketing strategies
  • Data sharing arrangements
  • Privacy aspects in M&A transactions and IPOs

A business-minded problem solver, Danielle offers a unique perspective on clients’ needs garnered from her secondment experience at several telecoms, retail, health, insurance, and sports companies.

Danielle is a member of the International Association of Privacy Professionals.

In addition to her commercial work, Danielle provides privacy-related counsel to nonprofit clients on a pro bono basis. 

Danielle’s experience includes advising:

  • Global healthcare company on its privacy compliance program (including GDPR compliance) 
  • Global veterinary practice on its privacy compliance program 
  • Large KSA entity on its KSA privacy compliance program including for its subsidiaries in the healthcare and consumer product space
  • Global manufacturing and healthcare company on a large personal data breach and global reporting requirements
  • Ericsson and its subsidiary Vonage on the privacy considerations in relation to a new JV entity for providing Network APIs to the global market 
  • Large telecoms company on its global privacy compliance program
  • Clario, a leading provider of digital endpoint solutions to the clinical trial industry, on its US$8.875 billion sale to Thermo Fisher Scientific
  • StubHub, a leading global secondary ticketing marketplace on its US$800 Million IPO
  • Amphenol Corporation, the global interconnect solutions provider, on data privacy and cybersecurity aspects of its US$10.5 billion acquisition of CommScope’s connectivity and cable solutions business
  • Figma, a design and product development platform, on data privacy and cybersecurity matters of its US$1.2 billion initial public offering
  • A significant social media company in matters before the Irish Data Protection Commission and other international regulatory bodies on issues related to data privacy
  • Several issuers and underwriters in connection with privacy issues arising from initial public offerings
  • A global healthcare and pharmaceutical company on its data privacy obligations arising out of a FCPA investigation*
  • Various companies in relation to data privacy aspects of white collar investigations
  • A global investment firm on privacy and security aspects related to the sale of WebMD, a health information web portal operating in the US, the EU, and the Asia-Pacific region
  • A large music industry company on privacy advice relating to vendor procurement and processing agreements
  • Various global airlines and airlines manufacturers on their compliance with global data privacy laws (including the GDPR)
  • Various organizations in the financial sector, including hedge funds, private equity firms, and securitization providers, about their obligations under the GDPR
  • A large pension fund and administrator on its obligations under the GDPR, including contentious data subject rights requests
  • A prominent international gaming and retail company in relation to its compliance with the GDPR
  • A global electronic manufacturing company on securing binding corporate rules*
  • A large online design platform on a multi-jurisdictional data breach incident
  • A large technology company on its use of profiling and analytics technologies

*Matter handled prior to joining Latham 

Bar Qualification

  • Scotland (Solicitor)

Education

  • LL.B. (First Class Honors), University of Aberdeen, 2008

Languages Spoken

  • Afrikaans
  • English