Danielle van der Merwe advises multinational clients on a broad range of data privacy and cybersecurity matters, with a focus on compliance with applicable laws and requirements in the United Kingdom, Europe, the United Arab Emirates, and the Kingdom of Saudi Arabia.

Drawing on over a decade of experience, Danielle counsels a variety of global companies on their most complex and sensitive data privacy issues. Her industry experience spans a number of cutting-edge sectors, including technology, healthcare, finance, social media, and gaming.

Danielle regularly advises clients throughout the corporate lifecycle, serving as an extension of their in-house legal team. She brings particular experience handling cross-border matters arising from product developments, transactions, and investments, including large-scale privacy compliance reviews. Danielle also delivers sophisticated insight on privacy issues in connection with white collar investigations.

Her practice includes advising on:

  • Global data privacy compliance programs 
  • Complex data localization and data transfer solutions 
  • Sensitive internal and external investigations
  • Strategic management of data breach incidents and regulatory inquiries 
  • Product counselling
  • Data subject rights requests
  • Online advertising, profiling, and marketing strategies
  • Data sharing arrangements
  • Privacy aspects in M&A transactions and IPOs

A business-minded problem solver, Danielle offers a unique perspective on clients’ needs garnered from her secondment experience at several telecoms, retail, health, insurance, and sports companies.

Danielle is a member of the International Association of Privacy Professionals.

In addition to her commercial work, Danielle provides privacy-related counsel to nonprofit clients on a pro bono basis. 

Danielle’s experience includes advising:

  • Global healthcare company on its privacy compliance program (including GDPR compliance) 
  • Global veterinary practice on its privacy compliance program 
  • Large KSA entity on its KSA privacy compliance program including for its subsidiaries in the healthcare and consumer product space
  • Global manufacturing and healthcare company on a large personal data breach and global reporting requirements
  • Ericsson and its subsidiary Vonage on the privacy considerations in relation to a new JV entity for providing Network APIs to the global market 
  • Large telecoms company on its global privacy compliance program
  • Clario, a leading provider of digital endpoint solutions to the clinical trial industry, on its US$8.875 billion sale to Thermo Fisher Scientific
  • StubHub, a leading global secondary ticketing marketplace on its US$800 Million IPO
  • Amphenol Corporation, the global interconnect solutions provider, on data privacy and cybersecurity aspects of its US$10.5 billion acquisition of CommScope’s connectivity and cable solutions business
  • Figma, a design and product development platform, on data privacy and cybersecurity matters of its US$1.2 billion initial public offering
  • A significant social media company in matters before the Irish Data Protection Commission and other international regulatory bodies on issues related to data privacy
  • Several issuers and underwriters in connection with privacy issues arising from initial public offerings
  • A global healthcare and pharmaceutical company on its data privacy obligations arising out of a FCPA investigation*
  • Various companies in relation to data privacy aspects of white collar investigations
  • A global investment firm on privacy and security aspects related to the sale of WebMD, a health information web portal operating in the US, the EU, and the Asia-Pacific region
  • A large music industry company on privacy advice relating to vendor procurement and processing agreements
  • Various global airlines and airlines manufacturers on their compliance with global data privacy laws (including the GDPR)
  • Various organizations in the financial sector, including hedge funds, private equity firms, and securitization providers, about their obligations under the GDPR
  • A large pension fund and administrator on its obligations under the GDPR, including contentious data subject rights requests
  • A prominent international gaming and retail company in relation to its compliance with the GDPR
  • A global electronic manufacturing company on securing binding corporate rules*
  • A large online design platform on a multi-jurisdictional data breach incident
  • A large technology company on its use of profiling and analytics technologies

*Matter handled prior to joining Latham 

Bar Qualification

  • Scotland (Solicitor)

Education

  • LL.B. (First Class Honors), University of Aberdeen, 2008

Languages Spoken

  • Afrikaans
  • English