Add a bookmark to get started

Verena Grentzenberg

She/herPartner
Excellent expert in data protection law as well as calm and level-headed crisis manager.
Competitor, JUVE Handbook
About

Verena Grentzenberg is a data protection and cybersecurity lawyer, with over sixteen years of experience advising international and national companies on compliance and strategy. Her clients belong to various sectors, including media, retail, automotive, technology and life sciences and describe her as “excellent data protection lawyer and calm and level-headed crisis manager” (JUVE Handbook 2022/2023).

Verena focuses on advising new business models (especially in the online sector, including social media) and regularly provides advice on big data projects, AI and international transfers of data. She has helped many clients in seizing opportunities by providing strategic guidance and reconciliating with data protection authorities, where advisable. Verena also assists with CRM projects and cloud computing solutions (including for regulated industries). Since 2016, she has conducted numerous GDPR compliance programs for clients from different sectors. She also advises on employee privacy law issues and whistleblower hotlines. In recent years, cybersecurity advice has become another area of focus of her and her team.She regularly represents clients before data protection supervisory authorities in contentious issues and provides both strategic and on the ground support in reportable data security incidents.

Prior to joining DLA Piper Verena worked with two different international law firms in Hamburg as well as IT Consultant and software developer for international transport and logistics companies.

Verena periodically speaks and writes on data protection law issues

Professional QualificationsRechtsanwältin admitted with Hanseatische Rechtsanwaltskammer Hamburg

EXPERIENCE

  • For more than sixteen years, she has advised an international media group on a wide range of data protection issues, including strategic advice on online marketing and international data transfers as well as representation in regulatory proceedings and advice on the launch of new online services. 
  • Representing an online publisher in a consumer protection organization's fundamental claim against online marketing.
  • Representing an online marketplace in a landmark lawsuit brought by a consumer protection organization regarding the design of its business model from a data protection perspective.
  • Supporting with the acquisition of a target in the online marketing business which included an analysis of the risks associated with the specific business model of the target based on our deep understanding of the technical aspects of online marketing and taking into account the many regulatory procedures in this area known to us from our consulting practice; in this way, we were able to specifically identify risks that extended beyond the usual sector-specific risks and achieve elimination pre-closing.
  • Advising various clients on the lawful implementation of AI solutions.
  • Advising a global manufacturer of commercial vehicles on the data protection challenges of the Data Act.
  • Leading a team of lawyers from different practice groups in assisting a client from the IT industry with regard to a cybersecurity attack, including advising on data protection requirements, criminal law aspects, liability towards customers and reputation management.
  • Representing an industrial company in a regulatory proceeding regarding health data, including internal investigation and reorganization of processes.
  • Together with her team, she has already assisted a larger number of multinational companies in pragmatically addressing the challenges for international data transfers arising from the ECJ's Schrems II decision.
  • Co-leading a global compliance project of a multinational automotive supplier with a projected term of 2+ years.
  • Advising a car manufacturer on a new business model in the field of digital services.
  • Carrying out a project to determine the requirements for the implementation of telematics in company cars of a multinational in the life sciences sector under data protection and employment law issues in 15+ countries.
  • Supporting a US client from the life sciences sector in determining the data protection requirements for a market entry in the EU and in particular in Germany.
  • Providing advice to a software company on an anonymization project concerning patient data, including providing insights on technical requirements, and consultation with a German data protection authority.
  • Leading a comprehensive review of the data protection and employment law requirements for the implementation of an HR information system of a listed company in 85+ countries.
  • Supporting a tech giant with employee privacy law advice, including in works council negotiations, data subject access requests, a policy on government and law enforcement requests as well as in administrative proceedings.
  • Advising plenty of clients on data subject access requests of former employees.
  • Ongoing advice of a global audio brand on various GDPR issues, including the preparation of guidelines and agreements, international transfers, investigations and data breaches, for more than 6 years.
Languages
  • German
  • English
Education
  • IT management assistant, Chamber of Commerce Hamburg, 1994
  • University of Hamburg, First State Examination, 2000
  • Post graduate program „Law and Economics“, Hamburg


    Higher Regional Court, Hamburg, Second State Examination, 2004

Awards & Recognitions

  • JUVE Handbook 2024/2025: Frequently recommended for IT law: contracts and licenses, transactions and outsourcing as well as for data law; “excellent data protection lawyer and calm and level-headed crisis manager”, competitor
  • Legal 500 Germany 2024: Leading individual and recommended for information technology: data protection
  • Handelsblatt in cooperation with Best Lawyers 2024/2025: Recommended for data security and privacy law as well as media law
  • WirtschaftsWoche 2023: Recommended as "top lawyer" for data protection

Publications

Prior Experience

Prior to joining DLA Piper Verena worked with two different international law firms in Hamburg as well as IT Consultant and software developer for international transport and logistics companies.

Additional Information

  • Verena Grentzenberg teaches online data protection law at the Hamburg Media School and lectures on employee data protection in the digital world at Bucerius Law School since the summer semester 2024.

Memberships And Affiliations

  • German Association for Law and Informatics e.V. (DGRI)
  • Alumni Club of the German National Merit Foundation (Studienstiftung des deutschen Volkes)
  • German Youth for Understanding Committee (YFU)

Connect