Muhammed Demircan LL.M.

he/himLawyer

Emailmuhammed.demircan@dlapiper.com

Call+322 500 16 74

Brussels

About

Areas of FocusData, Privacy and Cybersecurity Technology

EXPERIENCE

Advising a global retail company on the GDPR and the EU AI Act implications of deploying an automated and AI-enabled CV evaluation tool.
Advising multiple companies on the applicability of the Data Act, Data Governance Act, the EU AI Act, Digital Services Act and EU cybersecurity laws based on their product and service offerings.
Supporting the EU legal policy strategy of a major provider of general-purpose AI models.
Advising on generative AI usage rules for a global pharmaceutical company.
Drafting a detailed legitimate interest assessment and advising on the safeguards to be implemented for an internal investigation for a global manufacturer of automotive motors and related products.
Advising a health startup on conditions applicable to 'anonymisation' and 'pseudonymisation' under the GDPR, taking the latest CJEU jurisprudence into account.
Advising a global retail company on the GDPR implications of deploying a global data loss prevention tool.
Advising on the qualification of a (connected) product and compliance obligations under the Data Act for a global company active in the batteries & rechargeables sector.
Drafting data breach notifications towards the Belgian Data Protection Authority, drafting multiple article 34 notification letters to data subjects and analysing the risks and mitigations arising from data breaches for multiple major companies.
Conducting several data protection and privacy audits with different areas of focus such as cookie compliance, a “cookieless” marketing strategy and all-round GDPR compliance for various Belgian firms, such as an insurance firm and a monitored alarms firm.
Providing in-house training for a very large social media company on the upcoming “EU Strategy for Data” regulations, focusing on the Digital Markets Act and the GDPR, to an audience of engineers and policy officers.
Assisting an UK-based AI risk management company to navigate and orient activities in light of the EU AI Act, helping them develop an EU AI Act integrated approach to technical risk management of AI systems.
Advising a Belgian medical research company on the data access rules of the upcoming European Health Data Space regulation.
Advising a leading Belgian insurance company on international data transfers, with a focus on existing transfer schemes and the newly accepted EU-US Data Privacy Framework.
Assisting a multinational German company active in life sciences sector with defining the notions of the data controller and data processor in the context of an expected M&A deal.
Drafting and reviewing general and activity-specific privacy policies and cookie policies after various internal workshops and foresight for multiple companies, active in different sectors and countries.

Languages

Education

Vrije Universiteit Brussel, PhD Researcher in Law, 2021-2023

College of Europe, Advanced Master in European Law (LL.M.), Mention Bien, 2021

Galatasaray University, LL.B., Honour Roll, 2019

Jagiellonian University, Erasmus Exchange, 2018

Publications and media

Seminars

Prior Experience

Before joining DLA Piper, Muhammed worked first in an international law firm as a trainee associate, focusing on corporate law, competition law and data protection and privacy law(s) in Istanbul. He then joined a leading data protection and privacy research centre in Brussels, where he acted as the managing director of the research centre. He also worked in an international consultancy firm in Brussels, focusing on Data & Privacy compliance.

Additional Qualifications

Individual Expert on European Data Protection Board (EDPB) Support List of Experts.

Memberships and Affiliations

Istanbul Bar, 2020
Associated Member of the French-Speaking Brussels Bar (B-List, International List), 2023
International Association of Privacy Professionals
External Member of the Brussels Privacy Hub