undefined
Skip to main content
Global Site|en

Add a bookmark to get started

Global Site
Africa
MoroccoEnglish
South AfricaEnglish
Asia Pacific
AustraliaEnglish
Hong Kong SAR ChinaEnglish简体中文
KoreaEnglish
New ZealandEnglish
SingaporeEnglish
ThailandEnglish
Europe
BelgiumEnglish
Czech RepublicEnglish
HungaryEnglish
IrelandEnglish
LuxembourgEnglish
NetherlandsEnglish
PolandEnglish
PortugalEnglish
RomaniaEnglish
Slovak RepublicEnglish
United KingdomEnglish
Middle East
BahrainEnglish
QatarEnglish
North America
Puerto RicoEnglish
United StatesEnglish
OtherForMigration
Verena_Grentzenberg_personality_web_large

Verena Grentzenberg

She/herPartner
Excellent expert in data protection law as well as calm and level-headed crisis manager.
Competitor, JUVE Handbook
About

Verena Grentzenberg is a data protection and cybersecurity lawyer, with over seventeen years of experience advising international and national companies on compliance and strategic questions. Her clients belong to various sectors, including media, retail, automotive, technology and life sciences and describe her as “excellent data protection lawyer and calm and level-headed crisis manager” (JUVE Handbook 2022/2023).

Verena focuses on advising new business models (especially in the online sector, including social media) and regularly provides...

Verena Grentzenberg is a data protection and cybersecurity lawyer, with over seventeen years of experience advising international and national companies on compliance and strategic questions. Her clients belong to various sectors, including media, retail, automotive, technology and life sciences and describe her as “excellent data protection lawyer and calm and level-headed crisis manager” (JUVE Handbook 2022/2023).

Verena focuses on advising new business models (especially in the online sector, including social media) and regularly provides advice on AI and other big data projects. She has helped many clients in seizing opportunities by providing strategic guidance and reconciliating with data protection authorities, where advisable.

Verena also assists with international data transfers, CRM projects and cloud computing solutions (including for regulated industries). Since 2016, she has conducted numerous GDPR compliance programs for clients from different sectors. She also advises on employee privacy law issues and whistleblower hotlines. In recent years, advice on cybersecurity and on the EU’s Digital Agenda (e.g., Data Act and AI Act) as well as the management of extensive access requests have become further focus areas for her and her team.

She regularly represents clients before data protection authorities and courts in contentious issues and provides both strategic and on the ground support in reportable data security incidents and resulting claims for damages. Prior to joining DLA Piper Verena worked with two different international law firms in Hamburg as well as IT Consultant and software developer for international transport and logistics companies.

Verena periodically speaks and writes on data protection law issues.

Professional QualificationsRechtsanwältin admitted with Hanseatische Rechtsanwaltskammer Hamburg

EXPERIENCE

  • For more than sixteen years, she has advised an international media group on a wide range of data protection issues, including strategic advice on online marketing and international data transfers as well as representation in regulatory proceedings and advice on the launch of new online services. 
  • Representing an online publisher in a consumer protection organization's fundamental claim against online marketing...
  • For more than sixteen years, she has advised an international media group on a wide range of data protection issues, including strategic advice on online marketing and international data transfers as well as representation in regulatory proceedings and advice on the launch of new online services. 
  • Representing an online publisher in a consumer protection organization's fundamental claim against online marketing.
  • Representing an online marketplace in a landmark lawsuit brought by a consumer protection organization regarding the design of its business model from a data protection perspective (key aspects data minimization and necessity of processing).
  • Providing advice to a software company on an anonymization project concerning patient data, including providing insights on technical requirements, and consultation with a German data protection authority.
  • Supporting with the acquisition of a target in the online marketing business; On the basis of our in-depth understanding of the technical aspects of online marketing and taking into account the numerous regulatory procedures in this area, which we are familiar with from our consulting practice, we were able to identify risks that go beyond the usual industry-specific risks and eliminate them before closing..
  • Advising various clients on the lawful implementation of AI solutions.
  • Advising a global manufacturer of commercial vehicles on the data protection challenges of the Data Act.
  • Leading a team of lawyers from different practice groups in assisting a client from the IT industry with regard to a cybersecurity attack, including advising on data protection requirements, criminal law aspects, liability towards customers and reputation management.
  • Strategic advice on claims for damages under the GDPR following cyberattacks, including the management of large numbers of consumer claims.
  • Representing an industrial company in a regulatory proceeding regarding health data, including internal investigation and reorganization of processes.
  • Together with her team, she has already supported a large number of multinational companies in pragmatically addressing the challenges for international data transfers arising from the ECJ's Schrems II decision and evaluated the methodology developed in-house by a DAX-listed company for risk assessments of international data transfer.
  • Co-leading a global compliance project of a multinational automotive supplier with a projected term of 2+ years.
  • Advising a car manufacturer on a new business model in the field of digital services.
  • Carrying out a project to determine the requirements for the implementation of telematics in company cars of a multinational in the life sciences sector under data protection and employment law issues in 15+ countries.
  • Supporting a US client from the life sciences sector in determining the data protection requirements for a market entry in the EU and in particular in Germany.
  • Leading a comprehensive review of the data protection and employment law requirements for the implementation of an HR information system of a listed company in 85+ countries.
  • Supporting a tech giant with employee privacy law advice, including in works council negotiations, data subject access requests, a policy on government and law enforcement requests as well as in administrative proceedings.
  • Advising plenty of clients on data subject access requests under the GDPR.
  • Ongoing advice of a global audio brand on various GDPR issues, including the preparation of guidelines and agreements, international transfers, investigations and data security breaches, for more than 7 years.

Languages
  • German
  • English
Education
  • IT management assistant, Chamber of Commerce Hamburg, 1994
  • University of Hamburg, First State Examination, 2000
  • Post graduate program „Law and Economics“, Hamburg


    Higher Regional Court, Hamburg, Second State Examination, 2004

Awards & Recognitions

  • JUVE Handbook 2024/2025: Frequently recommended for IT law: contracts and licenses, transactions and outsourcing as well as for data law; “excellent data protection lawyer and calm and level-headed crisis manager”, competitor
  • Legal 500 Germany 2024: Leading individual and recommended for information technology: data protection
  • Handelsblatt in cooperation with Best Lawyers 2024/2025: Recommended for data security and privacy law as well ...
  • JUVE Handbook 2024/2025: Frequently recommended for IT law: contracts and licenses, transactions and outsourcing as well as for data law; “excellent data protection lawyer and calm and level-headed crisis manager”, competitor
  • Legal 500 Germany 2024: Leading individual and recommended for information technology: data protection
  • Handelsblatt in cooperation with Best Lawyers 2024/2025: Recommended for data security and privacy law as well as media law
  • WirtschaftsWoche 2023: Recommended as "top lawyer" for data protection

Publications

  • Verena Grentzenberg regularly publishes on data protection issues. She is co-author of the chapter on data protection and data security breaches in the handbook “Recht der Computer- und Videospiele”, 2013 and the chapter on employment law in the legal handbook “Big Data” (ed. Borges/Keil), 2023 (on employee data protection in big data/AI).
  • Belgian DPA decision on IAB Transparency and Consent Frame...

Seminars

  • DSGVO-Schadensersatz: Risikomanagement nach BGH-Urteil zu Facebook Scraping, 21 January 2025
  • Dive In Festival für Diversity & Inclusion, 25 September 2024
  • So meistern Sie Auskunftsverlangen nach DSGVO, 30 January 2024
  • DLA Piper GDPR Fines and Data Breach Survey 2024 - webinar, 18 January 2024

Prior Experience

Prior to joining DLA Piper Verena worked with two different international law firms in Hamburg as well as IT Consultant and software developer for international transport and logistics companies.

Additional Information

  • Verena Grentzenberg teaches online data protection law at the Hamburg Media School and lectures on employee data protection in the digital world at Bucerius Law School in Hamburg since the summer semester 2024.

Memberships And Affiliations

  • German Association for Law and Informatics e.V. (DGRI)
  • Alumni Club of the German National Merit Foundation (Studienstiftung des deutschen Volkes)
  • German Youth for Understanding Committee (YFU)

Connect

Location

Hamburg
Alter Wall 4
Hamburg
20457
Germany