This website uses cookies

We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.

Our privacy statement:

Jeroen van Helden

Jeroen van Helden

Senior Associate | Attorney at law

IT, Privacy & Cybersecurity

Jeroen van Helden acts as lead counsel in matters concerning IT transactions and IT disputes. He also advises clients in the event of cyber attacks and cyber incidents. Jeroen has specific expertise in software licensing, data protection, IT contracts and compliance issues, and enjoys sharing his IT law knowledge and enthusiasm for his field through professional journals, seminars and courses.

Jeroen works a great deal for IT companies ranging from cloud service providers, app builders and managed service providers, to cybersecurity experts. On the buyer side, he frequently works for government authorities, international organisations and companies in the education, healthcare and transport sectors. He is just as enthusiastic about engaging with a CEO on a strategic matter as he is about working with in-house counsel on a complex case. He takes a result-oriented, meticulous and discreet approach to his work.

Stay up to date

The latest developments

IT, Privacy & Cybersecurity

DORA officially applicable

30 January 2025

As of January 17, 2025, financial entities must comply with the cybersecurity obligations in the Digital Operational Resilience Act (DORA). On the same date, various guidelines from supervisory authorities that overlap with DORA have been withdrawn. DORA aims to make the European financial sector as a whole digitally operationally resilient.

Read more

IT, Privacy & Cybersecurity

CJEU: preparatory acts can be automated individual decisions

4 April 2024

Under the GDPR, it is in principle prohibited to make automated decisions that significantly affect individuals. It is therefore not permitted, e.g., to terminate an employment contract solely on the basis of automated decision-making.

Read more

IT, Privacy & Cybersecurity

Contracting with U.S. cloud service providers: when allowed?

22 September 2022

Contracting with U.S. cloud service providers is a hot topic. This has everything to do with, on the one hand, the dominant position of American players in the global IT services market and, on the other hand, the strict European legislation on the transfer of personal data. Under what conditions can U.S. cloud service providers still be used? An overview and update.

Read more