Legal Guidance and Research / Experts / Danielle van der Merwe
Danielle van der Merwe#11856

Danielle van der Merwe

Danielle van der Merwe advises multinational and UK clients on a range of data privacy and cybersecurity matters, including in connection with the General Data Protection Regulation (GDPR).

Drawing on over a decade of experience, Ms. van der Merwe counsels a variety of global companies, leading financial institutions, healthcare providers and technology companies on their most complex and sensitive data privacy issues. Her industry experience spans a number of cutting-edge sectors, including technology, social media, healthcare and gaming.

Ms. van der Merwe regularly advises clients throughout the corporate lifecycle, serving as an extension of their in-house legal team. She brings particular experience handling cross-border matters arising from product developments, transactions, and investments, including large-scale GDPR compliance reviews. Ms. van der Merwe also delivers sophisticated insight on privacy issues in connection with white collar investigations, both in the UK and internationally.

A business-minded problem solver, Ms. van der Merwe offers a unique perspective on clients’ needs garnered from her secondment experience at several retail, health, insurance, and sports companies.

Ms. van der Merwe is a member of the International Association of Privacy Professionals.

In addition to her commercial work, Ms. van der Merwe provides privacy-related counsel to nonprofit clients on a pro bono basis.

Practice Area

Panel

  • Contributing Author

Qualified Year

  • 2009

Experience

  • Dentons LLP (2013 - 2017)
  • Pinsent Masons LLP (formerly McGrigors LLP) (2008 - 2013)

Membership

  • International Association of Privacy Professionals (CIPP/E)

Qualification

  • LLB (Hons) (2008)

Education

  • University of Aberdeen (2008)

1 Contributions by Danielle van der Merwe

Digital health data protection in the UK and EU: wearables, AI diagnostics and electronic health records - GDPR/UK GDPR (DUAA 2025) case studies and compliance guidance
PRACTICE NOTES
Digital health data protection in the UK and EU: wearables, AI diagnostics and electronic health records - GDPR/UK GDPR (DUAA 2025) case studies and compliance guidance
What is digital health? Digital health is a broad umbrella describing how information and communication technologies are used to enhance prevention, diagnosis, treatment, monitoring, and the management of health conditions and lifestyle habits that influence wellbeing. Its rise reflects the coming together of healthcare and technology, and a move away from provider‑focused, ‘one size fits all’ delivery towards personalised, patient‑centred care. This Practice Note explores data protection considerations across three digital health use cases: Wearables Use of artificial intelligence (AI) in medical diagnostics Digital health records Unlike mobile health (mHealth), which is limited to care delivered via mobile devices, digital health is wider in scope. It encompasses modern care models such as digital therapeutics, telemedicine, digitised health systems and electronic health records, as well as AI, machine learning and data analytics. For more on mHealth, see Practice Notes: Digital health—regulation of mHealth apps and medical software and mHealth—data protection considerations. Digital health solutions can be applied at every stage of a person’s healthcare journey. Examples include: prevention: in applications that analyse lifestyle, habits or...
Life Sciences
Expert page AD
If you expected to see yourself on this page, click here.