Elise Troll is a partner at bureau Brandeis and heads the Privacy & AI Practice Group.

A significant part of her practice focuses on advisory work, litigation and enforcement proceedings before the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), including matters relating to the processing of personal data in sensitive and highly regulated contexts.

• Elise regularly advises on GDPR-related issues such as international data transfers and automated decision-making. She also assists clients in relation to algorithms and AI.

• She frequently represents clients in litigation, for example in matters concerning cookies, criminal law data and data subject rights. She is also involved in various mass damage claims.

• Elise often assists clients facing enforcement action by the Dutch Data Protection Authority and supports them in permit application procedures for the processing of criminal law data, including in the context of blacklisting.

She acts for both national and international clients and moves seamlessly between advisory work, litigation and strategic positioning.

Elise studied Dutch law at Leiden University, where she completed her Master’s degree in European Law in 2012.

She began her career in late 2012 at Allen & Overy (now A&O Shearman). From 2014 onwards, she focused on competition law, general administrative law and privacy law. In 2018, around the time of the introduction of the GDPR, she worked for several months at Allen & Overy’s London headquarters, supporting the firm’s privacy practice. At the end of 2018, she joined the privacy team at Kennedy Van der Laan, where she was seconded for several months to Schiphol Airport and later to Ahold Delhaize. In 2023, she was appointed counsel. Since 2026, she has been a partner at bureau Brandeis.

Recent work includes:

• Representing a major Dutch company in an enforcement procedure before the Dutch Data Protection Authority, which concluded with the case being closed without sanctions.

• Successfully defending a fintech company against an individual complaint before the Dutch Data Protection Authority, which was ultimately declared unfounded.

• Assisting multiple clients in relation to access and erasure requests under the GDPR. In a recent court case, she successfully argued that a restriction of the right of access was justified in the circumstances.

• Acting on behalf of the Dutch government in contract negotiations with major US cloud service providers on multiple occasions.

Memberships:

• Dutch Association for Privacy Law (VPR)

Elise is affiliated as a lecturer with the VPR-A postgraduate specialisation programme for lawyers at Leiden University, where she teaches privacy law and the Dutch Act on the Collective Settlement of Mass Damage Claims (WAMCA).

Testimonials

Legal 500 (2024):
“Elise Troll is definitely on the rise. She is super smart, always available, very practical, comes with creative and out-of-the-box solutions and is fun to work with. She is strong on both content and relationship.”