Add a bookmark to get started


Verena Grentzenberg

Excellent expert in data protection law as well as calm and level-headed crisis manager.
Competitor, JUVE Handbook

Verena Grentzenberg is a data protection and cybersecurity lawyer, with over sixteen years of experience advising international and national companies on compliance and strategy. Her clients belong to various sectors, including media, retail, automotive, technology and life sciences and describe her as “excellent data protection lawyer and calm and level-headed crisis manager” (JUVE Handbook 2022/2023).

Verena focuses on advising new business models (especially in the online sector, including social media) and regularly provides advice on big data projects, AI and international transfers of data. She has helped many clients in seizing opportunities by providing strategic guidance and reconciliating with data protection authorities, where advisable. Verena also assists with CRM projects and cloud computing solutions (including for regulated industries). Since 2016, she has conducted numerous GDPR compliance programs for clients from different sectors. She also advises on employee privacy law issues and whistleblower hotlines. In recent years, cybersecurity advice has become another area of focus of her and her team.She regularly represents clients before data protection supervisory authorities in contentious issues and provides both strategic and on the ground support in reportable data security incidents.

Prior to joining DLA Piper Verena worked with two different international law firms in Hamburg as well as IT Consultant and software developer for international transport and logistics companies.

Verena periodically speaks and writes on data protection law issues

Professional QualificationsRechtsanwältin admitted with Hanseatische Rechtsanwaltskammer Hamburg


  • For more than twelve years she provides advice to an international media group on a wide range of data protection issues, including strategic advice on online marketing and international transfers and representation in regulatory proceedings.
  • Representing an online publisher in a consumer protection organization's fundamental claim against online marketing.
  • Supporting with the acquisition of a target in the online marketing business which included an analysis of the risks associated with the specific business model of the target based on our deep understanding of the technical aspects of online marketing and taking into account the many regulatory procedures in this area known to us from our consulting practice; in this way, we were able to specifically identify risks that extended beyond the usual sector-specific risks and achieve elimination pre-closing.
  • Advising various clients on the lawful implementation of AI solutions.
  • Leading a team of lawyers from different practice groups in assisting a client from the IT industry with regard to a cybersecurity attack, including advising on data protection requirements, criminal law aspects, liability towards customers and reputation management.
  • Supporting an industrial with the notification of a global cybersecurity incident to its EU lead supervisory authority and provided strategic advice in the following investigation of the regulator, leading to a closing of the case.
  • Together with her team, she has already assisted a larger number of multinational companies in pragmatically addressing the challenges for international data transfers arising from the ECJ's Schrems II decision.
  • Co-leading a global compliance project of a multinational automotive supplier with a projected term of 2+ years.
  • Advising an automotive manufacturer on legal issues regarding Big Data in 10 core jurisdictions.
  • Carrying out a project to determine the requirements for the implementation of telematics in company cars of a multinational in the life sciences sector under data protection and employment law issues in 15+ countries.
  • Supporting a US client from the life sciences sector in determining the data protection requirements for a market entry in the EU and in particular in Germany.
  • Providing advice to a software company on an anonymization project concerning patient data, including providing insights on technical requirements, and consultation with a German data protection authority.
  • Leading a comprehensive review of the data protection and employment law requirements for the implementation of an HR information system of a listed company in 85+ countries.
  • Supporting a tech giant with employee privacy law advice, including in works council negotiations, data subject access requests, a policy on government and law enforcement requests as well as in administrative proceedings.
  • Advising plenty of clients on data subject access requests of former employees.
  • Providing ongoing advice to a global audio brand on various GDPR issues including drafting of policies and contracts, international transfers, investigations and data breach, now for more than 4 years.
  • German
  • English
  • IT management assistant, Chamber of Commerce Hamburg, 1994
  • University of Hamburg, First State Examination, 2000
  • Post graduate program „Law and Economics“, Hamburg

    Higher Regional Court, Hamburg, Second State Examination, 2004

Awards & Recognitions

  • JUVE Handbook 2023/2024: Frequently recommended for IT law: contracts and licenses, transactions and outsourcing as well as for data law; “excellent data protection lawyer and calm and level-headed crisis manager”, competitor (2022/2023)
  • Legal 500 Germany 2022: Leading individual and recommended for information technology: data protection
  • Handelsblatt in cooperation with Best Lawyers 2023/2024: Recommended for data security and privacy law as well as media law
  • WirtschaftsWoche 2023: Recommended as "top lawyer" for data protection

Prior Experience

Prior to joining DLA Piper Verena worked with two different international law firms in Hamburg as well as IT Consultant and software developer for international transport and logistics companies.

Additional Information

  • Verena is a member of the German Association for Law and Informatics e.V. (DGRI), the Alumni Club of the German National Merit Foundation (Studienstiftung des deutschen Volkes) and the German Youth for Understanding Committee (YFU).
  • She holds a degree from the Hamburg Chamber of Commerce as IT management assistant.

Memberships And Affiliations

  • German Association for Law and Informatics e.V. (DGRI)
  • Alumni Club of the German National Merit Foundation (Studienstiftung des deutschen Volkes)
  • German Youth for Understanding Committee (YFU)