Heidi Waem

 Counsel Brussels
Phone: +
7, Rue Joseph Stevens
Brussels, B - 1000

Heidi Waem is a counsel in the Brussels office of Crowell & Moring, where she is a member of the firm’s Privacy & Cybersecurity Group.

Heidi’s practice focuses on privacy and data protection, including the General Data Protection Regulation (GDPR). In addition, Heidi has extensive experience in contract law, market practices, consumer laws, IP/IT, and compliance. Her experience in these fields includes both litigation and non-contentious matters. Clients include major companies in the FMCG, media, life sciences, and retail sectors.

Over the years, Heidi has been seconded to various multinational companies in different sectors, which has given her valuable insight and experience in the needs of and problems faced by businesses, as well as experience as in-house counsel.

Heidi is known and appreciated by clients for her pragmatic, hands-on approach.

Heidi is a frequent speaker at privacy and data protection events. She also teaches at the Brussels Privacy Hub’s GDPR summer school.

Heidi joined the Brussels bar in 2009 and was officially admitted in October 2012 after having successfully accomplished her traineeship. She obtained her law degree from the University of Antwerp. Heidi also has a degree in translation studies.

Heidi is fluent in Dutch, English, French, and Italian. She also speaks German and Greek.

Representative matters:

  • Advised several national and international companies on how to prepare for the GDPR in a hands-on manner.
  • Performed GDPR gap analysis.
  • Advised various companies on international data transfer mechanisms.
  • Reviewed numerous data processing agreements and provided in-depth advice in this respect.
  • Advised companies of various sectors about employee-related privacy and data protection aspects.
  • Assisted various international players with complaint proceedings before the Belgian Privacy Commission.
  • Assisted a large media company in various court cases with regard to the right to privacy.


Admitted to practice: in Belgium and before the European Court

Other Affiliations

  • IAPP - Certified Information Privacy Professional/Europe (CIPP/E)

  • Speeches & Presentations

    • "Data Protection Hurdles When Negotiating Cloud Contracts," Beltug X-Change, Vilvoorde, Belgium (June 4, 2019). Presenter: Heidi Waem.
    • "The GDPR - 1 Year Later," IJE/IBJ Deep Dive, Brussels, Belgium (May 24, 2019). Speakers: Emmanuel Plasschaert, Maarten Stassen, Frederik Van Remoortel, and Heidi Waem.
    • "David vs. Goliath & GDPR. I Can See Clearly Now, the Rain Is Gone. Or Not?” IJE/IBJ Day of the Practice, Brussels, Belgium (May 21, 2019). Presenter: Heidi Waem.
    • "Internet of Things – Legal and IT Risks & Challenges," IJE/IBJ Open Table, Brussels, Belgium (April 4, 2019). Presenters: Tom Pace (Cylance), Maarten Stassen, Emmanuel Plasschaert, Eric Montens and Heidi Waem.
    • "Cybersecurity Incident Management," IJE/IBJ Open Table, Brussels, Belgium (November 30, 2018). Presenters: Evan D. Wolff, Maarten Stassen, Frederik Van Remoortel, and Heidi Waem.
    • "Running Oracle on VMware? Heard About Mars vs. Oracle?" VMWorld Europe, Barcelona, Spain (November 6, 2018). Speakers: Michelle J. Linderman and Heidi Waem.