Heidi Waem

Phone: +
7, Rue Joseph Stevens
Brussels, B - 1000

Heidi Waem is a counsel in the Brussels office of Crowell & Moring, where she is a member of the firm’s Privacy & Cybersecurity Group. Her practice focuses on privacy and data protection, contract law, market practices and consumer law, and IP/IT.

Heidi advises clients on all data protection / privacy & cybersecurity related matters. This includes advising on the establishment of a comprehensive data protection framework; drafting and reviewing relevant notices, policies and contracts; advising on data transfers; assisting in the case of data breach, on pre-litigation issues involving data subject complaints and requests, and in proceedings before the data protection authority.

Heidi also has extensive experience in the field of contracts. She has reviewed, drafted, and negotiated a wide variety of contracts, including consultancy agreements; collaboration agreements; maintenance and supply agreements;software development and license agreements; agreements for funded research projects under various schemes (e.g., FP7, Horizon 2020, Marie-Curie); and R&D agreements with universities worldwide.

In the area of market practices and consumer law, Heidi advises on a wide range of topics such as advertising, and the rules relating to discounts and consumer contracts. She is also knowledgeable about IP / IT law and follows closely issues concerning e-commerce. Clients include major companies in the FMCG, media, life sciences, and retail sectors.

Heidi has been seconded to various multinational companies in different sectors and this has given her valuable insight and experience as to the needs of and problems faced by businesses. She is known and appreciated by clients for her pragmatic, hands-on approach.

Heidi is a frequent speaker at privacy and data protection events. She also teaches at the Brussels Privacy Hub’s GDPR summer school.

Heidi joined the Brussels bar in 2009 and was officially admitted in October 2012 after having successfully accomplished her traineeship. She obtained her law degree from the University of Antwerp. Heidi also has a degree in translation studies. Heidi is fluent in Dutch, English, French, and Italian. She also speaks German and Greek.


Admitted to practice: in Belgium and before the European Court

Other Affiliations

  • IAPP - Certified Information Privacy Professional/Europe (CIPP/E)

  • Speeches & Presentations

    • "GDPR, CCPA, and other Hot Topics in Data Privacy," Silicon Legal Strategy, Santa Monica, CA (November 12, 2019). Presenters: Jeffrey L. Poston, Paul M. Rosen, Maarten Stassen, Jarno Vanto, and Heidi Waem.
    • "GDPR, CCPA, and other Hot Topics in Data Privacy," Silicon Legal Strategy, San Francisco, CA (November 11, 2019). Presenters: Jeffrey L. Poston, Maarten Stassen, Jarno Vanto, Kristin J. Madigan, and Heidi Waem.
    • "Valuation of the Data Customer," IDI Conference 2019, Cernobbio, Italy (June 15, 2019). Speaker: Heidi Waem.
    • "Data Protection Hurdles When Negotiating Cloud Contracts," Beltug X-Change, Vilvoorde, Belgium (June 4, 2019). Presenter: Heidi Waem.
    • "The GDPR - 1 Year Later," IJE/IBJ Deep Dive, Brussels, Belgium (May 24, 2019). Speakers: Emmanuel Plasschaert, Maarten Stassen, Frederik Van Remoortel, and Heidi Waem.
    • "David vs. Goliath & GDPR. I Can See Clearly Now, the Rain Is Gone. Or Not?” IJE/IBJ Day of the Practice, Brussels, Belgium (May 21, 2019). Presenter: Heidi Waem.
    • "Internet of Things – Legal and IT Risks & Challenges," IJE/IBJ Open Table, Brussels, Belgium (April 4, 2019). Presenters: Tom Pace (Cylance), Maarten Stassen, Emmanuel Plasschaert, Eric Montens and Heidi Waem.
    • "Cybersecurity Incident Management," IJE/IBJ Open Table, Brussels, Belgium (November 30, 2018). Presenters: Evan D. Wolff, Maarten Stassen, Frederik Van Remoortel, and Heidi Waem.
    • "Running Oracle on VMware? Heard About Mars vs. Oracle?" VMWorld Europe, Barcelona, Spain (November 6, 2018). Speakers: Michelle J. Linderman and Heidi Waem.