

Founded by Ot van Daalen, a top-tier tech lawyer and digital rights pioneer with over 20 years of experience.
When an international hosting company was confronted with a breach from the inside, the privacy of its customers and its reputation was on the line. Root Legal successfully handled the multi-country incident from discovery to resolution, collaborating intensively with the security team to take swift legal action, notifying authorities, engaging support in other jurisdictions to bring the perpetrator to justice, strengthening customer trust.

A startup building an innovative chatbot quickly realised that fundamental rights alignment was essential to earning its users’ trust and reducing liability. Root Legal assisted the company by designing technical guardrails, working closely with the product owner. The resulting impact assessment provided detailed technical and organisational measures ready for implementation, enabling a successful product launch.

A large IT services provider with customers in various critical sectors wanted to review its cybersecurity stance in order improve its NIS2 compliance. Root Legal performed a focused assessment based on interviews with technical and commercial leadership and provided actionable quick wins, preparing the company for NIS2, concretely improving its cybersecurity practices to avoid penalties.

For a client processing large amounts of health data, accountable anonymisation measures were central to their risk mitigation strategy. Root Legal together with the company leadership designed the legal and technical governance infrastructure for anonymising health data, drafting statutes and contracts, developing software audit policies and building hashing strategies, helping the client gain multi-year contracts with key customers.


Ot van Daalen represented clients in the high-tech- and telecommunications sectors at top-tier law firm De Brauw Blackstone Westbroek, developed policies for our digital future as the director of digital rights movement Bits of Freedom, and investigated internet-related cases at the Autoriteit Persoonsgegevens (the Dutch DPA).
Next to his work as an attorney, he is an assistant professor at the Institute for Information Law of the University of Amsterdam, a substitute judge at the District Court of The Hague and a member of the supervisory council of the Stichting Democratie en Media.
He wrote a PhD on quantum computing, encryption and human rights, and a book on resilience in the Netherlands called Voorbereid.