Creative, pragmatic solutions you can trust.

Rootlegal provides expert advice and litigation on privacy, cybersecurity, resilience and AI.

Examples of our work

  • Critical incident response

    Handling major data breach at international hosting company

    When an international hosting company was confronted with a breach from the inside, the privacy of its customers and its reputation was on the line. Root Legal successfully handled the multi-country incident from discovery to resolution, collaborating intensively with the security team to take swift legal action, notifying authorities, engaging support in other jurisdictions to bring the perpetrator to justice, strengthening customer trust.

  • AI guardrails construction

    Developing fundamental rights risk mitigation measures for AI chatbot

    A startup building an innovative chatbot quickly realised that fundamental rights alignment was essential to earning its users’ trust and reducing liability. Root Legal assisted the company by designing technical guardrails, working closely with the product owner. The resulting impact assessment provided detailed technical and organisational measures ready for implementation, enabling a successful product launch.

  • Cybersecurity review

    Assessing NIS2 compliance for IT services provider

    A large IT services provider with customers in various critical sectors wanted to review its cybersecurity stance in order improve its NIS2 compliance. Root Legal performed a focused assessment based on interviews with technical and commercial leadership and provided actionable quick wins, preparing the company for NIS2, concretely improving its cybersecurity practices to avoid penalties.

  • Anonymisation design

    Creating enterprise-scale data protection in the medical sector

    For a client processing large amounts of health data, accountable anonymisation measures were central to their risk mitigation strategy. Root Legal together with the company leadership designed the legal and technical governance infrastructure for anonymising health data, drafting statutes and contracts, developing software audit policies and building hashing strategies, helping the client gain multi-year contracts with key customers.

About
Root Legal

Ot van Daalen represented clients in the high-tech- and telecommunications sectors at top-tier law firm De Brauw Blackstone Westbroek, developed policies for our digital future as the director of digital rights movement Bits of Freedom, and investigated internet-related cases at the Autoriteit Persoonsgegevens (the Dutch DPA).

Next to his work as an attorney, he is an assistant professor at the Institute for Information Law of the University of Amsterdam, a substitute judge at the District Court of The Hague and a member of the supervisory council of the Stichting Democratie en Media.
He wrote a PhD on quantum computing, encryption and human rights, and a book on resilience in the Netherlands called Voorbereid.