Law · risk · technology
Privacy, security, AI and regulation increasingly overlap. I advise organisations as a whole: on the law, on governance and risk, and on the technology that has to deliver. With more than ten years of experience as a lawyer, data protection officer and corporate privacy officer, I advise boards and work alongside the teams that put measures into practice.
Not separate specialisms, but one coherent view. As an interim professional or project-based advisor, I connect legal requirements, risk management and technical delivery, from the boardroom to the development team.
Need extra capacity for a while, or an independent supervisor within your organisation? I step in as interim privacy officer or external DPO.
From rule-based to risk-based working. I set up frameworks that help boards steer and that convince supervisory authorities.
Clear legal analyses you can use straight away, based on years of practice as a privacy and IT lawyer.
I speak the language of lawyers and of developers. Because I build software myself, I give concrete advice on how rules land in systems, data and processes.
A selection of what I have built with current and previous employers. I bring the same approach to every assignment.
Brought 55 services under a single risk management framework and am building one integrated management system for privacy, security, AI and ESG. Advise the executive and supervisory boards on risk appetite and a risk profile that covers both the Management Control Statement and NIS2.
Set up data protection governance based on the three lines model and built a network of 21 privacy champions. Advised the minister and senior civil servants and provided independent oversight, covering 150 diplomatic missions worldwide.
Advised public and private multinationals on the GDPR, IT contracts and fundamental rights, and litigated on their behalf. Led privacy compliance projects and negotiations.
Legal portfolio at the foundation for an open internet, which develops critical open-source internet infrastructure.
Advice gets better when you build things yourself. Through my own SaaS products used by customers, and through energy and automation, I experience first-hand what regulation means for those who develop technology.
A platform that brings together data protection news and sources for legal professionals. I am its editor and developer.
A planning tool for parents (in Dutch). Track your child's stage week by week and see what matters for their development at that moment.
Development, regulation and automation in the energy transition. I trade energy with an energy supplier as buyer and automate the control with my own dashboards and Home Assistant.
I am Niels Westerlaken, founder of Westerlaken Digital Services. I studied Dutch law in Utrecht and intellectual property and privacy law at the University of Amsterdam, and went on to work as a lawyer, DPO and corporate privacy officer.
My strength lies in making connections. I quickly spot patterns between legislation, risk and technology, and make that translation concrete for boards and delivery teams. Because I build software myself, I know what a measure demands in practice. I work in Dutch and English.
Looking for an advisor who considers privacy, governance, risk and technology together? For example as interim privacy officer, external DPO or advisor on NIS2, the AI Act or legal tech? Tell me what you want to achieve and we will see together whether I can help.