Hester de Vries

Specialisms

Privacy compliance / Personal data protection / General Data Protection Regulation (GDPR) / Smart City

Profile

Hester advises businesses on the many aspects of data protection law, privacy and technology. She supports Dutch and international companies as well as government agencies in matters concerning (EU) privacy legislation. She also advises on the impact of privacy in large administrative projects and on the full implementation of privacy compliance in businesses and organisations. Besides, she provides support in investigations and enforcement procedures of the Dutch supervisory authorities Personal Data Authority (Autoriteit Persoonsgegevens (AP)) and Authority for Consumers and Markets (Autoriteit Consument & Markt (ACM)).

Hester is chairman of the Privacy Law Association (Vereniging Privacy Recht) and a board member of the Privacy Law Association for Attorneys (Vereniging Privacy Recht Advocaten). She is also a senior lecturer at the specialization training course for privacy law attorneys and a lecturer at the Grotius IT-law training course, author of Tekst & Commentaar Privacy- en telecommunicatierecht, editor of the journal Privacy en Informatie and a university lecturer at Utrecht University.

Recommendations

The Legal 500 EMEA 2025 - Data Privacy and Data Protection - Tier 1

The privacy, cybersecurity and regulated markets team at Kennedy Van der Laan is known for its sector expertise across finance, transport and logistics, telecoms, entertainment and healthcare. The team is noted for its expertise in assisting clients with investigations and enforcement proceedings locally and abroad. Internal investigations, legal proceedings against data subjects exerting thier rights under data protection law, and obtaining permits under Dutch data protection law are all key pillars of the practice. The sizeable team is led by Hester de Vries, Quirine Tjeenk Willink, Rosalie Brand and Judica Krikke. De Vries is a data protection authority and assists technology multinationals and public sector institutions with data protection law issues. Enforcement matters are handled by specialist Tjeenk Willink, Brand is the go-to for cybersecurity matters, and Krikke advises on IT aspects of data protection issues.

Hall of fame

Hester de Vries

Testimonials

‘Our organisation mainly works with Hester de Vries. She has extensive knowledge of privacy law and can respond quickly to our questions with good advices useful for our practice. She has thoroughly immersed herself in our daily practice of providing services to our business partners as well as consumers. In addition to her thorough knowledge of privacy law, we appreciate her openness, sincerity and friendly way of operating.’

Chambers Europe 2025 - TMT: Data Protection - Ranked

Hester De Vries is well regarded in the field of privacy and data protection. In addition to her experience in data sharing mandates, she regularly represents clients in GDPR disputes and advises on the use of biometric data under data privacy regulations.

"Hester De Vries has been really impressive."
"Hester De Vries really is a fantastic lawyer. She is the driving force of the Kennedy Van der Laan data protection practice."

The Legal 500 EMEA 2024 - Data Privacy and Data Protection - Tier 1

Kennedy Van der Laan is well-versed in administrative enforcement law and data protection law, allowing it to advise on a range of contentious and non-contentious privacy issues. The firm excels in assisting clients in the financial, logistics, telecommunications, entertainment, and healthcare sectors. The team routinely undertakes investigations and enforcement proceedings carried out by data protection regulators both locally and internationally and recently formed a 24/7 incident response team. Hester de Vries, Quirine Tjeenk Willink, Rosalie Brand, and Judica Krikke all jointly chair the practice. De Vries handles issues at the forefront of data protection such as AI, open data, platforms for data sharing, and adtech. Litigator Tjeenk Willink is an enforcement law specialist, Brand was promoted to partner in 2023 and mainly supports clients with cybersecurity incidents. Krikke focuses on complex digital transformation processes, IT and cloud outsourcing issues. Elise Troll was appointed counsel in 2023 and advises on data protection particularly in relation to telecoms.

Hall of Fame
Hester de Vries

Chambers Europe 2024 - TMT: Data Protection - Ranked

Hester de Vries is well regarded in the field of privacy and data protection. In addition to her experience in data sharing mandates, she regularly represents clients in GDPR disputes and advises on the use of biometric data under data privacy regulations.

The Legal 500 EMEA 2023 - Data Privacy and Data Protection - Tier 1

Kennedy Van der Laan has ‘unique expertise in the area of cybersecurity’. Head of the data protection practice Hester de Vries is testament to this, advising public sector and private sector clients, operating in complex new digital ecosystems, such as digital payments and gaming, on data protection governance. De Vries also represents clients against imposed fines by the Dutch Data Protection Authority and is a key contact for public sector clients investigating data-related issues.

Hall of Fame

Hester de Vries

Testimonials

‘Hester de Vries, Elsie Troll and Cees Plaizer all stand out because of their personal approach, with a detailed attention to the client combined with their experience and knowledge in the field of privacy.’

Chambers Europe 2023 - TMT: Data Protection - Ranked

Hester De Vries is well regarded in the field of privacy and data protection. In addition to her experience in data sharing mandates, she regularly represents clients in GDPR disputes and advises on the use of biometric data under data privacy regulations.

Strengths

"Hester is an expert on privacy matters."

Chambers Europe 2022 - TMT: Data Protection - Ranked

A client reports that Hester De Vries is "an extremely intelligent and talented lawyer with in-depth knowledge of privacy law and the exchange of data." In addition to her experience in data sharing mandates, Hester De Vries represents clients in GDPR disputes and advises on the use of biometric data under data privacy regulations.

The Legal 500 EMEA 2021 - Data Privacy and Data Protection - Tier 1

Under the leadership of the highly experienced Hester de Vries, Kennedy Van der Laan's privacy team is a key name for mandates spanning the data and technology sectors; the group also advises on the full range of data matters with a notable focus on commercial data issues and big data work. The practice's expertise includes advising on matters in the media, telecoms, financial and healthcare sectors, and has recently expanded to include issues relating to smart cities. Quirine Tjeenk Willink is another key name, and combines her privacy experience with expertise in administrative enforcement law. Senior associates Rosalie Brand and Elise Troll are also singled out.

Hall of Fame

Hester de Vries

Testimonials

“Hester de Vries is very experienced and knowledgeable. Hester stands out through her in-depth knowledge of the laws, regulations and case law in combination with her knowledge of the key players in terms of privacy experts.”

Chambers Europe 2021 - TMT: Data Protection - Ranked

Hester de Vries is a distinguished practitioner with extensive experience in data protection compliance matters. She also represents clients in litigation concerning data breaches and privacy impact assessments.

Who's Who Legal 2021 - Thought Leaders Global Elite - Data - Data Privacy & Protection

Hester de Vries is ranked by WWL as a Global Elite Thought Leader on Data Privacy and Protection.

The Legal 500 EMEA 2020 - Data Privacy and Data Protection - Tier 1

The Kennedy Van der Laan team is noted for combining its legal expertise with a thorough understanding of the technologies involved. The practice assists clients with all the various uses of commercial data, including big data, and advises on contractual and regulatory matters as well as investigations and enforcement cases. Its broad client roster includes those in the financial, healthcare and transport and logistics sectors. Hester de Vries, who has a background at the Dutch Data Protection Authority, is highly recommended and Quirine Tjeenk Willink is considered 'best in class' for complicated cases.

Chambers Europe 2020 - TMT: Data Protection - Band 1

Hester de Vries is a distinguished practitioner with extensive experience in data protection matters, spanning from compliance and regulatory aspects of intra-group data exchanges, to investigations related to access to sensitive personal data.

The Legal 500 EMEA 2019 - Industry focus: Information Technology

Kennedy Van der Laan is highlighted for its 'fast and in-depth advice, ability to understand business problems, and for offering the right solutions'. In addition to outsourcing and other IT projects, the team also handles IT disputes, e-commerce mandates, cybercrime, and public procurement matters. Patrick Wit is in demand for his 'negotiation expertise', while other well-regarded partners include Joost Linnemann, Hester de Vries, and Christoph Jeloschek; senior associate Joost Schmaal is also a name to note. The team counts TNT, McDonald’s and Stichting BKR among its broad client base.

Chambers Europe 2019 - TMT: Data Protection - Band 1

Hester De Vries is "an authority" on data protection in the Netherlands, according to one interviewee who elaborates: "Her contacts with the data protection authority are valuable and she knows how to identify and downsize risks." She predominantly handles advisory and compliance matters.

Chambers Europe 2018 - Privacy - Band 1

"Hester De Vries is characterised by clients as "empathetic and a real expert on data protection." She advises on data protection across numerous industries, including healthcare and the financial sector. One client particularly appreciates her way of incorporating innovation and detail into her work, saying: "We have fun working together and that relationship creates creativity and excellent pieces of work," while also noting that the "very detailed phase" of her advice means "everything is 100% effective."

Recent Work

Providing strategic advice (risk assessment, enforcement) to a client who was affected by a major data breach involving sensitive data.
Supporting a major global media company in obtaining compliance with GDPR, including the implementation of the GDPR in all Dutch entities and training of employees.
Assisting and international courier delivery services company in obtaining regulator approval for Binding Corporate Rules (BCR) for exchange of personal data within the group and coordinating the BCR-implementation expanding over 62 countries.
Assists the national register of domestic credit in legal proceedings regarding personal data protection.