Rosalie Brand

 Cyber security / Incident response / Breach counsel / Data Breach / Cyber risk management / Cyber resilience 
 

 Rosalie is an expert in cybersecurity and data protection. As an incident responder or breach counsel, Rosalie assists organizations in the event of cyber incidents, such as ransomware attacks, business email compromise, and cyber espionage. Rosalie supports the organization from the start of the incident with strategic advice, (crisis) coordination, communication, and stakeholder management. Rosalie also guides the organization through the aftermath of an incident, including investigations and enforcement by regulators and the resolution of damage claims.

Additionally, Rosalie is committed to enhancing the cyber resilience of organizations in the Netherlands and internationally. Rosalie advises organizations in advance on information security, compliance with EU cyber legislation (such as GDPR, NIS2, DORA, and CRA), and incident readiness. Rosalie also contributes her knowledge and expertise to various projects and initiatives within the cyber domain in the Netherlands. Rosalie is a member of Cyberveilig Nederland, the Association for Privacy Law (VPR), and the Association for Privacy Law Lawyers (VPR-A).

• Coordinating incident response for 15+ clients of a supplier affected by a ransomware attack.
• International coordination of incident response for a foreign telecom provider affected by a cyber incident.
• Defending a cybersecurity party against a claim by the Dutch Data Protection Authority to provide an investigation report.
• Legal proceedings against a software supplier to enforce adequate investigation into a ransomware attack.

The Legal 500 EMEA 2025 - Data Privacy and Data Protection Tier 1

The privacy, cybersecurity and regulated markets team at Kennedy Van der Laan is known for its sector expertise across finance, transport and logistics, telecoms, entertainment and healthcare. The team is noted for its expertise in assisting clients with investigations and enforcement proceedings locally and abroad. Internal investigations, legal proceedings against data subjects exerting thier rights under data protection law, and obtaining permits under Dutch data protection law are all key pillars of the practice. The sizeable team is led by Hester de Vries, Quirine Tjeenk Willink, Rosalie Brand and Judica Krikke. De Vries is a data protection authority and assists technology multinationals and public sector institutions with data protection law issues. Enforcement matters are handled by specialist Tjeenk Willink, Brand is the go-to for cybersecurity matters, and Krikke advises on IT aspects of data protection issues.

Leading associates 

Rosalie Brand

Testimonials

• "Rosalie Brand has the combination of ultimate knowledge about privacy, its protection and preventing accidents. Her experience in this working field makes it possible to act fast and in short term. Just what a company needs."
• “Rosalie Brand is a pleasure to work with. She is intelligent, dedicated, very knowledgeable and pragmatic.”

The Legal 500 EMEA 2024 - Data Privacy and Data Protection Tier 1

Kennedy Van der Laan is well-versed in administrative enforcement law and data protection law, allowing it to advise on a range of contentious and non-contentious privacy issues. The firm excels in assisting clients in the financial, logistics, telecommunications, entertainment, and healthcare sectors. The team routinely undertakes investigations and enforcement proceedings carried out by data protection regulators both locally and internationally and recently formed a 24/7 incident response team. Hester de Vries, Quirine Tjeenk Willink, Rosalie Brand, and Judica Krikke all jointly chair the practice. De Vries handles issues at the forefront of data protection such as AI, open data, platforms for data sharing, and adtech. Litigator Tjeenk Willink is an enforcement law specialist, Brand was promoted to partner in 2023 and mainly supports clients with cybersecurity incidents. Krikke focuses on complex digital transformation processes, IT and cloud outsourcing issues. Elise Troll was appointed counsel in 2023 and advises on data protection particularly in relation to telecoms.
 

Rising stars

Rosalie Brand
Elise Troll

The Legal 500 EMEA 2023 - Data Privacy and Data Protection Tier 1

Kennedy Van der Laan has ‘unique expertise in the area of cybersecurity’. Head of the data protection practice Hester de Vries is testament to this, advising public sector and private sector clients, operating in complex new digital ecosystems, such as digital payments and gaming, on data protection governance. Senior associate Rosalie Brand adds another layer to the practice, specialising in cyber incidents.

Rising stars

Rosalie Brand
Elise Troll

The Legal 500 EMEA 2021 - Data Privacy and Data Protection Tier 1

Under the leadership of the highly experienced Hester de Vries, Kennedy Van der Laan's privacy team is a key name for mandates spanning the data and technology sectors; the group also advises on the full range of data matters with a notable focus on commercial data issues and big data work. The practice's expertise includes advising on matters in the media, telecoms, financial and healthcare sectors, and has recently expanded to include issues relating to smart cities. Quirine Tjeenk Willink is another key name, and combines her privacy experience with expertise in administrative enforcement law. Senior associates Rosalie Brand and Elise Troll are also singled out.
 

Testimonials

“Rosalie Brand is a pleasure to work with. She is intelligent, dedicated, very knowledgeable and pragmatic.”