Arthur Focquet advises multinational companies on complex privacy, cybersecurity, AI, and digital regulatory matters, with a focus on European Union data protection requirements, cybersecurity regulation, and emerging digital regulation.

Arthur helps clients design and implement privacy compliance programs, manage regulatory inquiries, respond to cybersecurity incidents and personal data breaches, and address strategic issues under the General Data Protection Regulation (GDPR), the Artificial Intelligence Act (AI Act), and related legislation.

Arthur also advises clients on requirements under the Network and Information Security Directive (NIS2) and the Digital Operational Resilience Act (DORA). He has managed major cybersecurity incidents and personal data breaches across multiple EU countries and the United States, including coordinating response workstreams, advising on notification obligations, and engaging with competent authorities.

Arthur provides strategic counsel on evolving regulatory developments at both the EU and Member State levels. He has advised multinational companies in connection with inquiries and investigations by EU data protection authorities, including matters involving data subject claims, data protection officer (DPO) requirements, cookie compliance, and broader privacy governance issues.

Arthur has designed and implemented GDPR compliance projects for clients, including:

• Developing strategies for international data transfers;
• Assisting clients in obtaining regulatory approval for their Binding Corporate Rules (BCRs) in the EU;
• Drafting and negotiating data processing agreements and other contractual arrangements;
• Preparing internal data handling policies and privacy notices;
• Establishing processes to address data subject rights;
• Conducting data protection impact assessments; and
• Implementing privacy-by-design and privacy-by-default measures.

In addition to compliance matters, Arthur has represented clients in privacy litigation before the Belgian Data Protection Authority and the Belgian Market Court, the appellate court for decisions of the Belgian Data Protection Authority, including a matter referred to the Court of Justice of the European Union for a preliminary ruling. His litigation and regulatory experience spans companies across various sectors.

Arthur is a member of the Brussels Bar and is fluent in Dutch, French, and English, with proficiency in Spanish.