Jörg Hladjk advises on complex, international cybersecurity and data protection matters with 20 years' experience. He leads the Brussels Cybersecurity, Privacy & Data Protection Practice, top-ranked in The Legal 500 EMEA.
Jörg counsels clients across financial services, automotive, IT, energy, and life sciences. His practice spans global strategies for data, cybersecurity, and AI compliance; approvals for Binding Corporate Rules; certification under the EU-U.S. Data Privacy Framework; data-breach preparedness and incident response; and contentious matters and regulatory investigations. He has a strong track record on data, AI, and cyber issues in cross-border M&A and outsourcings and on strategies for critical infrastructures, cloud deployments, and data centers.
He advises on the full spectrum of EU frameworks, including the General Data Protection Regulation (GDPR), Data Governance Act (DGA), Data Act (DA), Artificial Intelligence Act (AI Act), Digital Services Act (DSA), Digital Operational Resilience Act (DORA), Network and Information Security Directive 2 (NIS 2), and Cyber Resilience Act (CRA).
Representative work includes advising an electronic trading platform on all aspects of a cyberattack; a U.S.-based software company on its EU offering of AI and cybersecurity tools; a global automotive supplier on its GDPR implementation program; an energy company on critical infrastructure, including data centers; and a medical device company on mobile app technology.
Jörg chairs the advisory board of Trust in Digital Life (TDL). He has authored more than 50 legal articles and coauthored leading EU commentaries, including GDPR (Ehmann/Selmayr, 1st/2nd/3rd eds.). He served on the IAPP Publications Advisory Board from 2018 to 2020 and, since July 2021, has been co-issue leader for cybersecurity on the Digital Economy Committee at the American Chamber of Commerce to the EU.
Experience
Additional Publications
- February 2019
The German Facebook Case – Towards an Increasing Symbiosis Between Competition and Data Protection Laws?, Competition Policy International - February 2019
The German Facebook Case – Towards an Increasing Symbiosis Between Competition and Data Protection Laws?, coauthor, CPI Antitrust Chronicle
Additional Speaking Engagements
- November 19, 2025
Moderator, panel - Cybersecurity and the AI Act — Practical Challenges and Opportunities, IAPP Europe Data Protection Congress 2025 - February 26, 2025
Speaker, Jones Day - Cybersecurity and Privacy Update: A Roundtable Discussion of Key Developments and Hot Topics (AI Regulation & Enforcement - EU AI Act and Continued EU Digital Agenda Implementation) - November 6, 2024
Speaker, IDACON 2024 - 24th Data Protection Congress - Uniform application and enforcement of the GDPR – The role of the European Data Protection Board (EDPB) - June 20, 2024
Speaker, Jones Day - Cybersecurity and Privacy Update: A Roundtable Discussion of Key Developments and Hot Topics (EU Digital Strategy Overview and EU AI Act) - October 4, 2023
Speaker, Jones Day - Cybersecurity and Privacy Update: A Roundtable Discussion of Key Developments and Hot Topics (Rise of Data Subject Access Requests (DSARs) - June 21, 2023
Speaker, Jones Day - Cybersecurity and Privacy Update: A Roundtable Discussion of Key Developments and Hot Topics (Personal Data Transfers – Update on new EU-U.S. Transatlantic Data Privacy Framework) - April 25, 2023
Panelist, Jones Day Sixth Annual Latin American Privacy and Cybersecurity Symposium - Session 5: Key Developments in Cybersecurity, AI, and Data Protection: Europe vs. Latin America (English) - October 14, 2022
Speaker, Jones Day - Compliance difficulties of data security and personal information protection 数据安全和个人信息保护合规难点 - October 12, 2022
Speaker, Jones Day - Cybersecurity and Privacy Developments for Life Sciences companies - September 28, 2022
Moderator, panel, What If Privacy Shield 2.0 Never Happens? Practical Advice On Lawful International Data Transfers at PrivSec Amsterdam (Part of the Digital Trust Europe Series) - June 22, 2022
Speaker, Jones Day - Cybersecurity and Privacy Update: A Roundtable Discussion of Key Developments and Hot Topics (GDPR enforcement trends) - December 15, 2021
Speaker, Jones Day - Life Sciences Cyber Session: Cybersecurity and Privacy risks in life sciences transactions - September 22, 2021
Moderator, Session 5. The GDPR vs. Brazil's General Data Protection Law, Jones Day's Fifth Annual Latin America Data Protection, Privacy & Cybersecurity Symposium - June 24, 2021
Speaker, Cybersecurity Incidents – EU Legal Framework and Data Breach Response, BJA Webinar on Cybersecurity – how to prepare your company for a Cyber Crisis - March 26, 2021
Speaker, Obligation to document data breaches and Post-breach management measures: contract management and liability issues, Online Seminar "Responding to personal data breaches in the Post-GDPR", Academy of European Law (ERA) - January 13, 2021
Jones Day - Cybersecurity and Privacy Update: A Roundtable Discussion of Key Developments and Hot Topics (Update on Schrems II Developments) - October 8, 2020
Session 2: Practical GDPR – Challenges in real life/lessons learned, Legal Council - November 11, 2019
How to close the deal: Data protection risks and solutions for M&A transactions, Roundtable Topic Discussion, IAPP Europe Data Protection Congress 2019 - October 23, 2019
Big Data and GDPR, IDACON Data Protection Congress - June 18, 2019
GDPR - a catalyst for digital transformation? European Association for Identity and Security (EEMA) Annual Conference 2019 - June 6, 2019
The GDPR One Year On: A Look at the Lessons From Implementation and the Next Steps for Compliance and Enforcement - May 23, 2019
Eighth Annual European Labor & Employment Conference - April 30, 2019
Panelist, Cybersecurity and Data Governance: Threat Landscape, Legal Regime, and Policy Challenges, Seminar: Cybersecurity, Data Protection, and the Rule of Law - Evolving Policy and Legal Risks in a Global Digital Economy, Jones Day and Peking University Law School - April 10, 2019
Data Localization and Privacy Regulations - Cybersecurity Risk Management Council - January 2019
Implications of the US Cloud Act and Other Developments Regarding Data Protection in Context of the USA, GDD Winter Workshop - November 29, 2018
International Data Breach Notification: How to Get it Right, Roundtable Topic Discussion, IAPP Europe Data Protection Congress 2018 - October 25-26, 2018
Data Protection and Open Banking: Experiences and Expectations - October 5, 2018
Marketing under GDPR: Challenges, experiences and solutions, IAPP Brussels KnowledgeNet Chapter - October 1, 2018
Wearables in the context of data protection regulations (Risks & Challenges), FIFA Football Technology & Data Summit 2018 - February 28, 2018
Antitrust and Data Portability Rights, EMEA Conferences: GDPR and Antitrust - January 2018
The European Union's General Data Protection Regulation (GDPR), Jones Day MCLE University - January 2018
The ePrivacy Regulation, Jones Day MCLE University - January 2018
The European Union's General Data Protection Regulation (GDPR), Jones Day MCLE University - October 23, 2017
How to Prepare for the GDPR for Japanese Companies - October 17, 2017
The EU-U.S. Privacy Shield in context of the developments in the USA, Annual IDACON Conference - September 14, 2017
Introduction to the GDPR - Top 10 Implementation Issues for Companies - July 12, 2017
The Upcoming ePrivacy Regulation: Status and Assessment of the Commission’s Proposal, IAPP Knowledge Net - April 25, 2017
GDPR Workshop: Best Practices for Implementing the EU General Data Protection Regulation, Jones Day Seminar - April 24, 2017
GDPR Workshop: Best Practices for Implementing the EU General Data Protection Regulation, Jones Day Seminar - April 5, 2017
Le RGPD en détail – Analyse des directives des autorités de protection des données et des efforts de mise en œuvre au niveau national - April 2, 2017
The EU Cybersecurity Directive—What Do the New Rules Mean for Business?, 10th Annual GDD Seminar Data Protection International - March 15, 2017
Webinar Series: EU General Data Protection Regulation (three-part series) - November 28, 2016
Advanced Training for Data Protection Officers on "International Data Transfer: EU Standard Contractual Clauses and Privacy Shield", German Federal Association of Data Protection Officers (Berufsverband der Datenschutzbeauftragten Deutschlands (BvD) e.V.) - October 14, 2016
What to Do in Case of a Cyber-Incident or Data Breach: How to Prepare for, and Avoid, a Crisis, Jones Day Seminar - October 14, 2016
Crisis Management: Prepare for the Unexpected - September 13, 2016
Binding Corporate Rules under the EU General Data Protection Regulation (GDPR), IAPP Knowledge Net - August 2, 2016
A Briefing on the EU-U.S. Privacy Shield - July 11, 2016
Overview and business impact of the EU GDPR – How can companies prepare for compliance?, Japanese Chamber of Commerce, Data Protection Seminar - June 16, 2016
Trust in the Digital World - The EU General Data Protection Regulation - How can companies prepare for compliance? - October 14 and 15, 2015
Advanced Training for Data Protection Officers on "International Data Transfer", German Federal Association of Data Protection Officers (Referentin der Fortbildungsveranstaltung des Berufsverbands der Datenschutzbeauftragten Deutschlands (BvD) e.V. zu "Internationaler Datentransfer") - April 23, 2015
Status und Vergleich der grenzüberschreitenden Datenschutzkonzepte: APEC Cross Border Privacy Rules und EU Binding Corporate Rules, 8. GDD-Fachtagung Datenschutz International 2015 - December 3, 2014
Can the EU legal framework promote trust? Challenges towards trusting the network and the Cloud, NetWorld2020 GA 2014: The future of telecommunication networks - November 18, 2014
Internet of Things, Data Protection and Security: What are the Legal Challenges, and How Do We Overcome Them?, IAPP Europe Data Protection Congress 2014 - November 12, 2014
Enforcement action risks for organizations of multinational reach. Understanding regulation and global enforcement trends and the impact for General Counsel and Data Protection Officers, The Future of Data Protection Conference - May 12, 2014
The EU Cybersecurity strategy – overview and business impact, European Data Protection Days (EDPD) - April 28, 2014
APEC Privacy Framework – Geschäftsaktivitäten im asiatisch-pazifischen Wirtschaftsraum, 7. GDD-Fachtagung Datenschutz International 2014 - April 28, 2014
APEC Privacy Framework – Geschäftsaktivitäten im asiatisch-pazifischen Wirtschaftsraum, 7. GDD-Fachtagung Datenschutz International 2014 - April 28, 2014
Technologien für mobiles, kontaktloses Bezahlen (NFC), 15. Jahresfachkonferenz, Datenschutz und Datensicherheit (DuD 2013) - June 3, 2013
Successfully Navigating Hazardous Waters: The 3rd Joint ABA/DAV Conference on Transatlantic Deals and Disputes, Data Privacy for M&A Lawyers
"A star lawyer. He is a great communicator and provides practical advice that is readily implemented."The Legal 500 EMEA
- Johann Wolfgang Goethe-University Frankfurt am Main (Dr. jur. in Data Protection Law 2006; First State Law Exam 2001); Second State Law Exam (Wiesbaden, Germany, 2005); Centre for Commercial Law Studies (CCLS), Queen Mary University of London (LL.M. in Computer & Communications 2005)
- Brussels (E-List) and Frankfurt am Main
Lawdragon 500 Leading Global Cyber Lawyers (2024 and 2025)
The Best Lawyers in Belgium for privacy and data security law (2023)
BTI Client Service All-Star (2022)
The Legal 500 EMEA for EU regulatory: privacy and data protection (2016-2025), ranked as a "Leading Individual"
International Who's Who of: Data Privacy & Protection Lawyers (2019-2024) and Information Technology Lawyers (2012-2018)
Acritas "Star Lawyer" (2019)
Recommended for data protection in Brussels in JUVE Handbook since 2020
- English, German
Before sending, please note:
Information on www.jonesday.com is for general use and is not legal advice. The mailing of this email is not intended to create, and receipt of it does not constitute, an attorney-client relationship. Anything that you send to anyone at our Firm will not be confidential or privileged unless we have agreed to represent you. If you send this email, you confirm that you have read and understand this notice.