Michael Gorm Madsen

Commercial, Life Sciences and Healthcare, Privacy and Data Protection, Retail and Consumer, Technology & Communications

I'm a partner and head of our skilled and dedicated Privacy and Data Protection group in Denmark, advising on a wide range of data protection and e-privacy matters.

The need for data protection advice has expanded dramatically with the introduction of the EU Data Protection Regulation (GDPR). The GDPR is a very complex set of rules, not only to understand, but also to apply. That calls for a pragmatic approach yet still deeply rooted in a profound knowledge of the law. Our job is to understand our clients' business and to help our clients find the right solutions for them. Therefore, I am particularly satisfied that our client feedback often mentions our readiness to understand the clients' need, our sense of pragmatic solutions and our availability.

My passion for data protection law began, like many other matters in life, as a coincidence. In 2000, an international law firm asked me to write a chapter to a book on the implementation of the Data Protection Directive in Denmark. From that point on, I was hooked by the complexity of data protection rules and the challenges they pose to an ever changing world facing new technological development and possibilities.

Together with my team, I have vast experience in assisting our clients with all aspects of privacy and data protection, from full blown GDPR compliance projects, including awareness and client training, identification of lawful basis, complying with transparency requirements, establishing the appropriate level of procedures, policies and safety measures, to the daily challenges, including subject access requests, data breaches, negotiation of data processor agreements, cross border transfers of personal data, audits and authority enquiries, and taking part in clients business elaborations sitting in the midst of a service or product developing team with the task of ensuring privacy by design.

As GDPR applies to every kind of business and organisation, I have assisted and gained insight into a wide range of client sectors including retail, biotech and medical device, adtech, gaming, health sector, fintech, software and platform service providers, insurance and brokers, utility providers, industry associations, unions, public bodies and non-profitable organisations and more.

Being a part of Bird & Bird's international team of skilled privacy and data protection lawyers provides a unique tool enabling seamless coordination of cross border advice and projects and I have coordinated as well as contributed to multi-jurisdictional projects.

Since 2013, I have been a Certified Information Privacy Professional (CIPP/E).

Having a commercial law background, I also advise on commercial contracts, consumer law and marketing law.