Areas of expertise
Industries
Languages
Polish
English
French
Dr Dariusz (Darek) Kloza works on a wide range of European privacy and personal data protection matters.
He is also a senior researcher at the UCLouvain Saint-Louis Bruxelles, working on the intersection of law and technology.
Previously, Darek worked at Ghent University and the Vrije Universiteit Brussel, where he co-founded the Brussels Laboratory for Data Protection & Privacy Impact Assessments (d.pia.lab).
Client, Legal 500 2025, EU regulatory: Privacy and data protection“I have been continually grateful for the sincere effort ... Dariusz Kloza put forth in seeking to understand the context of my company and my request so that [he] can deliver the most relevant work product.
Representative matters
- Assisting clients in complying with obligations under the Online Safety Act 2023 in the UK
- Advising clients on compliance with current and upcoming European Union (EU) data, privacy and digital rules, including legislation on artificial intelligence (AI)
- Conducting Data Protection Impact Assessments (DPIA) for projects involving processing of personal data relating to health (e.g., clinical trials)
- Advising US-based clients in the pharmaceutical sector on data transfers outside the European Economic Area (EEA), including Transfer Impact Assessments (TIA)
- Timely filing in multi-jurisdictional data breach notifications.
- Assisting technology companies and sector associations in litigation before European Courts.
Academic
- PhD, Law, Vrije Universiteit Brussel,2019
- LLM, Law & Technology, Tilburg University, 2010 (distinction)
- Master of Laws, University of Białystok, 2008
- Erasmus Exchange, University of Copenhagen, 2007-08
- Legal 500 EMEA 2024, 2025 – Belgium – Privacy & data protection (Tier 3)
Publications
- What could possibly go wrong? On risks to the rights and freedoms of natural persons in EU data protection law, their typologies and their identification, 1 TechReg (2024) 309-329: contributing author
- The right not to use the internet, 52 Computer Law & Security Review (2024) 105907
- The concept of impact assessment, Border Control and New Technologies. Addressing Integrated Impact Assessment, ASP (2021): contributing author
- Data protection impact assessment in the European Union: developing a template for a report from the assessment process, d.pia.lab (2020): contributing author
- A behavioural alternative to the protection of privacy, Trans-Atlantic Data Privacy Relations as a Challenge for Democracy, Intersentia (2017)
- Making the case for enhanced enforcement co-operation between data protection authorities: insights from competition law, 4(2) International Data Privacy Law (2014) 120-138
Speaking engagements
- Privacy Law Scholars Conference (PLSC), Georgetown University Law Center, Washington, D.C., 30-31 May 2024 (panellist)
- 17th UN Internet Governance Forum (IGF), Addis Ababa, 29 November 2022 (panellist)
- Society for Risk Analysis (SRA) Nordic Conference, Universitetet i Stavanger, 8-9 November 2018 (speaker)
- Conference Computers, Privacy & Data Protection (CPDP), Brussels, 27 January 2017 (panellist)