Mari-Liis Orav

Mari-Liis Orav

Senior Associate
Tallinn, Estonia

Mari-Liis Orav primarily focuses on personal data protection law. In addition to data protection law, Mari-Liis concentrates on intellectual property and IT law, where she advises clients on matters such as licensing and transferring intellectual property rights, trademark disputes, confidentiality, software development, etc.

  • About

    Mari-Liis Orav primarily focuses on personal data protection law. She has extensive practical experience in advising clients from various sectors, among them being IT, financial, hospitality, retail, e-commerce, employment, real estate, industrial, regarding the EU General Data Protection Regulation (GDPR), as well as other data protection laws, such as e-privacy. Mari-Liis assists clients comprehensively, starting from conducting data protection trainings, carrying out compliance analyses, drafting and reviewing documents, assisting in negotiations, supporting the work of data protection officers and in-house lawyers, as well as representing clients in the Data Protection Inspectorate. Her approach to data protection is uniquely versatile because of her additional prior experience from the public sector, with the European Data Protection Supervisor.

    In addition to data protection law, Mari-Liis concentrates on intellectual property and IT law, where she advises clients on matters such as licensing and transferring intellectual property rights, trademark disputes, confidentiality, software development, etc.

    Mari-Liis has taught data protection as a guest lecturer in Estonian Business School and Estonian Entrepreneurship University of Applied Sciences, and intellectual property and IT in the Institute of Computer Science in the University of Tartu.

    For several years, Mari-Liis has contributed to the activities of the Cloud Privacy Check (CPC) network along with 30 lawyers from other countries. CPC is a trusted, non-profit international network of qualified professionals who deliver simplified and straightforward guidance to help navigate the legal and regulatory environment relating to privacy and the cloud.

  • Major Projects
    • Carrying out GDPR compliance analyses and giving recommendations to various companies

      Carrying out GDPR compliance analyses and giving recommendations for achieving compliance to various companies from different sectors, including one of the largest car sale database managers in Estonia, one of the largest retail chains in Estonia, one of the largest real estate developers in Estonia, one of the largest spa hotels in Estonia, the Estonian unit of one of the biggest agricultural companies in the Baltics, the Estonian unit of a global IT and business service provider, a mobile payment services provider, a loan provider.

    • Drafting GDPR-compliant documentation

      Drafting GDPR-compliant documentation (e.g privacy and cookie notices, consents, data processing agreements, registries of processing activities, internal policies and procedures) for a leading distributor of medical supplies in Northern Europe, an international cloud-based management software provider, one of the largest car sale database managers in Estonia, one of the largest real estate developers in Estonia, a tokenised exchange platform, a multinational financial services platform, the Estonian unit of one of the biggest agricultural companies in the Baltics, several rental work services providers, etc.

    • Drafting a legal opinion to a trust service provider

      Drafting a legal opinion to a trust service provider about the roles and obligations in processing personal data under a cooperation agreement.

    • Advising a software development, design and data science services provider

      Advising a software development, design and data science services provider on relevant data protection topics, including geolocation data and anonymisation.

  • CV

    Memberships

    2014
    Estonian Bar Association

    Professional career

    Since 2019
    Senior Associate, law firm TGS Baltic
    2017–2019
    Associate, Senior Associate, law firm PricewaterhouseCoopers Legal
    2013–2017
    Lawyer, Associate, law firm Glimstedt
    2013
    Legal Intern, Global Technology, Outsourcing & Privacy Group, law firm Hunton & Williams LLP (Brussels)
    2012–2013
    Legal Intern, European Data Protection Supervisor, Policy & Consultation Unit (Brussels)
    2009
    Intern, Office of the Chancellor of Justice of Estonia

    Education

    2012
    University of Groningen, Faculty of Law, European Law, LLM
    2011
    Tilburg University, Law School, European and International Law, Erasmus Exchange Programme
    2011
    University of Tartu, Faculty of Law, BA
    2009
    American Institute on Political and Economic Systems (AIPES), Interdisciplinary Course in Political Economy