Legal Director

Masha Ooijevaar

Languages

Dutch
English

Social media

Masha Ooijevaar is a Legal Director in the Technology, Media and Telecommunications (TMT) Practice at CMS, based in Dubai. She is a dual-qualified (England & Wales, California) TMT/commercial lawyer specialising in data protection, privacy and cybersecurity. Masha advises clients across the MENA region on digital regulation and technology-related legal matters, including data governance, compliance programmes, cross-border transfers, data processing agreements, breach response and emerging AI laws and issues. She has been based in the region since 2019 and acts for multinational corporates, government entities and tech providers. She is ranked as an Associate to Watch in Chambers and Partners and as a Leading Associate in Legal 500 UAE for TMT.

Before joining CMS, Masha worked at leading international law firms in London and Dubai, as well as with KPMG and in-house at Warner Bros. Entertainment in the UK and US. She holds Certified Information Privacy Professional Europe (CIPP/E) and Certified Information Privacy Manager (CIPM) accreditations from the International Association of Privacy Professionals, and a Practitioner Certificate in Data Protection awarded by BCS, the Chartered Institute for IT.

Awards & Recognitions

01 –

Quote

Masha Ooijevaar is a rising star with noteworthy expertise in data protection. She regularly advises big-name corporate clients on matters in this field, including the completion of company data protection handbooks.

Chambers, 2025
Quote

Masha knows the country's laws like the back of her hand.

Chambers, 2025
Quote

Masha Ooijevaar delivers top-level service and respects the agreed timelines. She is a trusted adviser who is always available.

Chambers, 2025

Relevant experience

Luxury goods retailer and distributer on designing a bespoke data protection compliance programme, following a thorough assessment of its data processing activities across operations in the UAE and Saudi Arabia.
Riyadh-based bank on aligning its supply chain arrangements with the Saudi Personal Data Protection Law, including reviewing and updating contracts to include appropriate data protection provisions.
Global consumer drinks group on developing a comprehensive data privacy handbook, establishing global data protection standards with localised implementation guidance.
Family group in the Middle East on a range of complex data privacy issues, including in relation to data monetisation, consumer management initiatives and an AI-enabled lifestyle app.
Qatar Financial Centre (QFC) Data Protection Office on the development of an AI data protection standard, guiding companies operating in the QFC on compliance with the QFC Data Protection Regulations when utilising AI technologies.
Global corporate group on the data protection implications of implementing a global talent management platform across 17 jurisdictions in the Middle East and Africa.
GCC media company on a data protection compliance audit and implementation of a suite of policies and documentation to support a comprehensive data protection programme.
Leading UAE-based creator of immersive destinations on conducting a data protection impact assessment for a smart camera and videography project, aligning with GDPR and UAE PDPL requirements.
Public company in the oil and gas sector on the establishment of a data governance structure to manage data protection compliance across multiple business units and departments within the organisation.
Leading internet company on data protection law and regulatory policy in the Middle East, including supporting on public consultations with national regulators and governments in Saudi Arabia, Kuwait and UAE.
International insurance company on data breach procedures and notifications.
Organisations in the dispute resolution and technology sectors on regulatory responses and risk mitigation strategies in connection with data protection authority investigations and enforcement decisions.

*Prior to joining CMS.

Publications

Masha contributes articles and comments on the subject of data privacy, including global regulatory research platform OneTrust DataGuidance and international academic journal Privacy Laws & Business.
Contributor author - “Drone Law and Policy: Global Developments, Risk, Regulation and Insurance,” Chapter 16: Data Protection, Privacy and Big Data - 1st Ed, Routledge, 2021.

Memberships & Roles

International Association of Privacy Professionals (IAPP).
International Bar Association.
Society for Computers & Law.
Women in AI Governance.

Education

2014 - LLM in Entertainment, Media and Intellectual Property Law, University of California, Los Angeles (UCLA), Los Angeles.
2012 - Graduate LLB, BPP Law School, London.
2011 - MA in Art Business, University of Manchester/Sotheby’s Institute of Art, London.
2010 - LLM in European Law, Leiden University, Netherlands.
2009 - BA, Columbia University, New York.

sectors

TMT - Technology, Media & Telecommunications

Insights

Global Reach