María Luisa González

Senior Associate
(+34) 91 576 19 00
Information Technology


She joined our Firm in 2014, after more than 10 years practising in various consultancy and law firms. She has specialised in data protection, intellectual property related to new technologies, e-commerce, distance procurement, computerised procurement and advice for social network and app developers.

María Luisa has participated in long-term projects related to privacy, compliance and data security in various multinationals and Public Administrations. She also offers extensive experience in audits conducted on data protection and security measures for organisations in the energy, healthcare, technological or transportation sector. She is CIPP/US, CIPP/E, Lead Auditor 27001 and Lead Auditor BS 25999.


  • Degree in Law, Universidad San Pablo-CEU de Madrid (1999).
  • Legal Practice Course, Universidad Pontificia Comillas, ICADE, Madrid (1999-2000).
  • Masters in ICT Law. Instituto de Informática Jurídica. Universidad Pontificia Comillas, ICADE (2001-2002).


Lecturer on the Masters in Industrial & Intellectual Property, Competition and New Technologies, Fundación Pons.


  • "Free Sherlock: Conan Doyle’s best-known character’s difficult entry into the public domain". La LEY Mercantil. No. 32. January 2017.
  • "Crowdfunding reaches fan films: a step towards fan film regulation?". La LEY Mercantil. No. 28. September 2016.
  • "Marked boxes: consent for additional purposes in data protection regulations ". Noticias Jurídicas. July 2016.
  • "New AEPD sanction for circulating non-anonymized judicial documents (Internet publication of 11-M summary proceedings)". Noticias Jurídicas. June 2016.
  • “Processing of employee health data”. La revista de la Agencia de Protección de Datos de la Comunidad de Madrid. No. 55, 2012.
  • “Liability of information society service providers: comments on the Telecinco vs. YouTube judgment”. Noticias Jurídicas. January 2011.
  • “Are Internet and e-mail use policies necessary in companies?” Revista de Información Laboral. Jurisprudencia (Doctrina y Comentarios). Lex Nova. No. 1. 2008.
  • “The law of challenge” La revista de la Agencia de Protección de Datos [AEPD] de la Comunidad de Madrid. No. 25, 2007.
  • “Data processing managers”. AR: Revista de Derecho Informático, ISSN 1681-5726. No. 110, 2007.
  • “Legal risks inherent to website links”. Lex nova: La revista, ISSN 1139-2037. No. 47, 2007, pages 34-35.
  • “The rights held by an interested party in Spanish data protection regulations”. AR: Revista de Derecho Informático, ISSN 1681-5726. No. 106, 2007.


  • Madrid Bar Association.
  • International Association of Privacy Professionals (IAPP).
  • Asociación Profesional Española de la Privacidad (APEP) [Spanish Professional Privacy Association].



English, French