Lauded by one client as being the ‘number 1’ data privacy, cyber and AI experts in France, the team at August Debouzy has an undeniable force within the industry and is a regular advisor to a litany of outstanding clients including global social media platforms, applications, governments, luxury brands and leading gaming companies. The firm regularly advises on data breaches as data controllers and its subsequent regulatory notification requirements, as well as compliance, GDPR issues, Florence Chafiol leads the team and is a GDPR expert and is assisted by Roxane Blanc-Dubois, who is a life sciences and health regulation expert and Stéphanie Lapeyre, who has particular strength advising on matters pertaining to new technologies and associated data issues.
Data privacy and data protection in France
August Debouzy
Responsables de la pratique:
Florence Chafiol
Autres avocats clés:
Roxane Blanc-Dubois, Stéphanie Lapeyre
Les références
‘The team is dynamic, responsive and we are satisfied with the quality of the advice provided.’
‘I was particularly in contact with Roxane Blanc-Dubois, who demonstrated total commitment to the files we entrusted to her. Roxane is very involved, responsive, expert in her advice but also knew how to adapt to the size of our company and our operational constraints. She demonstrated pedagogy with the teams and also mobilized the right resources internally at August Debouzy to provide us with comprehensive advice.’
‘Team strengths: direct and effective contact on all our GDPR issues, clear and timely advice, support as close as possible to our internal client with participation in all necessary calls with our internal contacts to fully understand our challenges.’
‘No 1 data privacy cyber and AI experts in France.
From their total technical knowledge to their real world experience – from all angles; for small SMEs to large US HQ’d corporates; from prosecuting or defending litigation and working with regulators – August Debouzy know it all. ’
‘Florence Chafiol – market leader in the data privacy cyber and AI world in France. Knowledgeable, practical and hard working; and combines this with a laser focus on achieving commercial outcomes. No better private practice lawyer in France.’
Principaux clients
DBV Technologies
Brambles
EBA Clearing
Givaudan
SAUR
Alstom
Vinci
La Mondiale EuroPartner
PRINCIPALITY OF MONACO
PAYFIT
MICROSOFT
TOTALENERGIES & TOTALENERGIES ELECTRICITE ET GAZ FRANCE
VEOLIA ENVIRONNEMENT
PERNOD RICARD
DELIVEROO
JCDECAUX
DANONE
EDF SA
SALSIFY
OMNICOM PUBLIC RELATIONS GROUP FRANCE
L’OREAL
Neuflize OBC/ ABN Amro
SNCF
RATP
Principaux dossiers
- Assisting Microsoft with transactional, advisory and litigation matters for all aspects of Microsoft’s activities in France.
- Assistance provided to Veolia Environment involved reviewing of all contractual templates related to personal data processing, drafting a detailed intra-group contract aimed at framing all data exchanges between Veolia companies around the world, both taking into account the GDPR but also local legislation (UK, Switzerland, China, etc.) and supporting the DPO with with various subjects relating to data protection.
- Assists Deliveroo’s privacy teams on several issues regarding personal data protection, particularly in formulating response strategies for data subject access requests, reviewing the cookie banner on the website, and ensuring that marketing campaigns and communications are GDPR compliant.
Baker McKenzie
Baker McKenzie is a well respected team in the field and acts for an exclusive list of clients which includes major banks, software conglomerates, and fashion houses. As part of its work, the firm advises clients on CNIL investigations, cyber crime, and data privacy litigation. Magalie Dansac Le Clerc has an outstanding wealth of experience and advises clients on GDPR compliance and related issues, including data transfer issues, processing of sensitive data, data breaches, information and consent, direct marketing, data privacy impact assessment, data subject access requests and data processing agreements. Rémy Bricard and Laurent Szuskin are other names to note.
Responsables de la pratique:
Magalie Dansac Le Clerc
Autres avocats clés:
Rémy Bricard; Laurent Szuskin
Les références
‘Close-knit team, very pleasant, available and responsive.’
‘Magalie Dansac Le Clerc is warm, serious, open to discussion, a high-quality expert in her field.’
Principaux clients
Covage
Evernex
IES Synergy
Roquette
Sodexo
Crédit Agricole Group
Egis
Oracle
Embracer
Principaux dossiers
Bird & Bird
The team at Bird & Bird regularly handles regulatory compliance, GDPR issues, data transfers, personal data issues, ransomware attacks and data governance both in France and across other European states. Clients include large consultancy firms, sports organisations, banks and major players in the health and life sciences sectors. Digital compliance expert Ariane Mole heads the practice and has expertise in dawn raids, data-related litigation, cyber security and e-health. Willy Mikalef leverages his experience to advise on data protection and cybersecurity requirements among other matters. Oriane Zubcevic is noted for handling GDPR compliance audits and Julie Verdure provides additional support.
Responsables de la pratique:
Ariane Mole; Willy Mikalef
Autres avocats clés:
Willy Mikalef; Oriane Zubcevic; Julie Verdure
Principaux clients
HubOne
Doctolib
LEEM
IQVIA
DPD Group – Geopost
Shoebox
VALIUZ
Principaux dossiers
- Assisting HubOne in the context of the first data intermediary service within the meaning of the recently enacted EU Data Governance Act (DGA).
DLA Piper
DLA Piper's clients include life sciences and pharmaceutical companies, banks, and data science companies. The team is adept at advising on compliance with data protection laws, particularly with regards to healthcare professionals, data processing, internet web sites, marketing campaigns and events, negotiation of data processing agreements, the data implications of AI, GDPR compliance and cross-border data transfers. Denise Lebeau-Marianna advises on cybersecurity programme incident response plans, e-discovery procedures and blocking statutes, data protection aspects of internal investigations and projects involving AI. Yaël Hirsch has significant expertise in CNIL contentious work.
Responsables de la pratique:
Denise Lebeau-Marianna
Autres avocats clés:
Yaël Hirsch
Les références
‘Responsive, competent, available, pleasant, reliable, with the concern to respond appropriately to the issues raised.’
Principaux clients
Pierre Fabre Group
Société Générale
L’Oréal
Airbus
Principaux dossiers
Gibson Dunn
The team at Gibson Dunn is jointly led by Ahmed Baladi, who handles matters concerning GDPR compliance alongside data breach and national security matters including handling investigations, enforcement defence and crisis management, and Vera Lukic, who in addition to advising on IT and data privacy aspects in connection with major M&A deals, including carve-out and transition issues is also noted for her expertise in strategic digital related-projects including NFTs, AI, and Metaverse projects Clémence Pugnet, who is noted for her ability to draft privacy and cookie policies, provides additional support.
Responsables de la pratique:
Ahmed Baladi; Vera Lukic
Autres avocats clés:
Clémence Pugnet
Les références
‘Gibson Dunn has been a wonderful firm that we have engaged over the past few years in some high risk areas. They are very decisive, confident, and collaborative in their approach to risk mitigation. They are also well informed when it comes to the inner workings of their local regulators.’
‘What we specifically appreciate is how they structure their initial positioning on risk areas, but are collaborative when it comes to accepting our feedback and integrating our positions into work product. By all accounts they are also extremely effective communicators whether in written responses or hearings.’
‘Ahmed Baladi and Vera Lukic are both exceptional partners at Gibson Dunn. We have worked with both of them equally and they work really well together, and with us as well.
Principaux clients
Louis Vuitton
Meta
Platinum Equity Advisors
Renault
Suez
TAG Heuer
Thales
Unibail Rodamco Westfield
Western Digital
Yahoo
Principaux dossiers
Gide Loyrette Nouel A.A.R.P.I.
Gide Loyrette Nouel A.A.R.P.I. handles data audits, data protection impact assessments, GDPR compliance and data surveys. The team is headed by Thierry Dor who in addition to handling personal data processing matters, also leads on global data transfers and GDPR compliance as well as contentious matters with the CNIL and in matters relating to cybersecurity. Aurélie Pacaud and Julien Guinot-Deléry provide support in matters of AI and data transfers outside of the EU.
Responsables de la pratique:
Thierry Dor
Autres avocats clés:
Aurélie Pacaud; Julien Guinot Deléry
Les références
‘This is a very competent team, at the forefront of legal news, which is essential in this area. Able to give real, informed advice. They are not afraid to take a stand to guide their client towards the most suitable and personalized solution.’
‘High level of expertise in data protection.’
‘The team is particularly responsive, responding within 1 or 2 days. It adapts to the tools we use.’
‘Julien Guinot Deléry and Aurélie Pacaud for their ability to get straight to the point, not beat around the bush. They gave us extremely relevant feedback and were available within very tight deadlines when we had urgent situations.’
Principaux clients
Cure 51
OL (Olympique Lyonnais) Group
Orange Business
Société Générale
Suez
Reputation Squad
France Televisions
LVMH
Casino
Crédit Agricole
Drouot
Principaux dossiers
Herbert Smith Freehills LLP
The ‘very sharp’ team at Herbert Smith Freehills LLP is equally adept at handling contentious and advisory matters for its clients. The firm regularly represents its clients on GDPR compliance, CNIL issues, and large-scale digitalisation projects. Noted by clients for being an ‘outstanding lawyer’ the team is led by Alexandra Neri, who in addition to being a cyber crime expert is noted for her ability to handle data privacy issues and dawn raids, as well as data transfer conflicts. Sébastien Proust is also a key name at the firm; his recent work includes advising on the digitalisation of books and the “right to be forgotten”, and the legal status of video platforms as well as personal data rights.
Responsables de la pratique:
Alexandra Neri
Autres avocats clés:
Sébastien Proust
Les références
‘Responsiveness and expertise.’
‘Alexandra Néri is an expert in the field of IP and personal data protection.’
‘Creativity, ingenuity, rigor.’
Principaux clients
Expedia Group/ Homeaway
Principaux dossiers
- Assisting Google in several ongoing disputes in respect of the listing of personal data in Google search results.
- Assisting several subsidiaries of the Expedia group (HomeAway, EG Rentals) in relation to a litigation against the Paris town hall council regarding Expedia’s refusal to communicate user data for the purpose of penal inquiries.
- Representing Tripadvisor in a dispute brought by the Paris City Hall (“Ville de Paris”) before the Paris High Court.
Hogan Lovells (Paris) LLP
The team at Hogan Lovells (Paris) LLP is lauded by clients for being ‘one of the most expert teams in the market’ and acts for a strong roster of clients including international mass media companies and search engines. Etienne Drouard advises private and public entities operating IT and telecoms infrastructures, as well as clients involved with online services, digital media, e-commerce, mobility, and transport services, financial, insurance and payment services. Julie Schwartz has significant expertise with regards to data breach responses, negotiating data processing agreements, and assisting clients during CNIL dawn-raids as well as GDPR compliance, drafting internal policies and privacy impact assessments.
Responsables de la pratique:
Etienne Drouard
Autres avocats clés:
Julie Schwartz
Les références
‘I am used to working with Julie Schwartz (personal data counsel). The team thus constituted allows to have a complete and coherent approach to data issues in the field of health. Their combined expertise allows to have a sharp and avant-garde expertise of the constantly evolving pharmaceutical sector.’
‘Julie Schwartz is my preferred point of contact for any high value-added questions I face in the context of my business. Her responsiveness and pragmatic approach to topics allows my company to benefit from precise and tailor-made assistance while being a facilitator for the implementation of innovative projects and the understanding of risks.’
‘A team of experts on Privacy topics, available, probably the most expert team on the French market.’
Principaux clients
Aéroports de Lyon
Vertex Pharmaceuticals
Owkin
SCOR
General Electric
GrandVision
Principaux dossiers
- Advised Aéroports de Lyon on the implementation of a facial recognition project.
- Advised Vertex on a drug treatment (CAR T) against sickle cell disease for all European Countries as well as other numerous ex-EU countries and are acting as key point of contact for clients and all legal counsels involved in the project.
- Advised Owkin, a ground-breaking medical AI Biotech company, as the external Data Protection Officer (DPO) and a constant advisor.
Clifford Chance
The data privacy and data protection team at Clifford Chance regularly assists with GDPR compliance, as well as data protections issues related to emerging technologies and strategic matters. Dessislava Savova is a specialist in terms of data protection, cybersecurity, artificial intelligence, and platform regulations. Alexandre Balducci is noted for his AI and cyber security capabilities. The team was further bolstered by the arrival of Patrice Navarro from Hogan Lovells LLP in 2024.
Responsables de la pratique:
Dessislava Savova; Patrice Navarro
Autres avocats clés:
Alexandre Balducci
Les références
‘Clifford Chance stands out with their level of responsiveness and availability on complex matters, even on short notice. I prefer working with them rather than with another firm, where possible, especially due to the level of depth of their analysis and their ability to make risk-based recommendations, even on regulations that are very recent with not much jurisprudence / existing practice that could be relied on. ’
‘Alexandre Balducci and Dessislava Savova are thorough partners on complex topics. They quickly understand the client’s world and challenges.’
Principaux clients
Legrand
Oracle
Honda Motor Europe
MTN
CACEIS
Tencent
Plastic Omnium
Splunk
Permira
Viatris
LzLabs
Hitachi Rail
Fujitsu
Expleo
Principaux dossiers
- Advising Honda Motor Europe (French branch) on all the data protection issues that arise in the context of their day-to-day activities including GDPR compliance.
- Advising Oracle on its several initiatives and actions around the globe against competitor’s data practices and their effects on competition in the online targeted advertising and advertising supported service markets.
CMS Francis Lefebvre
CMS Francis Lefebvre is proficient in handling contentious and non-contentious matters for its roster of clients which includes national and multinational companies, public entities, banks, gaming technology companies, and social media platforms. The team advises on clients’ responses to CNIL investigations and dawn raids, data regulatory compliance, and also has notable strength in data security. Anne-Laure Villedieu is an expert in personal data transfers and privacy impact assessments but also harnesses the firm’s employment team to advise on employee data transfers. Maxime Hanriot and Pierre Fumery are other names to note.
Responsables de la pratique:
Anne-Laure Villedieu
Autres avocats clés:
Maxime Hanriot; Pierre Fumery
Principaux clients
Al Khaliji France
Adevinta
Bank of China
CTS Eventim
SPIE OPERATIONS
SPIE France
Newmont
Ideal promotion
Principaux dossiers
- Advising Al Khaliji with respect to all its data protection issues, and in particular appointed as the external data protection office of the company.
- Deployed a global GDPR compliance program for SPIE Operations affecting all subsidiaries of the SPIE Group located in France and elsewhere.
- Deployed a specific GDPR compliance program for SPIE France and its subsidiaries for their activities in France.
De Gaulle Fleurance & Associés
Noted for its strength in the life-sciences, pharmaceutical, and healthcare sector, De Gaulle Fleurance & Associés advises on digitalisation processes, data security, data transfers and data aspects of M&A transactions, among other matters. The team is led by Cécile Théard-Jallu, who advises clients on the implementation of their digital innovation strategies; Georgie Courtois, who is noted for handling software piracy issues; Jean-Marie Job , who is adept at advising on personal and commercial data issues as well as CNIL disputes; and compliance expert Matthieu Dary.
Responsables de la pratique:
Cécile Théard-Jallu; Georgie Courtois; Jean-Marie Job; Matthieu Dary
Les références
‘Very innovative, very dedicated and excellent lawyers.’
‘Cécile Théard-Jallu is always at the forefront of the legal discussions in her many areas of expertise. She is very hands-on, reliable, business-minded and incredibly committed. A true delight to work with her.’
‘A professional team that listens to market trends. I was very pleasantly surprised to see them on many fronts and exploratory topics (cyber in space for example, AI challenges, health…)’
Principaux clients
Adobe
Alstom
Autodesk
Cegedim
Consortium Tehdas
Epic Games
Europrivacy
Gouvernement de la Guyane
Gouvernement de la Nouvelle Calédonie
Hopscotch
Kinova
Lanvin
Ledger
Legal Place
Meilleursagents.com
Monte-Carlo Société des Bains de Mer
MSF Médecins sans Frontière
Natixis
Orientis Kusmi Tea
Otonohm
Pole Systematic
SuperHot
UEFA
Vicat
Principaux dossiers
Derriennic Associés
The team at Derriennic Associés has a strong presence within the industry and fields a sizeable in this space. The firm frequently undertakes matters of contract management and negotiation, privacy impact assessments, as well as DPO and CNIL matters. Alexandre Fievee advises on data protection as it relates to new technologies, an area where François-Pierre Lani is also prominent. Pierre-Yves Margnoux advises on the data aspects of digital transformation projects.
Responsables de la pratique:
Alexandre Fievée; François-Pierre Lani; Pierre-Yves Margnoux
Les références
‘Very responsive and exhaustive team in their analyses by taking into account the links with other areas of law not necessarily concerned, a priori, by the GDPR files that we submit to them but which allows the company to think carefully about the links beyond the GDPR (labor code, commerce, criminal… etc.) that it had not necessarily taken into account. Excellent quality of the analyses produced.’
‘Alexandre Fievee, great availability, responsiveness. Excellent expertise in the fields of GDPR. He is very educational and exhaustive in his analyses on the GDPR files entrusted by the company.’
‘Team specialized in regulations relating to the protection of personal data.’
Principaux clients
Spie
Energies France
Cerba Healthcare
Hivebrite
City One
Fondation Pierre Fabre
Dalkia
Xiaomi
Pacifica
Talentia Softaware
Generix Group
Eurobio Scientific
Live Colonies
Kenadon
DHL
Generali
Publicis
TotalEnergies
Boiron
CARAC
Egis
Principaux dossiers
FÉRAL
FÉRAL is a strong choice for clients from the financial services, chemicals, healthcare, industrial engineering, pharmaceuticals and life sciences sectors. Under the firm's regular handlings includes data protection compliance audits, data transfer agreements and binding corporate rules, data protection impact assessments, CNIL dawn raid management, data protection training, and drafting IT guidelines, GDPR compliance, and international data transfer contracts. Richard Willemant is regularly sought out to provide immediate assistance to clients in the wake of data breaches. Olivia Luzi is an expert in GDPR compliance and data protection regulations. Christiane Féral-Schuhl and Bruno Gregoire Sainte Marie are also key names in the team.
Responsables de la pratique:
Richard Willemant; Olivia Luzi
Autres avocats clés:
Christiane Féral-Schuhl; Bruno Grégoire Saint-Marie; Agathe Moulin; Morgan Monnet; Elie Touitou
Les références
‘It was a great pleasure to work with Féral! Their strengths: GDPR expertise, I particularly appreciate their follow-ups and the trust they have managed to create within the teams, their technological knowledge.’
‘Olivia Luzi: she is just “great”! All the teams love her. Very important for the background work.’
‘Agathe Moulin and Morgan Monnet: both are very efficient and congratulations for their follow-ups! Elie Touitou: very comfortable, proactive and innovative. ‘
‘Following the merger between the Luzi-avocats firm and Féral, we have of course continued to work with the team led by Olivia Luzi, which has grown considerably. Always the same responsiveness, and the sense of a job well done, in a pragmatic approach. The file is remarkably followed, the needs are anticipated and the quality of service / cost ratio is particularly advantageous.’
Principaux clients
ADVENT INTERNATIONAL L.P
PACIFIC AVENUE CAPITAL PARTNERS LLC
BIOGARAN
EVENTEAM
IHEARTMEDIA INC.
NAAREA
DQE SOFTWARE
EMINEO EDUCATION
OVHCLOUD
Principaux dossiers
- Advised Eventeam live on GDPR compliance with a specific focus on data processing during PARIS 2024 Olympic Games.
- Advised Biogaran on data privacy compliance.
- Advised a private education group in the context of a GDPR compliance review.
K&L Gates LLP
Handling data protection liability issues in M&A transactions, data transfers, and compliance matters, K&L Gates LLP has a strong presence in the industry. Practice head Claude-Étienne Armingaud is a key name for cross-border technology matters.
Responsables de la pratique:
Claude-Étienne Armingaud
Les références
‘K&L’s fantastic team has always been able to assist us with a wide range of legal issues that we have faced.’
‘Claude-Etienne Armingaud, our main point of contact with K&L France has been amazing to work with. He has been extraordinarily adept in finding and custom-tailoring solutions for our unique and challenging needs.’
‘The great strength of the K&L Gates Privacy team is its pan-European and international aspect. On a topic as central as data protection, having a team capable of understanding the subject in a global way is absolutely fundamental.’
Principaux clients
Bellroy
Crédit Mutuel Arkéa
Crypto.com
Cyber Civil Rights Initiative
EMQ
Envision
Ergotron
Impress
International Justice Mission
Kinship
Maytronics Limited
OneStream Networks
SharkNinja
World Organisation for Animal Health
Principaux dossiers
Latham & Watkins
The team at Latham & Watkins regularly handles matters pertaining to cookies and other trackers, international transfers of data, data protection considerations in AI, data protection considerations in the taking of evidence abroad as well as enforcement and litigation matters. Clients include emerging companies, strategic investors as well as multinational corporations. The team is led by Myria Saarinen, who is a key litigator and leverages significant experience.
Responsables de la pratique:
Myria Saarinen
Les références
‘Very professional team, very available, offering great support.’
Principaux clients
a16z
AXA
LVMH
Nissan
Rémy Cointreau
Samsung
Worldline
Principaux dossiers
- Advised Samsung Medison on its agreement to acquire 100% of the shares of Sonio SAS, a foetal ultrasound AI software company.
- Advises AXA France in relation to several AI-related topics including with respect to the implementation of secure AI generative model within AXA France.
- Advised Rémy Cointreau on its APAC data protection compliance program.
Linklaters
Linklaters is well placed to handle the full gamut of data protection and privacy issues including litigation, transactional and regulatory issues. Practice head Sonia Cissé advises on the data aspects of cyber security and fintech, and also has expertise in assisting with commercial contracts, sourcing and complex procurement transactions ,regulation of data and networks, e-commerce, cybersecurity security and telecoms projects and interweaves these aspects into her data advice, GDPR compliance and personal data breach work.
Responsables de la pratique:
Sonia Cissé
Autres avocats clés:
Juila Loiseau
Les références
‘Very communicative team, who take the time to listen to our needs. Responsive. Adapts the tests and advice to our specific requirements.’
‘Sonia Cisse and Juila Loiseau. They are very responsive, take the time to listen to our needs, are accommodating and adapt legal advice and writing to our specific needs.’
‘The team is very collaborative, they take the time to explain the process and the reason for each step. We always understand the logic and legal basis of each approach we choose to take.’
Principaux clients
Stellantis
EQT Active Core Infrastructure (EQT)
John Cockerill
Cummins
Principaux dossiers
- Advised Stellantis in the context of the acquisition of the artificial intelligence framework, machine learning models and intellectual property rights and patents of CloudMade, a developer of smart and innovative big data-driven automotive solutions.
- Advised EQT Active Core Infrastructure (“EQT”) on entering exclusive negotiations with ICG Infrastructure Equity I (“ICG Infra”) to acquire Ocea Group (“Ocea”), a leading French water and heat sub-metering infrastructure provider.
- Advises John Cockerill, a significant supplier of tank turrets for light armoured vehicles, firing systems, and simulation, in the context of exclusive negotiations with Volvo Group for the acquisition of Arquus, the principal French supplier of military vehicles.
McDermott Will & Emery AARPI
McDermott Will & Emery AARPI has a particular strength in the life sciences and biotechnology sectors as well as insurance, e-commerce, digital advertising and luxury goods and advises market leaders in these sectors. The firm regularly assists on matters pertaining to the full gamut of EU data regulation, international intragroup data transfer agreements, GDPR and cyber security compliance, CNIL investigations and strategic data contract negotiations. Romain Perray has significant experience in Data Act compliance. Lorraine Maisnier-Boché leverages her expertise in health, complex IT projects and life sciences. Hélène Adda is also a name to note on the team and handles data protection audits, regarding in particular the review and risk assessment of user experience on websites and mobile applications.
Responsables de la pratique:
Romain Perray
Autres avocats clés:
Lorraine Maisnier Boché; Hélène Adda
Les références
‘The team is innovative in the use of technologies and the mode of collaboration.’
‘We work mainly with Romain Perray and Lorraine Maisnier Boché. They are very precise in their interventions, responsive and operational. The working relationship is very pleasant.’
‘Great expertise and quality of service The team is in the top 10. It stands out for its very strong commitment to its customers and tailor-made assistance.’
‘Romain Perray and Lorraine Maisnier Boché Both have in-depth expertise in data protection law. Lorraine also has expertise in health law applied to personal data. The team is 100% dedicated to data protection law. This is what allows them to have a very fine approach to the subjects entrusted to them.’
‘Long-standing collaboration with Romain Perray for personal data subjects, his expertise is very specific and he is sensitive to the business issues of companies.’
‘We have worked with Romain Perray on several occasions. He produces particularly detailed and well-reasoned opinions and documents, the result of significant research work. Romain always keeps his client’s objective in mind.’
‘Very good, professional and deep analysis and practical recommendations.’
‘Romain has the capacity to understand his client’s needs and create a unique and trusted work environment.’
Principaux clients
Nissan Motor Co & Nissan International
Europcar Mobility Group
Vinted
DISMA International (Azura)
Elis
Sorbonne Abu Dhabi University
Simago
Principaux dossiers
- Advise Nissan Motor Co. on global GDPR compliance program (data mapping, DPAs, DSSA, GDPR clauses, cookies and privacy policies) with regard to a digital marketing project.
- Advised Vinted, providing ongoing assistance regarding several matters, including implementing a legal monitoring tool from which Vinted’s legal team will have access to scalable and customizable updates per country and per selected topic as well as to a risk analysis.
- Advising Simago, a company that operates a large network of radiology centers in France in providing daily assistance on several matters related to personal data protection and cybersecurity matters.
Osborne Clarke
The team at Osborne Clarke is sought after by clients from sectors including life sciences, healthcare, gaming, shipping and logistics, insurance, energy, sport, travel, IT, energy, technology, media and communications. The team regularly advises on cyber attacks, data breaches, outsourcing and privacy policies. Claire Bouchenard is an expert in advertising as it relates to personal data, commercial and digital regulation and Xavier Pican leverages his previous expertise working in-house to advise clients on drafting and negotiating for complex technology and data projects. Laurène Zaggia is also a key name in the team and has strengths with regards to personal data issues and GDPR. The practice was further bolstered by the arrival of Antoine Sullice in November 2024 from Herbert Smith Freehills LLP.
Responsables de la pratique:
Claire Bouchenard; Xavier Pican
Autres avocats clés:
Laurène Zaggia; Antoine Sullice
Les références
‘Xavier Pican is noted for his ability to adapt to the profession, his listening skills, his sound advice, his technical expertise allowing him to deal with the subjects submitted in a qualitative manner and within deadlines. Regulatory monitoring is particularly careful and adapted in communication to the client’s profession.’
‘Their serenity in crisis situations is precious. Their experience (ability to put customer support in parallel) allows us to build the best path for implementing new systems or dealing with the problems encountered.’
Principaux dossiers
White & Case LLP
White & Case LLP's team is a preferred choice for clients from the financial services, media and advertisement, transportation, and luxury brands industries, among others. The team is led by Bertrand Liard, who has strength in advising on cross-border disputes, compliance issues and transactions as well as regulatory issues, and the ‘excellent’ Clara Hainsdorf, who is noted for her ability to advise on GDPR and CNIL matters.
Responsables de la pratique:
Bertrand Liard; Clara Hainsdorf;
Les références
‘Clara Hainsdorf has a very comprehensive approach to the sector. Always pragmatic advice. The team has a sense of service and meets its deadlines.’
‘Clara Hainsdorf – highly skilled data partner. Excellent business sense and pragmatic approach to cases. Very good knowledge of the data/tech market.’
Principaux dossiers
ADVANT Altana
ADVANT Altana advises on CNIL matters, GDPR compliance, data processing audits and personal data management protocols. The team is led by litigator Pierre Lubet, Laura Morelli and Jean-Guy de Ruffray. Morelli is a popular choice for clients in the healthcare, engineering, technology and IT, food, luxury, fashion, consumer goods and real estate sectors, and De Ruffray leverages his prior experience at major international law firms. Camille Raclet is also a name to note and advises on audits, implementation of compliance plans, the management of security breaches, as well as drafting and the review of regulatory documentation.
Responsables de la pratique:
Pierre Lubet; Laura Morelli; Jean-Guy De Ruffray
Autres avocats clés:
Camille Raclet
Les références
‘Very experienced and high-quality. Able to deliver work to international standards.’
‘Jean-Guy de Ruffray – experienced, excellent all round and broad knowledge.’
‘Camille Raclet – excellent young partner.’
‘Very responsive team, attentive to issues, capable of working in complex situations and on sophisticated subjects.’
Principaux clients
CEGID
BOUYGUES IMMOBILIER
NOTO / UNNIDATA
TUTELAIRE
AG2R
NRJ Group
Principaux dossiers
- Provide day-to-day advice to Bouygues Immoblier regarding IT contracts and Data protection.
- Advised Cegid, the European leader in cloud management solutions, on the acquisition of KMB Labs, a French HR Tech start-up and on on the due diligence and on the drafting of data protection documents for the acquisition.
Alain Bensoussan-Avocats Lexing
Alain Bensoussan-Avocats Lexing's portfolio of work strikes a good balance between regulatory compliance work, data litigation matters, and DPO policies with a particular focus on emerging technologies. Key names include Alain Bensoussan, who is a data and emerging law expert, digital litigation lead Virginie Bensoussan-Brulé, Chloé Torres, compliance and certification expert Anne Renard, and Céline Avignon.
Responsables de la pratique:
Alain Bensoussan; Virginie Bensoussan-Brule; Chloé Torres; Anne Renard; Céline Avignon
Les références
‘Strengths: Proximity, availability and process in reviews. The team has standardized procedures, processes that it can share. This is a plus for a DPO, especially when faced with the implementation or review of a compliance program. The approach is practical and does not boil down to offering 10-page theoretical consultations.’
‘Chloé Torres: very extensive knowledge of regulations and practice, bringing very enriching value for a DPO.’
‘Particularly innovative and attentive firm. The firm is able to bring together legal skills, of course, but also technical skills (IS security for example).’
Principaux clients
Tour Eiffel
Château de Versailles
Musée du Louvre
Région Ile-de-France
Département des Hauts-de-Seine
Fédération Française des Banques Alimentaires
Fondation Abbé Pierre
Lagardère Media News
Orpéa
Synlab
Principaux dossiers
Algo Avocats
The team at Algo Avocats acts for clients across a plethora of industries including software, retail and manufacturing. The team is co-headed by Sandra Tubert and Laura Ziegler who collectively handle GDPR compliance matters, CNIL notice procedures, data protection impact assessments, data protection compliance audits as well as international data transfers, personal data breaches and the implementation of web-marketing projects.
Responsables de la pratique:
Sandra Tubert; Laura Ziergler
Les références
‘The team is very responsive and what sets it apart from other competing teams is its very pragmatic sense when writing notes. This mode of collaboration is essential for groups that must combine business and compliance imperatives.’
‘Innovative in the educational aspect while remaining very precise in substance. Very technical team with in-depth knowledge. Also very good monitoring of current issues and great availability for its customers!’
‘Sandra Tubert is an excellent practitioner who has very good interpersonal skills and is very adaptable and available to her clients. She is a highly skilled attorney specialized in data protection with has helped us many times. She is very experienced in privacy law and in the digital landscape.
‘Sandra has advised with a wide range of issues, related with data protection regulations, She has a depth of understanding of the legal implications of digital marketing and social media and the regulation of influencers.’
‘What sets this team apart is its exceptional expertise, collaborative spirit and deep understanding of privacy and data protection law. Sandra Tubert stands out for her commitment to providing concrete and actionable solutions, while taking a proactive and practical approach to meeting client needs. Her and her team’s ability to anticipate potential challenges before they even arise puts them a cut above the competition. When it comes to quality of service, the team demonstrates responsiveness and fluid communication, which is particularly appreciated during complex or emergency situations, such as data breaches. Compared to other teams in the market, their ability to combine legal expertise and business acumen places them among the best. Their client-centric approach, combined with their spirit of innovation and constant focus on efficiency, makes this team a partner of choice in a competitive legal environment.’
‘Within the team, Sandra Tubert particularly stands out for her in-depth expertise in data protection and privacy law. She combines legal rigor with an ability to find pragmatic solutions tailored to clients’ specific needs. What sets her apart from her colleagues is her collaborative approach and her ability to simplify complex subjects while maintaining a high level of precision. Sandra also stands out for her responsiveness and her ability to anticipate legal issues before they become problems for clients. Her listening skills and commitment to delivering concrete results make her a trusted lawyer, particularly appreciated by clients for her ability to deliver practical advice within tight deadlines.’
‘Leading team in data protection. Very pragmatic approach to cases, strong involvement, including with operational teams.’
‘I deal mainly with Sandra Tubert, a partner in the firm. Sandra is a trustworthy person, very knowledgeable in her field and particularly involved in the subjects; very available and leaving nothing to chance in her analysis, which is always of very good quality and perfectly adapted to our activities.’
Principaux clients
Deepomatic
WeChooz
Widoowin
Continuity
Escape
Principaux dossiers
Bersay
At Bersay, Bradley Joslove, who is able to draw on previous experience of practising in the US, and Frédéric Lecomte are the key names. The group is adept at handling cross-border GDPR compliance issues, including the transfer of data, the implementation of GDPR tools and crisis management for clients from a cross-section of industries.
Responsables de la pratique:
Bradley Joslove; Fréderic Lecomte
Autres avocats clés:
Léa Paravano
Les références
‘Very good team, with very good knowledge of GDPR and its implications in the health sector. The team is innovative and has demonstrated its ability to quickly grasp new topics.’
‘Frédéric Leconte and Léa Paravano are both very competent in their fields.’
‘The team is very competent and responsive. The answers to the questions asked are relevant, well explained and pragmatic, taking into account the client’s interest.’
‘Frédéric Lecomte and Léa Paravano are highly qualified in personal data matters and have concrete and highly appreciable expertise in IT contracts, particularly in the Fintech and MedTech sectors. Their approach is always pragmatic and looking for an advantageous solution for the client.’
‘Brad and Lea were both very knowledgeable and the type of lawyers you would like doing business with. ’
‘A commercially-focused team which is able to provide pragmatic advice.’
‘Lea Paravano and Bradley Joslove provided pragmatic and commercial advice.’
Principaux dossiers
- Advised a French real estate developer on the implementation of a comprehensive GDPR remediation program and continue to advise this company on its GDPR compliance on a day-to-day basis.
- Advised the French subsidiary of an Italian provider of SaaS and cybersecurity services for B2B clients in drafting its health data hosting agreement to help it to obtain the health data hosting provider certification.
- Advising a producer of remote monitoring medical devices in drafting and negotiating a data processing agreement with a new player on the French market offering a remote monitoring platform regarding a partnership with healthcare institutions.
Delsol Avocats
Delsol Avocats’ team has a particular niche advising on data protection as it relates to life sciences and health information systems but also regularly advises on GDPR compliance, CNIL dawn raids, compliance audits, DPO matters and data protection policies, among other matters. The team is led by Jeanne Bossi Malafosse, who also heads the firm’s life sciences department and advises on the protection issues and regulatory requirements of health data sharing.
Responsables de la pratique:
Jeanne Bossi Malafosse
Autres avocats clés:
Aura Braun
Les références
‘ Highly specialized expertise in the field of digital health and the protection of personal data.’
Principaux clients
ASTRAZENECA, DOCAPOSTE, TAKEDA AND IMPACT HEALTHCARE
BIOPTIMUS
CNOP (CONSEIL NATIONAL DE L’ORDRE DES PHARMACIENS)
FNSAFER
OWKIN
RHISA
SOLIHA
URBASOLAR
Principaux dossiers
- Advising FNSAFER on compliance with data protection regulations.
- Advising Urbasolar on compliance with data protection regulations.
- Advising Bioptimus on compliance with data protection and artificial intelligence regulations.
Franklin
The team at Franklin advises on the drafting and negotiating of complex commercial and IT contracts, the management of cyber-attacks and cyber-security incidents, GDPR compliance, and contentious matters including CNIL issues. The firm is a popular choice for French and international corporates with a strong multijurisdictional element with services expanding to the Middle East, US, South and East Asia and Africa. Merav Griguer is noted for handling data disputes before regulatory bodies.
Responsables de la pratique:
Merav Griguer
Autres avocats clés:
Salomé Silliaume; Wissem Addoun
Les références
‘Wissem Addoun: Extremely responsive, relevant.’
‘Responsiveness, tailor-made customer relations.’
‘I particularly appreciate Merav Griguer who knows how to listen to needs by taking into account customer constraints and always being up to date and relevant in her analyses.’
Principaux clients
Orange
Fnac Darty
LVMH
Kuehne+Nagel
Paris Saint-Germain Football Club (PSG)
Concentrix
Servier
L’Oréal
Stellantis Finance & Services
Pluxee (Sodexo Group)
Deezer
Liebherr
Zanalys
Groupe Premium
New England Biolabs (NEB)
Deepki
Principaux dossiers
- Advice to ORANGE to ensure compliance of its data flows to countries outside the European Union.
- Advise FNAC DARTY on its use of technologies (including AI) and databases
- Advised on a defense of a hyper-growth startup in a sanction proceeding initiated by The Defender of Rights (Défenseur des Droits), following a CNIL inspection, for using algorithms and AI solutions.
Momentum Avocats
Momentum Avocats is sought after by major French and global clients to handle data access requests, data issues as they pertain to AI, data transfers and data protection impact assessments. Julie Carel Julien Canlorbe Jean-Sébastien Mariez are the key names.
Responsables de la pratique:
Julie Carel; Julien Canlorbe; Jean-Sébastien Mariez
Autres avocats clés:
Laura Godfrin
Les références
‘Good knowledge of developments in the tech and industry sector, anticipating future needs.’
‘Innovative team, attentive to the needs of its customers and very aware of developments in the digital industry. They know how to assist their customers with quality advice and exceptional responsiveness. Their knowledge of the sector also allows them to anticipate potential regulatory risks concerning their customers’ business.’
‘The team is very responsive when requested. But it is also proactive in monitoring our issues and positions itself in a preventive role allowing it to always be ready to act, it is precious.’
Principaux dossiers
Norton Rose Fulbright
Norton Rose Fulbright regularly advises on the collection, use, storage, disclosure, transfer and destruction of business data as well as data privacy issues as they relate to IT transactions. Nadège Martin handles GDPR compliance, cross-border data issues, and is particularly skilled in advising clients in the life sciences sector and on internal investigations. Geoffroy Coulouvrat handles major cyber incidents and has a particular specialism in advising pharmaceutical companies on data protection and public health regulations applicable to medical studies.
Responsables de la pratique:
Nadège Martin
Autres avocats clés:
Geoffroy Coulouvrat
Principaux clients
Pfizer
Groupe Beaumanoir
Crédit Agricole
Schneider Electric
Barclays
Principaux dossiers
- Assisting various clients in the management of data breaches resulting from the cyberattack suffered by their global provider of relocation services to their employees.
- Advising on various employee’s access right requests in the sensitive context of the termination of the employment and/or of internal investigations and in the drafting of settlement agreements with our employment team.
- Assisting a leading French pharmaceutical company in respect of an early access authorization related to gene therapies in France, which are seen as the next generation of medical therapies and advise on related data protection issues.
Simmons & Simmons
Simmons & Simmons frequently combines with the firm’s European offices to provide cross-border advice on data regulatory compliance. The group also assists with data breaches, interceptions of communications and data access requests. Sarah Bailey is a key name for matters relating to health and financial data; Emilie Danglades-Perez provides additional support. Former co-head Eric Le Quellenec left the firm in March 2025.
Responsables de la pratique:
Sarah Bailey
Autres avocats clés:
Emilie Danglades Perez
Les références
‘ Simmons are able to navigate this area of law commercially and efficiently.’
‘Sarah Bailey is great to work with. Her advice is pragmatic and commercial.’
‘The level of the team is exceptional: – quality of listening – quality of understanding – drive of the file – quality of analysis – quality of defense.’
Principaux dossiers
Taylor Wessing
The team at Taylor Wessing regularly advises on GDPR compliance programmes, data protection audits and impact assessment including employee system, set-up and support for data protection governance schemes, as well as CNIL investigations and international data sharing contracts. Marc Schuler handles the full gamut of regulatory, advisory, and transactional issues. Benjamin Znaty is a key port of call for IT software and hardware providers, financial and payment technology providers, e-commerce platforms and digital media industries.
Responsables de la pratique:
Marc Schuler
Autres avocats clés:
Benjamin Znaty
Principaux clients
Oppo Telecom
Tekion
Laduree
Amazon
Sediver
Covivio
Comcast
Cimpress
Airship
Hiscox
Zurich Insurance
Allianz
Altus Group
Live Nation
Inogen
Pixarprinting – Cimpress
Orion
Ricoh
Principaux dossiers
- Assisting Amazon in general data protection matters for almost all its business units.
- Assisting Hiscox in relation to its Cyber cover and corresponding claims and internal GDPR compliance program.
UGGC Avocats
UGGC Avocats is notably active in handling an impressive mix of contentious and non-contentious matters. Its workload includes advising on the management of data breaches, the implementation of data compliance programmes, the management of personal data and representation in disputes relating to the deindexation of e-data. Corinna Khayat is the key name.
Responsables de la pratique:
Corinne Khayat
Autres avocats clés:
Elisabeth Logeais; Anne-Marie Pecoraro
Les références
‘Very good knowledge of legal aspects and nuances; efficiency, courtesy’
‘The team schedules data protection workshops tailored to the understanding of our data processing officers. It has responded with precise and concise communication to questions about the constraints of the regulation (GDPR) in force within our company. It does not hesitate to schedule videoconferences when the need arises.
‘Skilled in defending data rights in all countries of the world, and the best.’
‘Anne Marie Pecoraro is my go-to lawyer for all matters of personal data law, she is an authority on the market with her top-notch expertise. She far surpasses other specialist lawyers with her expertise, experience and humanism.’
Principaux clients
Dedigroup
Bodyhit
Solinest
Crédit Agricole Immobilier
Institut Pasteur
AAA DATA
Self Media
RTA (Régie Régionale des Transports de l’Aisne)
Giacometti
WeWork Paris III Tenant SAS
Régie Régionale de Transports du Pas de Calais du Pas de Calais
KEYPROD SAS
We Connect
TORNIKA Affimobiz
DPO CSE https://www.dpo-cse.com/
Elyx
Principaux dossiers
Bignon Lebray
Responsables de la pratique:
Nicolas Moreau
Autres avocats clés:
Elise Dufour; Benjamin Dufour
Les références
‘Quality expertise, availability and support which allowed us to achieve compliance quickly and without difficulty.’
Principaux clients
YPOSKESI
CELLTRION
CARESYTNAX
ACCOR INVEST
GOYARD
SANTE VET
Principaux dossiers
- Management on a monthly basis of the compliance of a global hotel real estate investor and owner, with GDPR worldwide.
- Assisting a leading international healthcare company as an external DPO with all issues relating to GDPR, with a focus on health data management and patient consent with respect to medical studies.
- Conducing cross-border advice to a leading company specializing in customer loyalty and engagement solutions, regarding GDPR compliance in Europe + implementation of their Solution in the USA to BENEFIT / BEAUTY TECH .
Clyde & Co LLP
Responsables de la pratique:
David Méheut; Pierre Affagard
Les références
‘The team stood out for its in-depth expertise and its ability to adapt to the challenges of our cases.’
‘Thanks to his great responsiveness, Pierre was able to adapt quickly to changes in our situation and provided us with relevant solutions in real time.’
‘Very high responsiveness, adaptability of the systems implemented in response to our requests and efficiency in processing the files entrusted – Very strong expertise in data protection.’
Principaux clients
AIG
Air France
CHUBB
Europe Ecologie Les Verts (French political party)
Transavia
Zurich
Principaux dossiers
- Acted as monitoring and coverage counsel in AIG’s largest cyber case involving ransomware.
- Conducted a major study with French political parties to quantify racial and social diversity ensuring that sensitive data was collected and processed in strict compliance with French legislation and the GDPR.
- Assisted a CAC 40 company during the CNIL’s investigation aimed at verifying the company’s compliance with the European and French data protection laws and regulations
Ernst & Young Société d'Avocats
Responsables de la pratique:
Fabrice Naftalski; Yaël Cohen-Hadria; Sandrine Cullaffroz-Jover
Les références
‘The team is always available and has good deadline management. The strengths of EY Société d’Avocats are knowing how to work with other EY consulting professions (multidisciplinary approach). The team is very diverse.’
‘Fabrice Naftalski listens to the needs and constraints of his clients’
‘ Professional and accessible. The team has a perfect command of its clients’ needs, both in terms of advice and litigation.’
Principaux dossiers
Freshfields Bruckhaus Deringer LLP
Responsables de la pratique:
Jérôme Philippe
Les références
‘Jérôme Philippe is a fine lawyer, with an acute knowledge of the law and a commercial approach to the issues.’
‘Multi-disciplinary team at the crossroads of personal data protection law and competition law, which gives them an advantage on subjects involving major digital players.’
Principaux clients
Marriott International Inc.
Meta
Principaux dossiers
- Advising several major investment funds and private equity companies on the data protection, IT and/or cybersecurity aspects on their deals of their intended acquisitions in France.
- Advising HSBC Continental Europe (HBCE) on the data protection aspects of the sale of its French retail banking business to Cerberus.
Klein Wenner
Responsables de la pratique:
Laurent Badiane; Matthieu Bourgeois
Principaux clients
Stellantis Financial Services
Hitachi Solutions
Eranove
Cewe
Unéo
Lucky Cart
Totum Pharmaciens
Heva
Bedrock
Principaux dossiers
- Advised Stellantis Financial Services on negotiation of strategic and complex IT contracts (including Data Processing Agreement) with suppliers of software solutions recognised in the market, taking particular care to secure its intellectual property rights, the protection of personal data and the continuity of its activities in any event.
- Advising UNEO on the development of an online community platform providing access to several promotional offers in various fields (clothes, food, gardening, travels, etc.).
- Advising HITACHI SOLUTIONS on negotiating an important agreement with a customer (several million euros) notably implying issues relating to personal data and intellectual property and on a day-to-day basis regarding commercial and personal data matters.
NEXT AVOCATS
Responsables de la pratique:
Stéphanie Foulgoc; Étienne Papin
Les références
‘Strengths and assets: proximity to its customers, in-depth knowledge of our services in order to adapt advice, responsiveness.’
‘Etienne Papin: Availability, Real desire to defend the interests of our company.’
Principaux clients
Fondation de France
Sage
Groupe UP
OPCO 2i
Media Transports (Publicis Group)
Principaux dossiers
Pinsent Masons LLP
Responsables de la pratique:
Annabelle Richard
Autres avocats clés:
Anne-Sophie Mouren
Les références
‘As this is a team that is competent not only on data-related topics but more generally on tech and innovation topics, we appreciated their global vision of the issues we submitted to them. We also greatly appreciated that the nature of our activities was always at the center of their analysis. Thus, we could always be assured of having tailor-made advice and not a formula repeated to all clients indifferently. Haute couture rather than ready-to-wear, that is the trademark of this team.’
‘On these topics, we mainly worked with the tandem Annabelle Richard and Anne-Sophie Mouren. This is a very effective and very complementary duo on these topics. Where Annabelle Richard will roll out a strategy and a global analysis of a project, Anne-Sophie Mouren will bring her attention to detail and her rigor in the implementation of the strategy.’
‘Excellent lawyers with an international perspective, where they benefit from their offices in many jurisdictions especially the London office, thus they are a gateway to Europe.. Able to combine there market knowledge with legal advice. ’
Principaux dossiers
PwC Société d'Avocats
Responsables de la pratique:
Valérie Aumage
Les références
‘It is a very professional team with significant technical expertise in its field of activity.’
‘Valérie Aumage is a very technical, professional and rigorous partner in her approach.’
‘Mastery of the subject and proximity to companies. In-depth but also pragmatic advice in line with the reality of companies.’
Principaux clients
KKR
PPG (Pinnacle Pet Group)
Vade
Bouygues Telecom
Montefiore Investment
Group Nexity
SK Capital Partners
Dyneff
Blackstone
Key Performance Consulting
Itonics
Cooper Consumer Health
Principaux dossiers
- Carried out vendor due diligence work for Vade, a French tech unicorn. The IT & Data Privacy team carried out a risk assessment and presentation to investors on IT and data privacy matters
- Carried out due diligence work for Bouygues Telecom for the acquisition of La Poste Mobile.
- Advised on several due diligence matters for Montefiore Investment.