Next Generation Partners

Firms To Watch: Data privacy and data protection

Idea's team has experience of handling CNIL litigation, among other matters. Nathalie Metallinos and Julie Ruelle are the key names.
Kalder was launched by Farid Bouguettaya and handles data protection, data breaches and international data transfers, among other work.

Data privacy and data protection in France

August Debouzy

Lauded by one client as being the ‘number 1’ data privacy, cyber and AI experts in France, the team at August Debouzy has an undeniable force within the industry and is a regular advisor to a litany of outstanding clients including global social media platforms, applications, governments, luxury brands and leading gaming companies. The firm regularly advises on data breaches as data controllers and its subsequent regulatory notification requirements, as well as compliance, GDPR issues, Florence Chafiol leads the team and is a GDPR expert and is assisted by Roxane Blanc-Dubois, who is a life sciences and health regulation expert and Stéphanie Lapeyre, who has particular strength advising on matters pertaining to new technologies and associated data issues.

Responsables de la pratique:

Florence Chafiol


Autres avocats clés:

Roxane Blanc-Dubois, Stéphanie Lapeyre


Les références

‘The team is dynamic, responsive and we are satisfied with the quality of the advice provided.’

‘I was particularly in contact with Roxane Blanc-Dubois, who demonstrated total commitment to the files we entrusted to her. Roxane is very involved, responsive, expert in her advice but also knew how to adapt to the size of our company and our operational constraints. She demonstrated pedagogy with the teams and also mobilized the right resources internally at August Debouzy to provide us with comprehensive advice.’

‘Team strengths: direct and effective contact on all our GDPR issues, clear and timely advice, support as close as possible to our internal client with participation in all necessary calls with our internal contacts to fully understand our challenges.’

‘No 1 data privacy cyber and AI experts in France.

From their total technical knowledge to their real world experience – from all angles; for small SMEs to large US HQ’d corporates; from prosecuting or defending litigation and working with regulators – August Debouzy know it all. ’

‘Florence Chafiol – market leader in the data privacy cyber and AI world in France. Knowledgeable, practical and hard working; and combines this with a laser focus on achieving commercial outcomes. No better private practice lawyer in France.’

Principaux clients

DBV Technologies


Brambles


EBA Clearing


Givaudan


SAUR


Alstom


Vinci


La Mondiale EuroPartner


PRINCIPALITY OF MONACO


PAYFIT


MICROSOFT


TOTALENERGIES & TOTALENERGIES ELECTRICITE ET GAZ FRANCE


VEOLIA ENVIRONNEMENT


PERNOD RICARD


DELIVEROO


JCDECAUX


DANONE


EDF SA


SALSIFY


OMNICOM PUBLIC RELATIONS GROUP FRANCE


L’OREAL


Neuflize OBC/ ABN Amro


SNCF


RATP


Principaux dossiers


  • Assisting Microsoft with transactional, advisory and  litigation matters for all aspects of Microsoft’s activities in France.
  • Assistance provided to Veolia Environment involved reviewing of all contractual templates related to personal data processing, drafting a detailed intra-group contract aimed at framing all data exchanges between Veolia companies around the world, both taking into account the GDPR but also local legislation (UK, Switzerland, China, etc.) and supporting the DPO with with various subjects relating to data protection.
  • Assists Deliveroo’s privacy teams on several issues regarding personal data protection, particularly in formulating response strategies for data subject access requests, reviewing the cookie banner on the website, and ensuring that marketing campaigns and communications are GDPR compliant.

Baker McKenzie

Baker McKenzie is a well respected team in the field and acts for an exclusive list of clients which includes major banks, software conglomerates, and fashion houses. As part of its work, the firm advises clients on CNIL investigations, cyber crime, and data privacy litigation. Magalie Dansac Le Clerc has an outstanding wealth of experience and advises clients on GDPR compliance and related issues, including data transfer issues, processing of sensitive data, data breaches, information and consent, direct marketing, data privacy impact assessment, data subject access requests and data processing agreements. Rémy Bricard and Laurent Szuskin are other names to note.

Responsables de la pratique:

Magalie Dansac Le Clerc


Autres avocats clés:

Rémy Bricard; Laurent Szuskin


Les références

‘Close-knit team, very pleasant, available and responsive.’

‘Magalie Dansac Le Clerc is warm, serious, open to discussion, a high-quality expert in her field.’

Principaux clients

Covage


Evernex


IES Synergy


Roquette


Sodexo


Crédit Agricole Group


Egis


Oracle


Embracer


Principaux dossiers


Bird & Bird

The team at Bird & Bird regularly handles regulatory compliance, GDPR issues, data transfers, personal data issues, ransomware attacks and data governance both in France and across other European states. Clients include large consultancy firms, sports organisations, banks and major players in the health and life sciences sectors. Digital compliance expert Ariane Mole heads the practice and has expertise in dawn raids, data-related litigation, cyber security and e-health. Willy Mikalef leverages his experience to advise on data protection and cybersecurity requirements among other matters. Oriane Zubcevic is noted for handling GDPR compliance audits and Julie Verdure provides additional support.

Responsables de la pratique:

Ariane Mole; Willy Mikalef


Autres avocats clés:

Willy Mikalef; Oriane Zubcevic; Julie Verdure


Principaux clients

HubOne


Doctolib


LEEM


IQVIA


DPD Group – Geopost


Shoebox


VALIUZ


Principaux dossiers


  • Assisting HubOne in the context of the first data intermediary service within the meaning of the recently enacted EU Data Governance Act (DGA).

DLA Piper

DLA Piper's clients include life sciences and pharmaceutical companies, banks, and data science companies. The team is adept at advising on compliance with data protection laws, particularly with regards to healthcare professionals, data processing, internet web sites, marketing campaigns and events, negotiation of data processing agreements, the data implications of AI, GDPR compliance and cross-border data transfers. Denise Lebeau-Marianna advises on cybersecurity programme incident response plans, e-discovery procedures and blocking statutes, data protection aspects of internal investigations and projects involving AI. Yaël Hirsch has significant expertise in CNIL contentious work.

Responsables de la pratique:

Denise Lebeau-Marianna


Autres avocats clés:

Yaël Hirsch


Les références

‘Responsive, competent, available, pleasant, reliable, with the concern to respond appropriately to the issues raised.’

Principaux clients

Pierre Fabre Group


Société Générale


L’Oréal


Airbus


Principaux dossiers


Gibson Dunn

The team at Gibson Dunn is jointly led by Ahmed Baladi, who handles matters concerning GDPR compliance alongside data breach and national security matters including handling investigations, enforcement defence and crisis management, and Vera Lukic, who in addition to advising on IT and data privacy aspects in connection with major M&A deals, including carve-out and transition issues is also noted for her expertise in strategic digital related-projects including NFTs, AI, and Metaverse projects Clémence Pugnet, who is noted for her ability to draft privacy and cookie policies, provides additional support.

Responsables de la pratique:

Ahmed Baladi; Vera Lukic


Autres avocats clés:

Clémence Pugnet


Les références

‘Gibson Dunn has been a wonderful firm that we have engaged over the past few years in some high risk areas. They are very decisive, confident, and collaborative in their approach to risk mitigation. They are also well informed when it comes to the inner workings of their local regulators.’

‘What we specifically appreciate is how they structure their initial positioning on risk areas, but are collaborative when it comes to accepting our feedback and integrating our positions into work product. By all accounts they are also extremely effective communicators whether in written responses or hearings.’

‘Ahmed Baladi and Vera Lukic are both exceptional partners at Gibson Dunn. We have worked with both of them equally and they work really well together, and with us as well.

Principaux clients

Louis Vuitton


Meta


Platinum Equity Advisors


Renault


Suez


TAG Heuer


Thales


Unibail Rodamco Westfield


Western Digital


Yahoo


Principaux dossiers


Gide Loyrette Nouel A.A.R.P.I.

Gide Loyrette Nouel A.A.R.P.I. handles data audits, data protection impact assessments, GDPR compliance and data surveys. The team is headed by Thierry Dor who in addition to handling personal data processing matters, also leads on global data transfers and GDPR compliance as well as contentious matters with the CNIL and in matters relating to cybersecurity. Aurélie Pacaud and Julien Guinot-Deléry provide support in matters of AI and data transfers outside of the EU.

Responsables de la pratique:

Thierry Dor


Autres avocats clés:

Aurélie Pacaud; Julien Guinot Deléry


Les références

This is a very competent team, at the forefront of legal news, which is essential in this area. Able to give real, informed advice. They are not afraid to take a stand to guide their client towards the most suitable and personalized solution.’

‘High level of expertise in data protection.’

‘The team is particularly responsive, responding within 1 or 2 days. It adapts to the tools we use.’

‘Julien Guinot Deléry and Aurélie Pacaud for their ability to get straight to the point, not beat around the bush. They gave us extremely relevant feedback and were available within very tight deadlines when we had urgent situations.’

Principaux clients

Cure 51


OL (Olympique Lyonnais) Group


Orange Business


Société Générale


Suez


Reputation Squad


France Televisions


LVMH


Casino


Crédit Agricole


Drouot


Principaux dossiers


Herbert Smith Freehills LLP

The ‘very sharp’ team at Herbert Smith Freehills LLP is equally adept at handling contentious and advisory matters for its clients. The firm regularly represents its clients on GDPR compliance, CNIL issues, and large-scale digitalisation projects. Noted by clients for being an ‘outstanding lawyer’ the team is led by Alexandra Neri, who in addition to being a cyber crime expert is noted for her ability to handle data privacy issues and dawn raids, as well as data transfer conflicts. Sébastien Proust is also a key name at the firm; his recent work includes advising on the digitalisation of books and the “right to be forgotten”, and the legal status of video platforms as well as personal data rights.

Responsables de la pratique:

Alexandra Neri


Autres avocats clés:

Sébastien Proust


Les références

‘Responsiveness and expertise.’

‘Alexandra Néri is an expert in the field of IP and personal data protection.’

‘Creativity, ingenuity, rigor.’

Principaux clients

Google


Expedia Group/ Homeaway


Principaux dossiers


  • Assisting Google in several ongoing disputes in respect of the listing of personal data in Google search results.
  • Assisting several subsidiaries of the Expedia group (HomeAway, EG Rentals) in relation to a litigation against the Paris town hall council regarding Expedia’s refusal to communicate user data for the purpose of penal inquiries.
  • Representing Tripadvisor in a dispute brought by the Paris City Hall (“Ville de Paris”) before the Paris High Court.

Hogan Lovells (Paris) LLP

The team at Hogan Lovells (Paris) LLP is lauded by clients for being ‘one of the most expert teams in the market’ and acts for a strong roster of clients including international mass media companies and search engines. Etienne Drouard advises private and public entities operating IT and telecoms infrastructures, as well as clients involved with online services, digital media, e-commerce, mobility, and transport services, financial, insurance and payment services. Julie Schwartz has significant expertise with regards to data breach responses, negotiating data processing agreements, and assisting clients during CNIL dawn-raids as well as GDPR compliance, drafting internal policies and privacy impact assessments.

Responsables de la pratique:

Etienne Drouard


Autres avocats clés:

Julie Schwartz


Les références

‘I am used to working with Julie Schwartz (personal data counsel). The team thus constituted allows to have a complete and coherent approach to data issues in the field of health. Their combined expertise allows to have a sharp and avant-garde expertise of the constantly evolving pharmaceutical sector.’

‘Julie Schwartz is my preferred point of contact for any high value-added questions I face in the context of my business. Her  responsiveness and pragmatic approach to topics allows my company to benefit from precise and tailor-made assistance while being a facilitator for the implementation of innovative projects and the understanding of risks.’

‘A team of experts on Privacy topics, available, probably the most expert team on the French market.’

Principaux clients

Aéroports de Lyon


Vertex Pharmaceuticals


Owkin


SCOR


General Electric


GrandVision


Principaux dossiers


  • Advised Aéroports de Lyon on the implementation of a facial recognition project.
  • Advised Vertex on a drug treatment (CAR T) against sickle cell disease for all European Countries as well as other numerous ex-EU countries and are acting as key point of contact for clients and all legal counsels involved in the project.
  • Advised Owkin, a ground-breaking medical AI Biotech company, as the external Data Protection Officer (DPO) and a constant advisor.

Clifford Chance

The data privacy and data protection team at Clifford Chance regularly assists with GDPR compliance, as well as data protections issues related to emerging technologies and strategic matters. Dessislava Savova is a specialist in terms of data protection, cybersecurity, artificial intelligence, and platform regulations. Alexandre Balducci is noted for his AI and cyber security capabilities. The team was further bolstered by the arrival of Patrice Navarro from Hogan Lovells LLP in 2024.

Responsables de la pratique:

Dessislava Savova; Patrice Navarro


Autres avocats clés:

Alexandre Balducci


Les références

‘Clifford Chance stands out with their level of responsiveness and availability on complex matters, even on short notice. I prefer working with them rather than with another firm, where possible, especially due to the level of depth of their analysis and their ability to make risk-based recommendations, even on regulations that are very recent with not much jurisprudence / existing practice that could be relied on. ’

‘Alexandre Balducci and Dessislava Savova are thorough partners on complex topics. They quickly understand the client’s world and challenges.’

 

Principaux clients

Legrand


Oracle


Honda Motor Europe


MTN


CACEIS


Tencent


Plastic Omnium


Splunk


Permira


Viatris


LzLabs


Hitachi Rail


Fujitsu


Expleo


Principaux dossiers


  • Advising Honda Motor Europe (French branch) on all the data protection issues that arise in the context of their day-to-day activities including GDPR compliance.
  • Advising Oracle on its  several initiatives and actions around the globe against competitor’s data practices and their effects on competition in the online targeted advertising and advertising supported service markets.

CMS Francis Lefebvre

CMS Francis Lefebvre is proficient in handling contentious and non-contentious matters for its roster of clients which includes national and multinational companies, public entities, banks, gaming technology companies, and social media platforms. The team advises on clients’ responses to CNIL investigations and dawn raids, data regulatory compliance, and also has notable strength in data security. Anne-Laure Villedieu is an expert in personal data transfers and privacy impact assessments but also harnesses the firm’s employment team to advise on employee data transfers. Maxime Hanriot and Pierre Fumery are other names to note.

Responsables de la pratique:

Anne-Laure Villedieu


Autres avocats clés:

Maxime Hanriot; Pierre Fumery


Principaux clients

Al Khaliji France


Adevinta


Bank of China


CTS Eventim


SPIE OPERATIONS


SPIE France


Newmont


Ideal promotion


Principaux dossiers


  • Advising Al Khaliji with respect to all its data protection issues, and in particular appointed as the external data protection office of the company.
  • Deployed a global GDPR compliance program for SPIE Operations affecting all subsidiaries of the SPIE Group located in France and elsewhere.
  • Deployed a specific GDPR compliance program for SPIE France and its subsidiaries for their activities in France.

De Gaulle Fleurance & Associés

Noted for its strength in the life-sciences, pharmaceutical, and healthcare sector, De Gaulle Fleurance & Associés advises on digitalisation processes, data security, data transfers and data aspects of M&A transactions, among other matters. The team is led by Cécile Théard-Jallu, who advises clients on the implementation of their digital innovation strategies; Georgie Courtois, who is noted for handling software piracy issues; Jean-Marie Job , who is adept at advising on personal and commercial data issues as well as CNIL disputes;  and compliance expert Matthieu Dary.

Responsables de la pratique:

Cécile Théard-Jallu; Georgie Courtois; Jean-Marie Job; Matthieu Dary


Les références

‘Very innovative, very dedicated and excellent lawyers.’

‘Cécile Théard-Jallu is always at the forefront of the legal discussions in her many areas of expertise. She is very hands-on, reliable, business-minded and incredibly committed. A true delight to work with her.’

‘A professional team that listens to market trends. I was very pleasantly surprised to see them on many fronts and exploratory topics (cyber in space for example, AI challenges, health…)’

Principaux clients

Adobe


Alstom


Autodesk


Cegedim


Consortium Tehdas


Epic Games


Europrivacy


Gouvernement de la Guyane


Gouvernement de la Nouvelle Calédonie


Hopscotch


Kinova


Lanvin


Ledger


Legal Place


Meilleursagents.com


Monte-Carlo Société des Bains de Mer


MSF Médecins sans Frontière


Natixis


Orientis Kusmi Tea


Otonohm


Pole Systematic


SuperHot


UEFA


Vicat


Principaux dossiers


Derriennic Associés

The team at Derriennic Associés  has a strong presence within the industry and fields a sizeable in this space. The firm frequently undertakes matters of contract management and negotiation, privacy impact assessments, as well as DPO and CNIL matters. Alexandre Fievee advises on data protection as it relates to new technologies, an area where François-Pierre Lani is also prominent. Pierre-Yves Margnoux advises on the data aspects of digital transformation projects.

Responsables de la pratique:

Alexandre Fievée; François-Pierre Lani; Pierre-Yves Margnoux


Les références

‘Very responsive and exhaustive team in their analyses by taking into account the links with other areas of law not necessarily concerned, a priori, by the GDPR files that we submit to them but which allows the company to think carefully about the links beyond the GDPR (labor code, commerce, criminal… etc.) that it had not necessarily taken into account. Excellent quality of the analyses produced.’

‘Alexandre Fievee, great availability, responsiveness. Excellent expertise in the fields of GDPR. He is very educational and exhaustive in his analyses on the GDPR files entrusted by the company.’

‘Team specialized in regulations relating to the protection of personal data.’

Principaux clients

Spie


Energies France


Cerba Healthcare


Hivebrite


City One


Fondation Pierre Fabre


Dalkia


Xiaomi


Pacifica


Talentia Softaware


Generix Group


Eurobio Scientific


Live Colonies


Kenadon


DHL


Generali


Publicis


TotalEnergies


Boiron


CARAC


Egis


Principaux dossiers


FÉRAL

FÉRAL is a strong choice for clients from the financial services, chemicals, healthcare, industrial engineering, pharmaceuticals and life sciences sectors. Under the firm's regular handlings includes data protection compliance audits, data transfer agreements and binding corporate rules, data protection impact assessments, CNIL dawn raid management, data protection training, and drafting IT guidelines, GDPR compliance, and international data transfer contracts. Richard Willemant is regularly sought out to provide immediate assistance to clients in the wake of data breaches. Olivia Luzi is an expert in GDPR compliance and data protection regulations. Christiane Féral-Schuhl and Bruno Gregoire Sainte Marie are also key names in the team.

Responsables de la pratique:

Richard Willemant; Olivia Luzi


Autres avocats clés:

Christiane Féral-Schuhl; Bruno Grégoire Saint-Marie; Agathe Moulin; Morgan Monnet; Elie Touitou


Les références

‘It was a great pleasure to work with Féral! Their strengths: GDPR expertise, I particularly appreciate their follow-ups and the trust they have managed to create within the teams, their technological knowledge.’

‘Olivia Luzi: she is just “great”! All the teams love her. Very important for the background work.’

‘Agathe Moulin and Morgan Monnet: both are very efficient and congratulations for their follow-ups! Elie Touitou: very comfortable, proactive and innovative. ‘

‘Following the merger between the Luzi-avocats firm and Féral, we have of course continued to work with the team led by Olivia Luzi, which has grown considerably. Always the same responsiveness, and the sense of a job well done, in a pragmatic approach. The file is remarkably followed, the needs are anticipated and the quality of service / cost ratio is particularly advantageous.’

Principaux clients

ADVENT INTERNATIONAL L.P


PACIFIC AVENUE CAPITAL PARTNERS LLC


BIOGARAN


EVENTEAM


IHEARTMEDIA INC.


NAAREA


DQE SOFTWARE


EMINEO EDUCATION


OVHCLOUD


Principaux dossiers


  • Advised Eventeam live on GDPR compliance with a specific focus on data processing during PARIS 2024 Olympic Games.
  • Advised Biogaran on data privacy compliance.
  • Advised a private education group in the context of a GDPR compliance review.

K&L Gates LLP

Handling data protection liability issues in M&A transactions, data transfers, and compliance matters, K&L Gates LLP has a strong presence in the industry. Practice head Claude-Étienne Armingaud is a key name for cross-border technology matters.

Responsables de la pratique:

Claude-Étienne Armingaud


Les références

‘K&L’s fantastic team has always been able to assist us with a wide range of legal issues that we have faced.’

‘Claude-Etienne Armingaud, our main point of contact with K&L France has been amazing to work with. He has been extraordinarily adept in finding and custom-tailoring solutions for our unique and challenging needs.’

‘The great strength of the K&L Gates Privacy team is its pan-European and international aspect. On a topic as central as data protection, having a team capable of understanding the subject in a global way is absolutely fundamental.’

Principaux clients

Bellroy


Crédit Mutuel Arkéa


Crypto.com


Cyber Civil Rights Initiative


EMQ


Envision


Ergotron


Impress


International Justice Mission


Kinship


Maytronics Limited


OneStream Networks


SharkNinja


World Organisation for Animal Health


Principaux dossiers


Latham & Watkins

The team at Latham & Watkins regularly handles matters pertaining to cookies and other trackers, international transfers of data, data protection considerations in AI, data protection considerations in the taking of evidence abroad as well as enforcement and litigation matters. Clients include emerging companies, strategic investors as well as multinational corporations. The team is led by Myria Saarinen, who is a key litigator and leverages significant experience.

Responsables de la pratique:

Myria Saarinen


Les références

‘Very professional team, very available, offering great support.’

 

Principaux clients

a16z


AXA


LVMH


Nissan


Rémy Cointreau


Samsung


Worldline


Principaux dossiers


  • Advised Samsung Medison on its agreement to acquire 100% of the shares of Sonio SAS, a foetal ultrasound AI software company.
  • Advises AXA France in relation to several AI-related topics including with respect to the implementation of secure AI generative model within AXA France.
  • Advised Rémy Cointreau on its APAC data protection compliance program.

Linklaters

Linklaters is well placed to handle the full gamut of data protection and privacy issues including litigation, transactional and regulatory issues. Practice head Sonia Cissé advises on the data aspects of cyber security and fintech, and also has expertise in assisting with commercial contracts, sourcing and complex procurement transactions ,regulation of data and networks, e-commerce, cybersecurity security and telecoms projects and interweaves these aspects into her data advice, GDPR compliance and personal data breach work.

Responsables de la pratique:

Sonia Cissé


Autres avocats clés:

Juila Loiseau


Les références

‘Very communicative team, who take the time to listen to our needs. Responsive. Adapts the tests and advice to our specific requirements.’

‘Sonia Cisse and Juila Loiseau. They are very responsive, take the time to listen to our needs, are accommodating and adapt legal advice and writing to our specific needs.’

‘The team is very collaborative, they take the time to explain the process and the reason for each step. We always understand the logic and legal basis of each approach we choose to take.’

Principaux clients

Stellantis


EQT Active Core Infrastructure (EQT)


John Cockerill


Cummins


Principaux dossiers


  • Advised Stellantis in the context of the acquisition of the artificial intelligence framework, machine learning models and intellectual property rights and patents of CloudMade, a developer of smart and innovative big data-driven automotive solutions.
  • Advised EQT Active Core Infrastructure (“EQT”) on entering exclusive negotiations with ICG Infrastructure Equity I (“ICG Infra”) to acquire Ocea Group (“Ocea”), a leading French water and heat sub-metering infrastructure provider.
  • Advises John Cockerill, a significant supplier of tank turrets for light armoured vehicles, firing systems, and simulation, in the context of exclusive negotiations with Volvo Group for the acquisition of Arquus, the principal French supplier of military vehicles.

McDermott Will & Emery AARPI

McDermott Will & Emery AARPI has a particular strength in the life sciences and biotechnology sectors as well as insurance, e-commerce, digital advertising and luxury goods and advises market leaders in these sectors. The firm regularly assists on matters pertaining to the full gamut of EU data regulation, international intragroup data transfer agreements, GDPR and cyber security compliance, CNIL investigations and strategic data contract negotiations. Romain Perray has significant experience in Data Act compliance. Lorraine Maisnier-Boché leverages her expertise in health, complex IT projects and life sciences. Hélène Adda is also a name to note on the team and handles data protection audits, regarding in particular the review and risk assessment of user experience on websites and mobile applications.

Responsables de la pratique:

Romain Perray


Autres avocats clés:

Lorraine Maisnier Boché; Hélène Adda


Les références

‘The team is innovative in the use of technologies and the mode of collaboration.’

‘We work mainly with Romain Perray and Lorraine Maisnier Boché. They are very precise in their interventions, responsive and operational. The working relationship is very pleasant.’

‘Great expertise and quality of service The team is in the top 10. It stands out for its very strong commitment to its customers and tailor-made assistance.’

‘Romain Perray and Lorraine Maisnier Boché Both have in-depth expertise in data protection law. Lorraine also has expertise in health law applied to personal data. The team is 100% dedicated to data protection law. This is what allows them to have a very fine approach to the subjects entrusted to them.’

‘Long-standing collaboration with Romain Perray for personal data subjects, his expertise is very specific and he is sensitive to the business issues of companies.’

‘We have worked with Romain Perray on several occasions. He produces particularly detailed and well-reasoned opinions and documents, the result of significant research work. Romain always keeps his client’s objective in mind.’

‘Very good, professional and deep analysis and practical recommendations.’

‘Romain has the capacity to understand his client’s needs and create a unique and trusted work environment.’

Principaux clients

Nissan Motor Co & Nissan International


Europcar Mobility Group


Vinted


DISMA International (Azura)


Elis


Sorbonne Abu Dhabi University


Simago


Principaux dossiers


  • Advise Nissan Motor Co. on global GDPR compliance program (data mapping, DPAs, DSSA, GDPR clauses, cookies and privacy policies) with regard to a digital marketing project.
  • Advised Vinted, providing ongoing assistance regarding several matters, including implementing a legal monitoring tool from which Vinted’s legal team will have access to scalable and customizable updates per country and per selected topic as well as to a risk analysis.
  • Advising Simago, a company that operates a large network of radiology centers in France in providing daily assistance on several matters related to personal data protection and cybersecurity matters.

Osborne Clarke

The team at Osborne Clarke is sought after by clients from sectors including life sciences, healthcare, gaming, shipping and logistics, insurance, energy, sport, travel, IT, energy, technology, media and communications. The team regularly advises on cyber attacks, data breaches, outsourcing and privacy policies. Claire Bouchenard is an expert in advertising as it relates to personal data, commercial and digital regulation and Xavier Pican leverages his previous expertise working in-house to advise clients on drafting and negotiating for complex technology and data projects. Laurène Zaggia is also a key name in the team and has strengths with regards to personal data issues and GDPR. The practice was further bolstered by the arrival of Antoine Sullice in November 2024 from Herbert Smith Freehills LLP.

Responsables de la pratique:

Claire Bouchenard; Xavier Pican


Autres avocats clés:

Laurène Zaggia; Antoine Sullice


Les références

‘Xavier Pican is noted for his ability to adapt to the profession, his listening skills, his sound advice, his technical expertise allowing him to deal with the subjects submitted in a qualitative manner and within deadlines. Regulatory monitoring is particularly careful and adapted in communication to the client’s profession.’

‘Their serenity in crisis situations is precious. Their experience (ability to put customer support in parallel) allows us to build the best path for implementing new systems or dealing with the problems encountered.’

Principaux dossiers


White & Case LLP

White & Case LLP's team is a preferred choice for clients from the financial services, media and advertisement, transportation, and luxury brands industries, among others. The team is led by Bertrand Liard, who has strength in advising on cross-border disputes, compliance issues and transactions as well as regulatory issues, and the ‘excellent’ Clara Hainsdorf, who is noted for her ability to advise on GDPR and CNIL matters.

Responsables de la pratique:

Bertrand Liard; Clara Hainsdorf;


Les références

‘Clara Hainsdorf has a very comprehensive approach to the sector. Always pragmatic advice. The team has a sense of service and meets its deadlines.’

‘Clara Hainsdorf – highly skilled data partner. Excellent business sense and pragmatic approach to cases. Very good knowledge of the data/tech market.’

 

Principaux dossiers


ADVANT Altana

ADVANT Altana advises on CNIL matters, GDPR compliance, data processing audits and personal data management protocols. The team is led by litigator Pierre Lubet, Laura Morelli and Jean-Guy de Ruffray. Morelli is a popular choice for clients in the healthcare, engineering, technology and IT, food, luxury, fashion, consumer goods and real estate sectors, and De Ruffray leverages his prior experience at major international law firms. Camille Raclet is also a name to note and advises on audits, implementation of compliance plans, the management of security breaches, as well as drafting and the review of regulatory documentation.

Responsables de la pratique:

Pierre Lubet; Laura Morelli; Jean-Guy De Ruffray


Autres avocats clés:

Camille Raclet


Les références

‘Very experienced and high-quality. Able to deliver work to international standards.’

‘Jean-Guy de Ruffray – experienced, excellent all round and broad knowledge.’

‘Camille Raclet – excellent young partner.’

‘Very responsive team, attentive to issues, capable of working in complex situations and on sophisticated subjects.’ 

Principaux clients

CEGID


BOUYGUES IMMOBILIER


NOTO / UNNIDATA


TUTELAIRE


AG2R


NRJ Group


Principaux dossiers


  • Provide day-to-day advice to Bouygues Immoblier regarding IT contracts and Data protection.
  • Advised Cegid, the European leader in cloud management solutions, on the acquisition of KMB Labs, a French HR Tech start-up and on on the due diligence and on the drafting of data protection documents for the acquisition.

Alain Bensoussan-Avocats Lexing

Alain Bensoussan-Avocats Lexing's portfolio of work strikes a good balance between regulatory compliance work, data litigation matters, and DPO policies with a particular focus on emerging technologies. Key names include Alain Bensoussan, who is a data and emerging law expert, digital litigation lead Virginie Bensoussan-Brulé, Chloé Torres, compliance and certification expert Anne Renard, and Céline Avignon.

Responsables de la pratique:

Alain Bensoussan; Virginie Bensoussan-Brule; Chloé Torres; Anne Renard; Céline Avignon


Les références

Strengths: Proximity, availability and process in reviews. The team has standardized procedures, processes that it can share. This is a plus for a DPO, especially when faced with the implementation or review of a compliance program. The approach is practical and does not boil down to offering 10-page theoretical consultations.’

‘Chloé Torres: very extensive knowledge of regulations and practice, bringing very enriching value for a DPO.’

‘Particularly innovative and attentive firm. The firm is able to bring together legal skills, of course, but also technical skills (IS security for example).’

Principaux clients

Tour Eiffel


Château de Versailles


Musée du Louvre


Région Ile-de-France


Département des Hauts-de-Seine


Fédération Française des Banques Alimentaires


Fondation Abbé Pierre


Lagardère Media News


Orpéa


Synlab


Principaux dossiers


Algo Avocats

The team at Algo Avocats acts for clients across a plethora of industries including software, retail and manufacturing. The team is co-headed by Sandra Tubert and Laura Ziegler who collectively handle GDPR compliance matters, CNIL notice procedures, data protection impact assessments, data protection compliance audits as well as international data transfers, personal data breaches and the implementation of web-marketing projects.

Responsables de la pratique:

Sandra Tubert; Laura Ziergler


Les références

‘The team is very responsive and what sets it apart from other competing teams is its very pragmatic sense when writing notes. This mode of collaboration is essential for groups that must combine business and compliance imperatives.’

‘Innovative in the educational aspect while remaining very precise in substance. Very technical team with in-depth knowledge. Also very good monitoring of current issues and great availability for its customers!’

‘Sandra Tubert is an excellent practitioner who has very good interpersonal skills and is very adaptable and available to her clients. She is a highly skilled attorney specialized in data protection with has helped us many times. She is very experienced in privacy law and in the digital landscape.

‘Sandra has advised with a wide range of issues, related with data protection regulations, She has a depth of understanding of the legal implications of digital marketing and social media and the regulation of influencers.’

‘What sets this team apart is its exceptional expertise, collaborative spirit and deep understanding of privacy and data protection law. Sandra Tubert stands out for her commitment to providing concrete and actionable solutions, while taking a proactive and practical approach to meeting client needs. Her and her team’s ability to anticipate potential challenges before they even arise puts them a cut above the competition. When it comes to quality of service, the team demonstrates responsiveness and fluid communication, which is particularly appreciated during complex or emergency situations, such as data breaches. Compared to other teams in the market, their ability to combine legal expertise and business acumen places them among the best. Their client-centric approach, combined with their spirit of innovation and constant focus on efficiency, makes this team a partner of choice in a competitive legal environment.’ 

‘Within the team, Sandra Tubert particularly stands out for her in-depth expertise in data protection and privacy law. She combines legal rigor with an ability to find pragmatic solutions tailored to clients’ specific needs. What sets her apart from her colleagues is her collaborative approach and her ability to simplify complex subjects while maintaining a high level of precision. Sandra also stands out for her responsiveness and her ability to anticipate legal issues before they become problems for clients. Her listening skills and commitment to delivering concrete results make her a trusted lawyer, particularly appreciated by clients for her ability to deliver practical advice within tight deadlines.’

‘Leading team in data protection. Very pragmatic approach to cases, strong involvement, including with operational teams.’

‘I deal mainly with Sandra Tubert, a partner in the firm. Sandra is a trustworthy person, very knowledgeable in her field and particularly involved in the subjects; very available and leaving nothing to chance in her analysis, which is always of very good quality and perfectly adapted to our activities.’

Principaux clients

Deepomatic


WeChooz


Widoowin


Continuity


Escape


Principaux dossiers


Bersay

At Bersay, Bradley Joslove, who is able to draw on previous experience of practising in the US, and Frédéric Lecomte are the key names. The group is adept at handling cross-border GDPR compliance issues, including the transfer of data, the implementation of GDPR tools and crisis management for clients from a cross-section of industries.

Responsables de la pratique:

Bradley Joslove; Fréderic Lecomte


Autres avocats clés:

Léa Paravano


Les références

‘Very good team, with very good knowledge of GDPR and its implications in the health sector. The team is innovative and has demonstrated its ability to quickly grasp new topics.’

‘Frédéric Leconte and Léa Paravano are both very competent in their fields.’

‘The team is very competent and responsive. The answers to the questions asked are relevant, well explained and pragmatic, taking into account the client’s interest.’

‘Frédéric Lecomte and Léa Paravano are highly qualified in personal data matters and have concrete and highly appreciable expertise in IT contracts, particularly in the Fintech and MedTech sectors. Their approach is always pragmatic and looking for an advantageous solution for the client.’

‘Brad and Lea were both very knowledgeable and the type of lawyers you would like doing business with. ’

‘A commercially-focused team which is able to provide pragmatic advice.’

‘Lea Paravano and Bradley Joslove provided pragmatic and commercial advice.’

Principaux dossiers


  • Advised a French real estate developer on the implementation of a comprehensive GDPR remediation program and continue to advise this company on its GDPR compliance on a day-to-day basis.
  • Advised the French subsidiary of an Italian provider of SaaS and cybersecurity services for B2B clients in drafting its health data hosting agreement to help it to obtain the health data hosting provider certification.
  • Advising a producer of remote monitoring medical devices in drafting and negotiating a data processing agreement with a new player on the French market offering a remote monitoring platform regarding a partnership with healthcare institutions.

Delsol Avocats

Delsol Avocats’ team has a particular niche advising on data protection as it relates to life sciences and health information systems but also regularly advises on GDPR compliance, CNIL dawn raids, compliance audits, DPO matters and data protection policies, among other matters. The team is led by Jeanne Bossi Malafosse, who also heads the firm’s life sciences department and advises on the protection issues and regulatory requirements of health data sharing.

Responsables de la pratique:

Jeanne Bossi Malafosse


Autres avocats clés:

Aura Braun


Les références

‘ Highly specialized expertise in the field of digital health and the protection of personal data.’

 

Principaux clients

ASTRAZENECA, DOCAPOSTE, TAKEDA AND IMPACT HEALTHCARE


BIOPTIMUS


CNOP (CONSEIL NATIONAL DE L’ORDRE DES PHARMACIENS)


FNSAFER


OWKIN


RHISA


SOLIHA


URBASOLAR


Principaux dossiers


  • Advising FNSAFER on compliance with data protection regulations.
  • Advising Urbasolar on compliance with data protection regulations.
  • Advising Bioptimus on compliance with data protection and artificial intelligence regulations.

Franklin

The team at Franklin advises on the drafting and negotiating of complex commercial and IT contracts, the management of cyber-attacks and cyber-security incidents, GDPR compliance, and contentious matters including CNIL issues. The firm is a popular choice for French and international corporates with a strong multijurisdictional element with services expanding to the Middle East, US, South and East Asia and Africa. Merav Griguer is noted for handling data disputes before regulatory bodies.

Responsables de la pratique:

Merav Griguer


Autres avocats clés:

Salomé Silliaume; Wissem Addoun


Les références

‘Wissem Addoun: Extremely responsive, relevant.’

‘Responsiveness, tailor-made customer relations.’

‘I particularly appreciate Merav Griguer who knows how to listen to needs by taking into account customer constraints and always being up to date and relevant in her analyses.’

Principaux clients

Orange


Fnac Darty


LVMH


Kuehne+Nagel


Paris Saint-Germain Football Club (PSG)


Concentrix


Servier


L’Oréal


Stellantis Finance & Services


Pluxee (Sodexo Group)


Deezer


Liebherr


Zanalys


Groupe Premium


New England Biolabs (NEB)


Deepki


Principaux dossiers


  • Advice to ORANGE to ensure compliance of its data flows to countries outside the European Union.
  • Advise FNAC DARTY on its use of technologies (including AI) and databases
  • Advised on a defense of a hyper-growth startup in a sanction proceeding initiated by The Defender of Rights (Défenseur des Droits), following a CNIL inspection, for using algorithms and AI solutions.

Momentum Avocats

Momentum Avocats is sought after by major French and global clients to handle data access requests, data issues as they pertain to AI, data transfers and data protection impact assessments. Julie Carel  Julien Canlorbe Jean-Sébastien Mariez are the key names.

Responsables de la pratique:

Julie Carel; Julien Canlorbe; Jean-Sébastien Mariez


Autres avocats clés:

Laura Godfrin


Les références

‘Good knowledge of developments in the tech and industry sector, anticipating future needs.’

‘Innovative team, attentive to the needs of its customers and very aware of developments in the digital industry. They know how to assist their customers with quality advice and exceptional responsiveness. Their knowledge of the sector also allows them to anticipate potential regulatory risks concerning their customers’ business.’

‘The team is very responsive when requested. But it is also proactive in monitoring our issues and positions itself in a preventive role allowing it to always be ready to act, it is precious.’

Principaux dossiers


Norton Rose Fulbright

Norton Rose Fulbright regularly advises on the collection, use, storage, disclosure, transfer and destruction of business data as well as data privacy issues as they relate to IT transactions. Nadège Martin  handles GDPR compliance, cross-border data issues, and is particularly skilled in advising clients in the life sciences sector and on internal investigations. Geoffroy Coulouvrat handles major cyber incidents and has a particular specialism in advising pharmaceutical companies on data protection and public health regulations applicable to medical studies.

Responsables de la pratique:

Nadège Martin


Autres avocats clés:

Geoffroy Coulouvrat


Principaux clients

Pfizer


Groupe Beaumanoir


Crédit Agricole


Schneider Electric


Barclays


Principaux dossiers


  • Assisting various clients in the management of data breaches resulting from the cyberattack suffered by their global provider of relocation services to their employees.
  • Advising on various employee’s access right requests in the sensitive context of the termination of the employment and/or of internal investigations and in the drafting of settlement agreements with our employment team.
  • Assisting a leading French pharmaceutical company in respect of an early access authorization related to gene therapies in France, which are seen as the next generation of medical therapies and advise on related data protection issues.

Simmons & Simmons

Simmons & Simmons frequently combines with the firm’s European offices to provide cross-border advice on data regulatory compliance. The group also assists with data breaches, interceptions of communications and data access requests. Sarah Bailey is a key name for matters relating to health and financial data; Emilie Danglades-Perez provides additional support. Former co-head Eric Le Quellenec left the firm in March 2025.

Responsables de la pratique:

Sarah Bailey


Autres avocats clés:

Emilie Danglades Perez


Les références

‘ Simmons are able to navigate this area of law commercially and efficiently.’

‘Sarah Bailey is great to work with. Her advice is pragmatic and commercial.’

‘The level of the team is exceptional: – quality of listening – quality of understanding – drive of the file – quality of analysis – quality of defense.’

Principaux dossiers


Taylor Wessing

The team at Taylor Wessing regularly advises on GDPR compliance programmes, data protection audits and impact assessment including employee system, set-up and support for data protection governance schemes, as well as CNIL investigations and international data sharing contracts. Marc Schuler  handles the full gamut of regulatory, advisory, and transactional issues. Benjamin Znaty is a key port of call for IT software and hardware providers, financial and payment technology providers, e-commerce platforms and digital media industries.

Responsables de la pratique:

Marc Schuler


Autres avocats clés:

Benjamin Znaty


Principaux clients

Oppo Telecom


Tekion


Laduree


Amazon


Sediver


Covivio


Comcast


Cimpress


Airship


Hiscox


Zurich Insurance


Allianz


Altus Group


Live Nation


Inogen


Pixarprinting – Cimpress


Orion


Ricoh


Principaux dossiers


  • Assisting Amazon in general data protection matters for almost all its business units.
  • Assisting Hiscox in relation to its Cyber cover and corresponding claims and internal GDPR compliance program.

UGGC Avocats

UGGC Avocats is notably active in handling an impressive mix of contentious and non-contentious matters. Its workload includes advising on the management of data breaches, the implementation of data compliance programmes, the management of personal data and representation in disputes relating to the deindexation of e-data. Corinna Khayat is the key name.

Responsables de la pratique:

Corinne Khayat


Autres avocats clés:

Elisabeth Logeais; Anne-Marie Pecoraro


Les références

‘Very good knowledge of legal aspects and nuances; efficiency, courtesy’

‘The team schedules data protection workshops tailored to the understanding of our data processing officers. It has responded with precise and concise communication to questions about the constraints of the regulation (GDPR) in force within our company. It does not hesitate to schedule videoconferences when the need arises.

‘Skilled in defending data rights in all countries of the world, and the best.’ 

‘Anne Marie Pecoraro is my go-to lawyer for all matters of personal data law, she is an authority on the market with her top-notch expertise. She far surpasses other specialist lawyers with her expertise, experience and humanism.’

Principaux clients

Dedigroup


Bodyhit


Solinest


Crédit Agricole Immobilier


Institut Pasteur


AAA DATA


Self Media


RTA (Régie Régionale des Transports de l’Aisne)


Giacometti


WeWork Paris III Tenant SAS


Régie Régionale de Transports du Pas de Calais du Pas de Calais


KEYPROD SAS


We Connect


TORNIKA Affimobiz


DPO CSE https://www.dpo-cse.com/


Elyx


Principaux dossiers


Bignon Lebray

Bignon Lebray

Responsables de la pratique:

Nicolas Moreau


Autres avocats clés:

Elise Dufour; Benjamin Dufour


Les références

‘Quality expertise, availability and support which allowed us to achieve compliance quickly and without difficulty.’

Principaux clients

YPOSKESI


CELLTRION


CARESYTNAX


ACCOR INVEST


GOYARD


SANTE VET


Principaux dossiers


  • Management on a monthly basis of the compliance of a global hotel real estate investor and owner, with GDPR worldwide.
  • Assisting a leading international healthcare company as an external DPO with all issues relating to GDPR, with a focus on health data management and patient consent with respect to medical studies.
  • Conducing cross-border advice to a leading company specializing in customer loyalty and engagement solutions, regarding GDPR compliance in Europe + implementation of their Solution in the USA to BENEFIT / BEAUTY TECH .

Clyde & Co LLP

Clyde & Co LLP

Responsables de la pratique:

David Méheut; Pierre Affagard


Les références

‘The team stood out for its in-depth expertise and its ability to adapt to the challenges of our cases.’

‘Thanks to his great responsiveness, Pierre was able to adapt quickly to changes in our situation and provided us with relevant solutions in real time.’

‘Very high responsiveness, adaptability of the systems implemented in response to our requests and efficiency in processing the files entrusted – Very strong expertise in data protection.’

Principaux clients

AIG


Air France


CHUBB


Europe Ecologie Les Verts (French political party)


Transavia


Zurich


Principaux dossiers


  • Acted as monitoring and coverage counsel in AIG’s largest cyber case involving ransomware.
  • Conducted a major study with French political parties to quantify racial and social diversity ensuring that sensitive data was collected and processed in strict compliance with French legislation and the GDPR.
  • Assisted a CAC 40 company during the CNIL’s investigation aimed at verifying the company’s compliance with the European and French data protection laws and regulations

Ernst & Young Société d'Avocats

Ernst & Young Société d'Avocats

Responsables de la pratique:

Fabrice Naftalski; Yaël Cohen-Hadria; Sandrine Cullaffroz-Jover


Les références

‘The team is always available and has good deadline management. The strengths of EY Société d’Avocats are knowing how to work with other EY consulting professions (multidisciplinary approach). The team is very diverse.’

‘Fabrice Naftalski listens to the needs and constraints of his clients’

‘ Professional and accessible. The team has a perfect command of its clients’ needs, both in terms of advice and litigation.

Principaux dossiers


Freshfields Bruckhaus Deringer LLP

Freshfields Bruckhaus Deringer LLP

Responsables de la pratique:

Jérôme Philippe


Les références

‘Jérôme Philippe is a fine lawyer, with an acute knowledge of the law and a commercial approach to the issues.’

‘Multi-disciplinary team at the crossroads of personal data protection law and competition law, which gives them an advantage on subjects involving major digital players.’

Principaux clients

Marriott International Inc.


Meta


Principaux dossiers


  • Advising several major investment funds and private equity companies on the data protection, IT and/or cybersecurity aspects on their deals of their intended acquisitions in France.
  • Advising HSBC Continental Europe (HBCE) on the data protection aspects of the sale of its French retail banking business to Cerberus.

Klein Wenner

Responsables de la pratique:

Laurent Badiane; Matthieu Bourgeois


Principaux clients

Stellantis Financial Services


Hitachi Solutions


Eranove


Cewe


Unéo


Lucky Cart


Totum Pharmaciens


Heva


Bedrock


Principaux dossiers


  • Advised Stellantis Financial Services on negotiation of strategic and complex IT contracts (including Data Processing Agreement) with suppliers of software solutions recognised in the market, taking particular care to secure its intellectual property rights, the protection of personal data and the continuity of its activities in any event.
  • Advising UNEO on the development of an online community platform providing access to several promotional offers in various fields (clothes, food, gardening, travels, etc.).
  • Advising HITACHI SOLUTIONS on negotiating an important agreement with a customer (several million euros) notably implying issues relating to personal data and intellectual property and on a day-to-day basis regarding commercial and personal data matters.

NEXT AVOCATS

NEXT AVOCATS

Responsables de la pratique:

Stéphanie Foulgoc; Étienne Papin


Les références

‘Strengths and assets: proximity to its customers, in-depth knowledge of our services in order to adapt advice, responsiveness.’

‘Etienne Papin: Availability, Real desire to defend the interests of our company.’

Principaux clients

Fondation de France


Sage


Groupe UP


OPCO 2i


Media Transports (Publicis Group)


Principaux dossiers


Pinsent Masons LLP

Pinsent Masons LLP

Responsables de la pratique:

Annabelle Richard


Autres avocats clés:

Anne-Sophie Mouren


Les références

‘As this is a team that is competent not only on data-related topics but more generally on tech and innovation topics, we appreciated their global vision of the issues we submitted to them. We also greatly appreciated that the nature of our activities was always at the center of their analysis. Thus, we could always be assured of having tailor-made advice and not a formula repeated to all clients indifferently. Haute couture rather than ready-to-wear, that is the trademark of this team.’

‘On these topics, we mainly worked with the tandem Annabelle Richard and Anne-Sophie Mouren. This is a very effective and very complementary duo on these topics. Where Annabelle Richard will roll out a strategy and a global analysis of a project, Anne-Sophie Mouren will bring her attention to detail and her rigor in the implementation of the strategy.’

‘Excellent lawyers with an international perspective, where they benefit from their offices in many jurisdictions especially the London office, thus they are a gateway to Europe.. Able to combine there market knowledge with legal advice. ’

Principaux dossiers


PwC Société d'Avocats

PwC Société d'Avocats

Responsables de la pratique:

Valérie Aumage


Les références

‘It is a very professional team with significant technical expertise in its field of activity.’

‘Valérie Aumage is a very technical, professional and rigorous partner in her approach.’

‘Mastery of the subject and proximity to companies. In-depth but also pragmatic advice in line with the reality of companies.’

Principaux clients

KKR


PPG (Pinnacle Pet Group)


Vade


Bouygues Telecom


Montefiore Investment


Group Nexity


SK Capital Partners


Dyneff


Blackstone


Key Performance Consulting


Itonics


Cooper Consumer Health


Principaux dossiers


  • Carried out vendor due diligence work for Vade, a French tech unicorn. The IT & Data Privacy team carried out a risk assessment and presentation to investors on IT and data privacy matters
  • Carried out due diligence work for Bouygues Telecom for the acquisition of La Poste Mobile.
  • Advised on several due diligence matters for Montefiore Investment.