Next Generation Partners

Firms To Watch: Data privacy and data protection

Data privacy and data protection in France

Latournerie Wolfrom Avocats

Latournerie Wolfrom Avocats welcomed Claude-Étienne Armingaud in September 2025 from K&L Gates LLP, significantly bolstering the firm’s data privacy and protection capabilities in France.

Entropy

Entropy focuses on technology and data and has recently expanded its team at the associate level; Adrien Basdevant is the practice head.

Responsables de la pratique:

 


Adrien Basdevant


Principaux dossiers


Kalder

Founded in 2024 by Farid Bouguettaya, Kalder‘s broad practice extends to advice on GDPR compliance, cross-border data transfers and regulatory investigations.

Volkane

Boutique firm Volkane was founded in February 2023 by Lydia Bianchi and Clémence Marolla and combines M&A expertise with deep knowledge of data protection and IP.

Responsables de la pratique:

Clémence Marolla; Lydia Bianchi


Principaux dossiers


August Debouzy

August Debouzy stands out for its specialisation in data protection, its vast regulatory experience and its ability to support clients across a broad range of industries. This includes companies operating in the luxury goods, retail, technology, finance, healthcare and public services sectors. The firm regularly assists clients in all data-related issues, spanning from CNIL investigations to GDPR compliance, data breach crisis management and the introduction of innovative digital projects. Practice head Florence Chafiol is highly regarded in this field and is supported in the team by Roxane Blanc-Dubois. Stéphanie Lapeyre left the firm in Sep 2024.

Responsables de la pratique:

Florence Chafiol


Autres avocats clés:

Roxane Blanc-Dubois; Robin Nini


Les références

‘Expert and available team.’

‘Florence Chafiol: effective in defending our interests with the CNIL.’

‘A cohesive, pragmatic and highly responsive team that knows how to meet the different needs of its clients by adapting to the issues raised and the context.’

‘The best data privacy Cyber and AI practice in France by a country mile. They combine expertise in the law with a conscientious « team player » work ethic and all clothed in client friendly pragmatism. It is a rare combination and as such they are magnificent to work with.’

‘Florence Chafiol is the standout individual. Experienced, client friendly and hard working – our team, and our clients, trust her to be the best there is.’

‘Dynamism, responsiveness, teaching skills, friendliness.’

‘Remarkable in its precision down to the smallest detail, in its follow-up on cases, in its adaptability to our technical constraints and in the quality of its recruitment.’

Principaux clients

ACCOR


ASSOCIATION ANTOINE ALLÉNO


BRAMBLES


BUMBLE


DANONE


DBV TECHNOLOGIES


DELIVEROO


EBA CLEARING


EDF ASSURANCES


EDF SA


EGIS


GROUPE SNCF


JCDECAUX


LA MONDIALE EUROPARTNER


L’OREAL


MICROSOFT


NIKE


OMNICOM PUBLIC RELATIONS GROUP FRANCE


PAYFIT


PERNOD RICARD


RATP


SAUR


TOTALENERGIES


VEOLIA ENVIRONNEMENT


Vinci


Principaux dossiers


  • Advising and providing support to Veolia Environment’s DPO on a wide range of data protection matters.
  • Advising Deliveroo’s privacy teams on complex data protection issues across products, operations and AI.
  • Advised Bumble on the French regulatory and legal framework applicable to the deployment of an AI-driven content moderation system.

Baker McKenzie

Baker McKenzie is noted for its deep expertise in data privacy and its ability to leverage the firm’s global footprint to handle multi-jurisdictional matters. The team’s cross-practice capabilities allow it to advise local and international clients in technology-related matters, ranging from complex international transactions to digitisation strategies, data disputes, cybercrime and AI solutions. The department is led by Magalie Dansac Le Clerc, who has a wealth of expertise in all GDPR-related issues. Rémy Bricard is another name to note.

Responsables de la pratique:

Magalie Dansac Le Clerc; Rémy Bricard


Les références

‘A team that listens, is available and reassuring.’

Bird & Bird

Bird & Bird is a well-known player in the data protection space, with the team regularly handling a breadth of data issues, from cybersecurity advisory matters to representing companies before regulators. Practice head Ariane Mole specialises in representing organisations before the CNIL, with years of expertise providing assistance in dawn raids and advising on cutting-edge projects across numerous industries. Willy Mikalef is also noted for advising tech-focused companies on the implementation of data protection and cybersecurity requirements. New arrivals include Romain Perray and Lorraine Maisnier-Boché from McDermott Will & Schulte in March 2026.

Responsables de la pratique:

Ariane Mole; Willy Mikalef


Autres avocats clés:

Romain Perray; Lorraine Maisnier-Boché


Les références

‘The team is very collaborative and makes a point of understanding the client’s business, objectives, and environment in order to provide sound legal analyses.’

‘The team is always available and responsive.’

‘A young, dynamic, and modern team that doesn’t look down on its business partners. Their communication is fluid and not at all pedantic, ensuring that operational staff don’t feel lost when asked questions.’

‘The team demonstrates great responsiveness and professionalism. Beyond academic and university knowledge, it provides its clients with effective and concrete practical solutions to address the challenges posed by the GDPR. In terms of innovation, the team also excels in collaborative methods and demonstrates a strong capacity to adapt to new technologies.’

‘I am in particular contact with Ariane Mole, who excels in her field. She is very available, very responsive, and provides valuable advice to her clients.’

Principaux clients

Doctolib


IQVIA


PageGroup


DPD Group – Geopost


Shoebox


DLA Piper

DLA Piper fields a dedicated team of data privacy and cybersecurity lawyers who advise clients on the full range of data privacy and protection issues. Handling both contentious and non-contentious matters, the team acts for French and international clients and is particularly strong in cybersecurity work and in matters involving the life sciences sector. Practice head Denise Lebeau-Marianna advises on the full spectrum of data protection and is assisted by Yaël Hirsch. The team was further strengthened by the arrival of Stéphanie Lapeyre in September 2024.

Responsables de la pratique:

Denise Lebeau Mariana


Autres avocats clés:

Stéphanie Lapeyre; Yaël Hirsch


Les références

‘Excellent technical skills, good understanding of practical issues.’

‘From a commercial and service offering perspective: a high capacity to adapt services to the organization, needs, and constraints of clients. From an interpersonal perspective: very high efficiency and close relationships with stakeholders, availability making communication very smooth and efficient and allowing projects to progress very concretely.’

‘Yael Hirsch: a brilliant, pragmatic, results-oriented, and precise lawyer. She possesses extensive expertise in Data Protection, Privacy, and AI, areas that present a particular degree of complexity in Data Protection, such as processing carried out across a Group spanning multiple countries, entities, and subject to widely varying regulations. She provides support in both Governance & Framework matters and substantive issues.’

‘Fast and efficient collaboration, even on complex topics. Clear and detailed time spent, received weekly.’

‘Stéphanie Lapeyre-Castellane: relevant and effective advice, proactive in addressing complex issues.’

‘Availability, responsiveness and pragmatism.’

Principaux clients

beIN Sports France SAS


Gide Loyrette Nouel A.A.R.P.I.

Gide Loyrette Nouel A.A.R.P.I. offers a cohesive team well-known in France for its data protection advice. The team’s work includes advising on the establishment of GDPR compliance mechanisms, data breach assistance and multi-jurisdictional data protection surveys. The highly regarded Thierry Dor leads the practice and advises clients on matters ranging from personal data processing to contentious issues with the CNIL. His clients also benefit from his unique combination of in-house and private practice experience. Aurélie Pacaud notably advises clients on the practical impacts of AI.

Responsables de la pratique:

Thierry Dor


Autres avocats clés:

Aurélie Pacaud


Les références

‘The Gide team stands out for its attentive listening to our needs, an essential quality in a constantly evolving legal environment. They demonstrated a remarkable ability to grasp the specific challenges of each situation and to propose tailored solutions.’

‘What makes this team particularly attractive is its capacity to position itself at the forefront of discussions on innovative and complex technical topics, such as the AI Act. Their specialized expertise in this emerging field demonstrates a constant commitment to remaining at the cutting edge of innovation and mastering the legal challenges of tomorrow. Their approach was personalized and pragmatic.’

‘The Data Privacy team is a point of reference in times of crisis, urgent need and assistance with strategic decision-making.’

Principaux clients

Cure 51


Olympique Lyonnais Group


Orange Business


Société Générale


Suez


Reputation Squad


France Televisions


LVMH


Casino


Crédit Agricole


Drouot


Herbert Smith Freehills Kramer LLP

Herbert Smith Freehills Kramer LLP‘s data protection group is led by Alexandra Neri, an expert in data privacy issues and breaches who brings additional experience in high-profile cases before the French and European Courts. The team is prominent in complex contentious matters and is also sought out by clients for advice on non-contentious data protection matters and the AI and data aspects of corporate transactions. Emmanuel Ronco and Vincent Denoyelle are also notable names who joined the firm in 2025.

Responsables de la pratique:

Alexandra Neri


Autres avocats clés:

Emmanuel Ronco; Vincent Denoyelle


Les références

‘An expert team in its field, responsive and with a thorough understanding of its client’s business.’

‘Alexandra Neri; an expert in her field and pragmatic in her advice.’

‘Highly professional, very competent, responsive, proactive, and close to her clients.’

Principaux clients

Société Générale


Alten


Expedia


TeamSystem


Hogan Lovells (Paris) LLP

Hogan Lovells (Paris) LLP fields a well-rounded data privacy and protection team led by Etienne Drouard, a recognised name for public affairs, regulatory compliance, contractual negotiations, investment, litigation and international data crisis management. The group guides notable clients including multinational corporations through evolving regulatory landscapes and provides representation before the CNIL. Julie Schwartz provides key support in complex cross-border mandates.

Responsables de la pratique:

Etienne Drouard; Julie Schwartz


Les références

‘The Hogan Lovells team in Paris consistently demonstrates relevance and precision in its analyses, which are completed within the client’s deadlines. Furthermore, the firm adopts a consultative approach by continuously monitoring topics of interest to its clients and sharing important information along with advice and recommendations.’

‘Highly specialized and robust expertise in personal data protection, while remaining closely aligned with clients’ operational realities. Extensive, strong, and mature network. Responsive, reasoned, and tailored solutions to meet specific needs and circumstances.’

‘The team is composed of experts who are both very knowledgeable about all legislative and jurisprudential developments but also very business-oriented in their analysis and recommendations.’

‘A multi-specialized team sets it apart from other firms. In the pharmaceutical industry, data protection regulations are specific, and expertise in healthcare law as well as data protection law is essential. With this in mind, Hogan Lovells and its teams offer a competitive, expert, and unique service. The staff are always available, responsive, and efficient.’

‘The law firm distinguishes itself through a rare combination of in-depth legal expertise, a client-focused service tailored to its industry, and an innovative approach to the practice of law.’

‘Etienne Drouard is a brilliant lawyer, and his remarkable skills elevate the entire firm.’

‘Understanding of operational challenges, clarity of responses, listening to client needs.’

‘The team was very precise and quick in handling our questions, while perfectly taking into account the context and objectives pursued.’

Principaux clients

Aéroports de Lyon


Groupe Canal+


Principaux dossiers


  • Advised Aéroports de Lyon on the implementation of a facial recognition project until its submission to the CNIL.
  • Representing a client in a preliminary ruling procedure resulting from an appeal before the French Supreme Court in a matter dealing with the consent requirement in the context of data sharing and email marketing.

Linklaters

The Linklaters data privacy and protection team is led by Sonia Cissé, who has ‘distinguished herself in the provision of timely and high-quality advice‘. The team covers the full range of technology and data privacy issues in the context of strategic digital projects and complex transactions, both nationally and globally. Multinational corporations also turn to the team for support in compliance and enforcement issues.

Responsables de la pratique:

Sonia Cissé


Les références

‘I had the opportunity to collaborate with the Linklaters team on matters related to personal data protection, and I was very impressed by their level of expertise. They are professionals who are both highly skilled in legal matters and very attentive to the specific needs of their clients.’

‘Sonia Cissé is an exceptional lawyer, both expert and very approachable. She stands out for her comprehensive and practical understanding of the challenges related to technology and data protection. Her approach combines a strategic vision, rigorous legal standards, and a genuine ability to simplify complex issues. I particularly appreciated her advisory skills, always focused on finding solutions tailored to operational needs. Her experience, especially on international GDPR compliance and cybersecurity projects, is evident in the quality and precision of her recommendations. Beyond her technical expertise, Sonia distinguishes herself through her commitment, her ability to explain complex concepts clearly, and her openness. She perfectly embodies the professionalism and innovation that characterize Linklaters.’

‘I have had the opportunity to collaborate with Sonia Cissé on several occasions, and I can say without hesitation that she is a remarkable lawyer. Brilliant, extremely professional, and always proactive, Sonia fully embodies Linklaters’ values: excellence, rigor, and integrity.’

Principaux clients

InfraVia


Belfius Bank NV


Brookfield Infrastructure Partners


Cummins


Principaux dossiers


  • Advised InfraVia on its entry into discussions to form a partnership aimed at developing OpCore into a major European Hyperscale data centre.
  • Advised Belfius on the framework of a major strategic investment and partnership with Alan Insurance.
  • Advised Brookfield and Data4 on the sale of interests in Data4’s European stabilised data centre portfolio to Arjun and Interogo.
     

Clifford Chance

Clifford Chance is noted for its ‘depth of expertise and innovative approach‘. The practice draws on the firm’s global office network and reach, broad industry coverage and wealth of expertise in data protection to advise local and international companies on the gamut of data matters. Key names include Dessislava Savova and Patrice Navarro.

Responsables de la pratique:

Dessislava Savova;  Patrice Navarro


Autres avocats clés:

Grégory Sroussi


Les références

‘Excellent service quality on this issue, dynamic team, smooth process, costs in line with industry standards.’

‘Gregory Sroussi and his dedicated team provided us with all the necessary support, were very attentive and open to discussion. A great dynamic that was much appreciated.’

‘Professionalism of the team, quality of deliverables, speed of execution.’

Principaux clients

TikTok


Legrand


Oracle


Honda Motor Europe


DoorFeed


MTN


CACEIS


Tencent


Plastic Omnium


Splunk


Permira


Viatris


LzLabs


Hitachi Rail


Fujitsu


Expleo


TikTok


Legrand


Oracle


Honda Motor Europe


DoorFeed


MTN


CACEIS


Tencent


Plastic Omnium


Splunk


Permira


Viatris


LzLabs


Hitachi Rail


Fujitsu


Expleo


TikTok


Legrand


Oracle


Honda Motor Europe


DoorFeed


MTN


CACEIS


Tencent


Plastic Omnium


Splunk


Permira


Viatris


LzLabs


Hitachi Rail


Fujitsu


Expleo


Derriennic Associés

Derriennic Associéscombines strong expertise in data privacy with a pragmatic, business-oriented approach‘ and is well versed across the gamut of IT and IP issues. The team has notable expertise in personal data protection and has been supporting both public and private players in achieving GDPR compliance. Alexandre Fievee specialises in the law relating to new technologies, especially in relation to the protection of personal data, and jointly leads the practice alongside Francois-Pierre Lani, Pierre-Yves Margnoux and Anne Cousin.

Responsables de la pratique:

Alexandre Fievee; François-Pierre Lani; Pierre-Yves Margnoux; Anne Cousin


Les références

‘Derriennic Associés combines strong expertise in data privacy with a pragmatic, business oriented approach. The team is highly responsive, reliable, and solution-driven.’

‘Their perfect expertise in their field, their handling of cases always closely aligned with business and operational activity. Their capacity for innovation and for being deal-makers.’

‘Quality, flexibility, responsiveness. More responsive than a tested competitor.’

Principaux clients

Spie


Energies France


Cerba Healthcare


Hivebrite


City One


Fondation Pierre Fabre


Dalkia


Xiaomi


Pacifica


Talentia Softaware


Generix Group


Eurobio Scientific


Live Colonies


Kenadon


DHL


Generali


Publicis


TotalEnergies


Boiron


CARAC


Egis


Principaux dossiers


  • Assisted a French group with the launch of an internal audit pertaining to accessing personal patient health data.
  • Advising a group on a dispute with an insurance company, following the cyberattack of a fashion design and retailing group.
  • Advising a leader in the cleaning industry on the compliance of an AI solution with the GDPR and AI Act.

Franklin

Franklin demonstrates notable expertise across all facets of data privacy and protection. The team maintains close ties with domestic and regional corporates and is also active in cross-border matters, where it assists international companies with multi-jurisdictional data mandates. Practice head Merav Griguer is an established figure in the field, with experience representing clients before the CNIL in sensitive matters and advising on non-contentious data privacy matters.

Responsables de la pratique:

Merav Griguer


Les références

‘A dynamic team that knows how to approach issues operationally with specific expertise. Good knowledge of technical subjects. Effective pre-litigation support.’

‘Experienced team.’

‘Fantastic team – joy to work with, high quality output.’

Principaux clients

Fnac Darty


Premium Partners


Khuene +Nagel


Liebherr


LVMH


Naval Group


Orange


Paris Saint-Germain Football Club (PSG)


Pluxee


Servier


Veeton


Zanalys


Concentrix


Lotomate


Disneyland Paris


Principaux dossiers


  • Assisted Orange before the CNIL and succeeded in securing a fine reduction.
  • Assisted in securing the closure of disciplinary proceedings initiated by the French Human Rights Defender (Défenseur des droits) against a company using AI tools and algorithms.

Gibson Dunn

Gibson Dunn's data privacy and protection team advises global clients across a broad range of sectors on matters ranging from cybersecurity, IT, digital products, AI implementation and compliance with EU data regulations. Practice co-head Ahmed Baladi represents companies before French data protection authorities and advises on privacy and data-driven projects. He also has notable expertise in digital projects such as cryptocurrency, big data and cloud-based software. Vera Lukic provides support and handles IT and data privacy issues for transactions for a global client base.

Responsables de la pratique:

Ahmed Baladi


Autres avocats clés:

Vera Lukic


Les références

‘The privacy team at Gibson Dunn led by Ahmed Baladi is outstanding. They combine deep knowledge of EU data protection law with a clear understanding of the commercial and regulatory realities facing crypto and fintech companies. The team is exceptionally responsive, practical and collaborative. The have become an extension of our in-house legal and compliance functions.’

‘Ahmed Baladi is a standout advisor in the intersection of privacy law, financial regulation and emerging technologies. He is deeply trusted, having guided us through some of our most complex data protection challenges. His understanding of how to reconcile EU privacy requirements with US oversight obligations is unmatched. He is always available for a call, no matter the time zone, and provides clear actionable advice. He is a true strategic partner for our organisation.’

Osborne Clarke

Osborne Clarke‘s data protection team excels in the areas of cybersecurity and data breach response, drawing on its regulatory, IT, commercial and consumer law expertise. The firm also leverages its global network to handle cross-border data privacy regulation and GDPR global programmes and compliance. The team is co-led by Xavier Pican and Claire Bouchenard, with support from Grégoire Dumas and Laurène Zaggia.

Responsables de la pratique:

Claire Bouchenard; Xavier Pican


Autres avocats clés:

Laurene Zaggia; Grégoire Dumas


Les références

‘Extremely pragmatic and practical collaboration method. A solution-oriented team that enables efficient decision-making within deadlines. High availability.

‘A helpful and competent team. The staff are responsive and communicate effectively.’

‘Availability, pragmatism, and efficiency. This team is a true partner for us in developing our business. The concise and actionable format of their advice is immediately applicable to our teams.’

‘Grégoire Dumas’ team has distinguished itself by combining its legal expertise specializing in new technologies with a consulting firm specializing in IT security, in order to provide a unique perspective on complex GDPR issues.’

Principaux dossiers


  • Assisted a multinational IT service and consulting company with their compliance programme.
  • Assisting a US-based multinational healthcare company in global and local projects related to personal data.
  • Provided assistance to a leading communication group with respect to complex data protection issues.

UGGC Avocats

UGGC Avocats has a comprehensive data protection and privacy offering, covering GDPR consultancy, pre-litigation and litigation matters related to digital marketing, GDPR and compliance. The team handles matters both at the national and international level in a range of industries. Practice head Corinne Khayat is active in complex disputes. Anne-Marie Pecoraro is also noted.

Responsables de la pratique:

Corinne Khayat


Autres avocats clés:

Anne-Marie Pecoraro


Les références

‘The team boasts an extraordinary range of complementary expertise, enabling them to deliver a truly comprehensive service (covering data protection, AI act, and more). From the client’s perspective, this team is unparalleled, distinguished by its remarkable agility, outstanding performance in cutting-edge and innovative legal matters, and its unique ability to guide clients across the entire spectrum of IP, IT, communications, and entertainment law with unmatched mastery of the audiovisual sector. With their cross-disciplinary expertise and exceptional capacity to support media clients across diverse legal domains, the team provides a holistic, world-class service of the highest caliber.’

‘Anne Marie Pecoraro is my go-to lawyer for all matters related to data protection law, internationally recognized as an unrivaled authority in the market due to her exceptional expertise.’

‘Anne Marie Pecoraro delivers an extraordinary level of expertise in the relevant legal domains, seamlessly combined with an unparalleled strategic acumen. Her ability to analyze issues, anticipate developments, and strategize with keen intuition is nothing short of visionary. Anne thrives in the realm of innovation, effortlessly leveraging cutting-edge legaltech tools. She remains at the forefront of technological advancements, demonstrating effortless mastery of blockchain and cryptocurrency-related matters. Equally impressive is her global approach, underpinned by a deep understanding of international practices and standards, supported by her firm’s overseas offices and an extensive network of correspondents. Anne Marie’s exceptional personality and consummate professionalism make her not just an outstanding lawyer, but a truly remarkable one—a luminary in her field.’

‘Legal and technical excellence in their fields is their hallmark. They are truly committed to their clients, notably through their strategic and negotiation skills, as well as their strong interpersonal and ethical qualities. With a strong team spirit, they have excellent experts, some of the very best in their respective fields.’

‘The team in this area is an exemplary leader in innovation: technically superior, committed to diversity, and always at the forefront of innovation.’

‘Anne-Marie Pecoraro cultivates long-term client loyalty. She is passionate about the law, particularly in this area, and about negotiation. She is an invaluable asset to businesses navigating a rapidly changing world, keeping pace with all the upheavals, thanks to her experience and exceptional foresight. As an expert, she has mastered the most advanced techniques and combines them with a perceptive personality, resulting in strategic consulting being one of her greatest strengths. She possesses immense energy. She is the best, the most skilled, and the most passionate in her field.’

Principaux clients

Dedigroup


Solinest


Institut Pasteur


AAA DATA


Self Media


Régie Régionale des Transports de l’Aisne)


Giacometti


WeWork Paris


We Connect


TORNIKA Affimobiz


DPO CSE


Elyx


Susty


Bodyhit


Fred & Farid


White & Case LLP

Bertrand Liard and Clara Hainsdorf lead the sizeable data privacy and protection team at White & Case LLP. The group stands out for its technical expertise in the area of AI, covering generative AI, LLMs, machine learning and the supporting datasets. This is bolstered by the team’s strong litigation background, which sees it acting in some of the most high-profile enforcement actions in the EU.

Responsables de la pratique:

Clara Hainsdorf; Bertrand Liard


Les références

‘An indispensable team among the big firms.’

‘Clara Hainsdorf is extremely competent in data.’

‘Clara and her team have a very good understanding of our business and its constraints, which allows them to provide us with tailored solutions to best meet regulatory requirements. They also proactively assist us in negotiations with our stakeholders. The scope of work and the billing method are clear from the outset.’

‘Clara Hainsdorf has excellent knowledge of the legal field and is a good listener during brainstorming sessions.’

A&O Shearman

A&O Shearman‘s data team balances a busy and varied practice, covering everything from data use and monetisation to AI regulation, data contracts and enforcement cases. Cybersecurity is another area the firm has become increasingly prominent in. Practice head Laurie-Anne Ancenys works on contentious and non-contentious data privacy matters.

Responsables de la pratique:

Laurie-Anne Ancenys


Les références

‘Responsiveness, honesty, fluidity in relationships.’

Algo Avocats

Algo Avocats is a boutique firm rooted in data protection and privacy law, under the joint leadership of Sandra Tubert and Laura Ziegler. The team provides strategic advisory and litigation services, with expertise spanning GDPR audits, compliance and cross-border data transfers. It also advises on the feasibility of new data-driven projects, offering sector-specific guidance.

Responsables de la pratique:

Sandra Tubert; Laura Ziegler


Les références

‘We have a very good working relationship with Algo Avocats. A very responsive, competent, and pragmatic team.’

‘The Algo Avocats team distinguishes itself through its exceptional responsiveness and keen understanding of our clients’ business challenges. Their advice is pragmatic, solution-oriented, and delivered within often very tight deadlines, without ever compromising quality. They demonstrate attentive listening to client needs. The deliverables produced are always of a high standard, clear, and actionable for clients.’

‘Sandra Tubert stands out in particular. She is reliable, meticulous, and very clear in her communication, especially regarding deadlines. Her advice combines legal excellence with a business-friendly approach.’

‘Expertise in regulations concerning the protection of personal data, Flexibility in collaboration. Availability.’

‘Excellent technical capabilities, very high quality service and always punctual.’

‘Sandra Tubert’s team has shown great adaptability and expertise in our very specific and technical legal GDPR topics.’

‘Algo Avocat has a highly competent team led by Sandra Tubert. She is responsive and always up-to-date on the latest developments in data protection.’

‘Highly responsive, professional, and competent.’

Principaux clients

Deepomatic


WeChooz


Continuity


Escape


Principaux dossiers


  • Advised a French company on the launch of two AI projects, in accordance with the GDPR and AI Act.

CMS Francis Lefebvre

CMS Francis Lefebvre‘s data protection team acts for a broad range of clients, including public and private entities and domestic and international companies. Practice head Anne-Laure Villedieu specialises in information technology and data privacy. Maxime Hanriot and Pierre Fumery also provide support.

Responsables de la pratique:

Anne-Laure Villedieu; Sabine Rigaud; Jean-Baptiste Thiénot; Florentin Sanson


Les références

‘The advantage of CMS is that it has diverse expertise within its team, eliminating the need to engage another firm for this matter. This is all the more valuable given that GDPR sometimes involves employment law issues, and it’s crucial to have a comprehensive view, rather than a single perspective, to make the right decisions. I appreciated the team’s responsiveness, availability, expertise, and experience, and especially their pragmatic approach to finding the best solutions for these cases.’

‘Pragmatic, clear in explaining the issues to non-specialists and capable of understanding the operational problems.’

Principaux clients

Al Khaliji France


Adevinta


Bank of China


CTS Eventim


SPIE OPERATIONS


SPIE France


Newmont


Ideal promotion


Principaux dossiers


  • Advising Al Khaliji with respect to all its data protection issues, being appointed as external data protection officer of the company.
  • Assisted SPIE Operations in the deployment of a global GDPR compliance programme affecting all its subsidiaries.

De Gaulle Fleurance & Associés

With strong expertise in data protection laws and regulations, the team at De Gaulle Fleurance & Associés continues to advise clients across a wide range of data regulatory matters, spanning GDPR compliance, cybersecurity, blockchain and open data programmes. The practice is led by Matthieu Dary, a distribution, e-commerce and consumer information specialist. Cécile Théard-Jallu brings knowledge of R&D, tech transfers and sensitive data issues. Georgie Courtois left in June 2025.

Responsables de la pratique:

Cécile Théard-Jallu; Jean-Marie Job; Matthieu Dary


Les références

‘Responsive, highly relevant, offers easily accessible solutions for businesses, helps to clarify complex situations, very professional.’

‘This is one of the most dynamic and forward oriented law firms in France.’

‘Cécile Théard-Jalu is a great and broadly experienced lawyer in the tech law space – very result oriented and efficient!’

‘A team that listens, but above all: professionals in their fields of expertise! Regulatory and technical know-how.’

Principaux clients

Adobe


Alstom


Autodesk


Cegedim


Consortium Tehdas


Epic Games


Europrivacy


Gouvernement de la Guyane


Gouvernement de la Nouvelle Calédonie


Hopscotch


Kinova


Lanvin


Ledger


Legal Place


Meilleursagents.com


Monte-Carlo Société des Bains de Mer


MSF Médecins sans Frontière


Natixis


Orientis Kusmi Tea


Otonohm


Pole Systematic


SuperHot


UEFA


Vicat


Delsol Avocats

Delsol Avocats is a boutique firm dedicated to data privacy and data protection. Its work includes assisting clients with GDPR compliance and data impact assessments, and acting as DPOs for multiple organisations. Jeanne Bossi Malafosse heads the team and has a particular specialism in the healthcare and pharmaceutical sectors.

Responsables de la pratique:

Jeanne Bossi Malafosse


Principaux clients

ASTRAZENECA FRANCE


DOCAPOSTE


TAKEDA


IMPACT HEALTHCARE


BIOPTIMUS


CHATEAUFORM


CNGE


CONSEIL NATIONAL DE L’ORDRE DES PHARMACIENS (CNOP)


EURAZEO


OTSUKA PHARMACEUTICAL FRANCE


OWKIN


URBASOLAR


Principaux dossiers


  • Advised OWKIN on the implementation of a data warehouse (including strategic decisions and authorisation request to the CNIL).
  • Responsible for reviewing all contracts entered into by Eurazeo and its subsidiaries.
  • Advising Chateauform on the subject of data protection for its customers.

Freshfields LLP

Headed by Jérôme Philippe, Freshfields LLP‘s data team has strong expertise in the field as well as multi-jurisdictional coordination and advice capabilities. The team advises on AI and cybersecurity mandates, including data breaches, cyber threats, CNIL investigations and long-term strategic data processing activities. Laena Bouafy is a key contact.

Responsables de la pratique:

Jérôme Philippe


Autres avocats clés:

Laéna Bouafy


Les références

‘Laéna Bouafy – availability, clarity of analysis, expertise.’

Principaux clients

Swiss Insurance Company


Volkswagen Group


Principaux dossiers


  • Advising a Swiss insurance company on the data protection aspects of the sale of its French insurance portfolios.
  • Advising Volkswagen Group on various digital projects and data strategy.

Latham & Watkins

The team at Latham & Watkins draws together diverse expertise to provide comprehensive advice on data protection and privacy, which is further enhanced by the firm's global footprint. Its strengths include advising on the data aspects of large transactions, assisting domestic and international clients in enforcement actions and providing advice on AI systems and digital platforms. The practice is led by Myria Saarinen.

Responsables de la pratique:

Myria Saarinen


Principaux clients

Samsung


Principaux dossiers


  • Advised Samsung Medison on the data protection aspects of its agreement to acquire 100% of the shares of Sonio SAS.

Momentum Avocats

The dedicated data team at Momentum Avocats has quickly made a name for itself in the French market. The firm handles the entire scope of data privacy and protection on a local and global scale. The trio of Julie Carel, Julien Canlorbe and Jean-Sébastien Mariez head the team.

Responsables de la pratique:

Julie Carel; Julien Canlorbe; Jean-Sébastien Mariez


Les références

‘Momentum Avocats stands out for its sharp expertise and exceptional responsiveness, particularly valuable in a constantly evolving sector. The team is always up-to-date on regulatory and legal developments, which has allowed us to anticipate many strategic challenges.’

‘Their strength lies in their ability to handle complex and innovative issues, offering concrete solutions tailored to our specific needs. Their pragmatic approach, combined with a genuine understanding of our operational constraints, truly sets them apart from other firms in the market.’

‘In terms of innovation, Momentum Avocats distinguishes itself through its openness to new collaborative methods. The team also demonstrates great availability and excellent listening skills, fostering a relationship of trust and seamless communication. Combining expertise, innovation, and quality of service. Their constant support and agility make them a leading firm for managing complex and strategic cases.’

Nomos

Nomos has a dedicated data protection team that advises clients across a broad range of issues in the data privacy space, covering both advisory and contentious work. The team acts for clients in CNIL enforcement actions and also builds compliance programmes in relation to projects in the tech sector. The practice is led by Hélèna Delabarre.

Responsables de la pratique:

Hélèna Delabarre; Éric Lauvaux


Autres avocats clés:

Sylvain Naillat


Les références

‘An extremely available and efficient team, attentive to the practical needs of its clients.’

‘This is a competent and dedicated team. They understand the challenges of their clients’ businesses and have in-depth knowledge of their operations.’

‘The team stands out primarily for its excellent technical and regulatory expertise in personal data law, combined with a pragmatic and business-oriented approach. Unlike many competitors who adopt a highly theoretical approach, this team manages to translate legal obligations into concrete, operational, and immediately actionable solutions for clients.’

‘Its strengths and assets lie in: Recognized expertise in both GDPR and emerging issues related to AI, cybersecurity, and new digital uses. A strategic and forward-looking vision, enabling it to anticipate changes in regulations and prepare clients for future requirements. High responsiveness and availability, which provides reassurance. An innovative approach to working methods: integration of legaltech technologies, project management tools, diverse recruitment profiles, and transparent and tailored billing. A collaborative culture: the team operates seamlessly, in perfect internal coordination and with other departments, allowing it to offer integrated and silo-free advice.’

‘A very hardworking team, eager to bring added value to the client, and to do so with a pedagogical approach.’

‘Hélèna Delabarre, full of energy and with an excellent understanding of business issues, and Sylvain Naillat, a very effective teacher with refined expertise.’

‘Pragmatism, responsiveness, diligence, and excellent value for money.’

Norton Rose Fulbright

Norton Rose Fulbright has a strong reputation in the life sciences sector, with a deep knowledge of regulations and requirements. In addition, the firm leverages its global reach to assist local and international clients operating in consumer markets and all challenges faced under the GDPR.  Nadège Martin leads the data protection group.

Responsables de la pratique:

Nadège Martin


Les références

‘Good operational complementarity among team members, who work in good coordination, because certain specific cases, for the same subject, fall under several different legal areas to be dealt with effectively and completely.’

‘Maître Nadège Martin, who in addition to her expertise, knows how to unite people around her and effectively manage the multidisciplinary teams necessary for handling certain cases.’

Principaux clients

Schneider Electric


Pfizer


Groupe Beaumanoir


Société Générale


AIG


TotalEnergies


Mycronic AB


Allianz


Principaux dossiers


  • Assisting a leading French pharmaceutical company in respect of an early access authorisation related to gene therapies in France and advised on related data protection issues.
  • Advising Mycronic on the acquisition of Hprobe, a French provider of turnkey semiconductor Automatic Test Equipment (ATE) for magnetic devices.
  • Assisted a client in the drafting and negotiation of several transitional services agreements and a related data sharing agreement, and on data protection issues in the context of a deal.

Simmons & Simmons

The Simmons & Simmons data protection and privacy team counts financial institutions and TMT, healthcare and life sciences companies among its clients. The team advises both national and international clients, heavily benefitting from the firm’s broad European presence. The team was strengthened by the arrival of Georgie Courtois, whose expertise spans both litigation and advisory work in the life sciences sector.

Responsables de la pratique:

Sarah Bailey; Georgie Courtois


Autres avocats clés:

Emilie Danglades-Perez


Les références

‘Great team. Gives practical, sensible and commercial advice and a pleasure to deal with.’

‘A competent and responsive team that offers pragmatic solutions.’

‘Simmons & Simmons has been a trusted partner to my company for many years. They have a breadth of experience across areas relevant to the pharmaceutical business. Over the years, they have provided value add services and have been innovative in agreeing mutually beneficial engagements.’

‘S&S is expert in the EU data privacy space. They are responsive, thorough and consistently help us assess various solutions and present their advice in a clear manner that helps the in-house lawyers easily explain it to business colleagues.’

‘The team stands out for its accessibility and pragmatic approach. They work collaboratively, without any hint of superiority, while providing high-quality, clear, realistic, and actionable advice. Their mindset is decidedly solution-oriented (« can-do »). Another strength lies in their rigorous budget management: the team consistently works on a fee-based basis, adheres strictly to it, and provides transparent updates when an overrun is anticipated.’

‘Our main contacts are Sarah Bailey and Emilie Danglades-Perez. They are approachable, warm, and fluent in English, which is essential for cases with an international dimension. They stand out for their professionalism and the clarity of their advice, which is always concrete and immediately actionable. Unlike some, they don’t just raise problems or ask questions without offering solutions: their recommendations truly enable action and progress on cases. Their unassuming approach, combined with genuine expertise, clearly sets them apart from their colleagues at other firms.’

‘The data protection team, led by Sarah Bailey, is practical, technically skilled and communicates very well across the levels of seniority. The team has nuanced understanding of how data protection and employment law interact, and articulate risks and recommended actions clearly.’

‘Sarah Bailey is exceptionally well versed in advising on risks, practicalities and jurisdictional nuances for our data protection team. She has a wealth of experience, understands the differences in UK and French data privacy matters and is able to articulate the approach of the regulator so we understand clearly what the expectations and interpretation of the law is. Sarah has been incredibly helpful for our team and in a wider context for our company, helping us navigate data privacy with the required nuance.’

Principaux clients

Rhythm Pharmaceuticals


Hopscotch


Legalplace


Principaux dossiers


  • Assisting Rhythm in relation to the regulatory and data privacy aspects of its activities in Europe, both at EU level for GDPR and local laws.
  • Advised Hopscotch on ensuring compliance with GDPR requirements, drafting and negotiating data processing agreements and providing guidance on privacy issues.
  • Advised Legalplace on all aspects of its data privacy and AI matters.

Aumans Avocats

A boutique with offices in Belgium and France, Aumans Avocats repertoire encompasses GDPR advice as well as support in contract drafting and litigation related to IT projects. Recommended for its expertise in cybersecurity topics, the team is jointly led by Jérôme Deroulez and Jean-Charles Foussat, who split their time between Brussels and Paris, and Vincent Antraygues.

Responsables de la pratique:

Jérôme Deroulez; Jean-Charles Foussat; Vincent Antraguyes


Les références

‘This is a high-performing team capable of analysing a problem from various legal perspectives. Their ability to draw upon different branches of law, thanks to the diversity of their talents, allows them to propose innovative and strategic solutions tailored to the client’s specific needs.’

‘Jérôme Déroulez’s background in the judiciary provides him with a rare, comprehensive understanding of the issues at stake. His calm demeanor, his ability to listen, and his extensive legal knowledge offer his clients a valuable perspective and an unparalleled depth of analysis. His humility is deeply appreciated.’

‘Jérôme Deroulez was able to adapt perfectly to the client’s specific context.’

Principaux clients

SKEZI


GIP


Farmasi


ELMY


Honotel Development


Zadig & Voltaire


Principaux dossiers


  • Advising Zadig et Voltaire, in connection with specific actions to ensure compliance with personal data protection legislation.
  • Assisting Honotel as external Data Protection Officer (DPO) for the group’s hotels as well as for the holding company.

Bersay

Bersay‘s data team is well versed in the complex cross-border GDPR compliance issues faced by European and international companies. In addition, the team is able to advise across the entire scope of data governance. Bradley Joslove brings a US legal background and expertise. Frédéric Lecomte is another name to note.

Responsables de la pratique:

Bradley Joslove; Frédéric Lecomte


Principaux clients

Science Corporation


Green City Immobilier


Publicis


Abbott


Monday.com


Domos


Buildots


Principaux dossiers


  • Advising a French real estate developer on its GDPR compliance on a day-to-day basis after implementing a comprehensive GDPR remediation programme.

Bignon Lebray

The dedicated data team at Bignon Lebray has particular expertise in the healthcare and life sciences sectors. Nicolas Moreau regularly advises on GDPR, focusing on health data issues. Benjamin Mourot is another key name.

Responsables de la pratique:

Nicolas Moreau


Autres avocats clés:

Benjamin Mourot


Les références

‘Availability, responsiveness, teaching skills.’

‘Master Moreau: very attentive, available, responsive and very clear in his explanations.’

‘Skills, adaptability to the IT context and to our business context.’

‘Mr. Benjamin Mourot is exceptional in his understanding of IT and interpretation in his field.’

Principaux clients

Leetchi I-Raiser


EY Société d'Avocats

EY Société d'Avocats has been providing data privacy assistance to leading multinational companies across a broad range of industries. The team is led by Fabrice Naftalski, who advises on the implementation of data protection compliance programmes, GDPR and data transfers.

Responsables de la pratique:

Fabrice Naftalski;  Yaël Cohen-Hadria;  Sandrine Cullaffroz-Jover; Fablet Mael


Les références

‘A diverse team with varied skills (legal, regulatory, and more operational) and varying levels of experience.’

‘Good knowledge of the texts and market players affected by the regulations, with an international perspective.’

‘A team remarkable for its constant availability, attentive listening, and impressive efficiency.’

Principaux clients

Optical Center


BMW


Schneider Electric


H&M


Campus France


FÉRAL

FÉRAL brings longstanding experience in French data protection, with a team known for its broad knowledge in the protection, security and cross-border transfer of personal data. Richard Willemant leads on GDPR compliance audits, and Olivia Luzi adds expertise in transactional and compliance matters involving data privacy and regulatory obligations.

Responsables de la pratique:

Richard Willemant; Olivia Luzi


Les références

‘A highly skilled and expert team. Excellent work. Partners who listen to clients’ needs.’

‘A specialized and multi-skilled team in Tech & Data. We appreciate the availability and responsiveness of the teams led by Olivia Luzi. They are efficient, respect deadlines, and anticipate our needs. The level of service is truly excellent.’

‘The FÉRAL team is distinguished above all by its high level of expertise, its innovative spirit, and its strong team cohesion. Each member of the team is available, rigorous, and driven by a genuine passion for intellectual property law. A culture of excellence is deeply ingrained in the firm’s practice: legal precision is always coupled with a nuanced understanding of the economic, artistic, and technological implications of each case. Their approach combines solid academic and litigation experience with exemplary responsiveness.’

‘At FÉRAL, Richard Willemant has established himself as a leading expert in personal data protection. His expertise is distinguished by a strategic, rigorous, and pragmatic approach, capable of reconciling the legal requirements of the GDPR with the operational realities of businesses. Richard Willemant demonstrates a keen understanding of the technical and organizational challenges related to data processing. His strength lies in his ability to translate regulatory complexity into concrete solutions tailored to the size, sector, and maturity of each client.’

‘Richard Willemant also distinguishes himself through his exceptional responsiveness and reliability. His analysis is always precise, well-reasoned, and focused on efficiency. He succeeds in establishing a climate of trust by combining advanced legal expertise with exceptional listening skills.’

‘A team of dedicated and competent colleagues.’

‘Richard Willemant is a leader in his field. Innovative and recognized for his expertise and keen market knowledge, he is now a leading figure in his areas of expertise. He is also highly responsive and available. An expert in both advisory and litigation matters.’

‘Olivia Luzi: Partner in charge of IT, tech, and data matters at the firm. An excellent negotiator, well-versed in market practices. Always available, even in emergencies. Attentive to needs, and never a problem: only solutions.’

Principaux clients

BIOGARAN


DQE SOFTWARE


ANJAC HEALTH & BEAUTY


RYDGE CONSEIL


CRX SOFTWARE (RAILCUBE)


ENSO


Principaux dossiers


  • Advised a major French industrial group specialising in health and beauty, as well as its affiliated entities, in the context of a GDPR compliance review and update.

Klein Wenner

Klein Wenner is well versed in a range of technology and data matters, ranging from software and database creation to cross-border management of data transfers, AI systems and a niche in crypto-related data breach litigation. Matthieu Bourgeois and Laurent Badiane jointly lead the department.

Responsables de la pratique:

Laurent Badiane; Matthieu Bourgeois


Principaux clients

Stellantis Financial Services


Hitachi Solutions


Cewe


Lucky Cart


Totum Pharmaciens


Heva


Bedrock


Principaux dossiers


  • Advised Stellantis Financial Services on the negotiation of strategic and complex IT contracts with suppliers of software solutions.
  • Assisting Hitachi Solutions in negotiating an important agreement notably implying issues relating to personal data and intellectual property and on a day-to-day basis regarding commercial and personal data matters.

NEXT AVOCATS

NEXT AVOCATS‘ data privacy team is active in compliance audits, data processing and data breach crisis management. The team also assists clients during CNIL investigations. Practice head Étienne Papin assists on all GDPR compliance issues, including data breach management and cyberattack mitigation.

Responsables de la pratique:

Étienne Papin


Autres avocats clés:

Lucas Gomes


Les références

‘Available and pragmatic team – attentive to client needs – with unbeatable value for money.’

‘Availability, client focus, ability to reassure.’

‘Attorneys Etienne Papin and Lucas Gomes are the two who work with us at this firm. Both possess the following qualities: availability, client focus, and the ability to reassure.’

Principaux clients

Groupe UP


OPCO 2i


MediaTransports


Association de Garantie des Salaires (AGS)


Principaux dossiers


  • Assisted a French advertising company during an unannounced on-site inspection by the CNIL, providing immediate on-site assistance and support to its client throughout the data protection inspection.
  • Assisting a leading European real estate services provider in maintaining GDPR compliance across all group companies, managing responses to data subjects exercising their rights, and operating a customer and prospect database.
  • Advised a company on bringing its video surveillance system into compliance, including analysing applicable data protection regulations and obtaining the necessary administrative authorisations.

PwC Société d'Avocats

Valérie Aumage heads the IT and data protection team at PwC Société d'Avocats, which advises clients on digital project structuring, e-commerce, ad tech and digital marketing. The team draws on the multifaceted and cross-sectoral expertise of the wider firm to handle global data compliance and cybersecurity issues for clients.

Responsables de la pratique:

Valérie Aumage


Les références

‘Valérie Aumage is a highly experienced lawyer, with a perfect knowledge of her field and the needs of her clients.’

‘A very large and well-proportioned team with excellent knowledge of all sectors. They are proactive in addressing all important issues in this field.’

‘Here are the team’s main strengths: Expertise of the teams in Data Privacy topics, global network of experts, and understanding of our challenges and a focus on finding solutions.’

Principaux clients

Montefiore Investment


IN Groupe


Principaux dossiers


  • Advised Montefiore Investment on the data protections aspects of its acquisition of Sahar.
  • Advised IN Groupe on the acquisition of the Smart Identity activities from IDEMIA Group, covering due diligence with regards to data compliance.

Racine

With recent expansion at the associate level, Racine continues to act for international clients across the spectrum of data privacy and protection issues. Headed by Eric Barbry and Charles Bouffier, the team notably handles GDPR implementation, cybersecurity strategies, AI governance and data processing terms.

Responsables de la pratique:

Eric Barbry; Charles Bouffier


Les références

‘Highly effective and excellent knowledge of the environment and its stakeholders.’

‘Eric Barbry stands out for his pragmatism.’

‘Its responsiveness and its ability to offer business compliant solutions.’

‘I find the Racine team and the perfect legal continuity of our services to be invaluable. They are an ideal partner on all matters concerning individual rights. Racine and their teams have been by my side, helping me manage significant issues and advance the company’s key projects.’

‘Strengths/assets of the firm: availability, friendliness, professionalism, and responsiveness.’

‘The team is readily available and provides pragmatic responses to requests. They offer excellent client support, anticipating needs as much as possible and ensuring compliance with personal data protection regulations.’

‘Eric Barbry: I particularly appreciated his sharp expertise and his ability to get straight to the point. His answers are always well-reasoned, with a clear and confident opinion. He demonstrates a great capacity for adaptation, especially in taking into account the company’s constraints and availability.’

‘A very pragmatic team with excellent business acumen.’

Principaux clients

Netflix


Nuxe


Orange Bank


Le Point


Sarenza/Groupe Beaumanoir


Taylor Wessing

Marc Schuler leads Taylor Wessing's data protection practice, handling regulatory, advisory and transactional mandates across the technology and digital sectors. The team assists with GDPR programmes and impact assessments. Benjamin Znaty provides additional support, with a focus on IT, fintech, e-commerce and digital media.

Responsables de la pratique:

Marc Schuler


Principaux clients

Oppo Telecom


Tekion


Laduree


Amazon


Sediver


Covivio


Comcast


Cimpress


Airship


Hiscox


Zurich Insurance


Allianz


Altus Group


Live Nation


Inogen


Pixarprinting


Orion


Ricoh


Principaux dossiers


  • Assisting Hiscox in relation to its cyber cover and corresponding claims and on aspects of its internal GDPR compliance programme.
  • Assisting Zurich on a regular basis with GDPR compliance issues.
  • Assisting Allianz in a global IT and data regulation mapping and monitoring project to assist the group in anticipating and implementing relevant regulation in the evolution of the IT landscape.