The powerhouse data privacy and data protection practice at Alain Bensoussan-Avocats Lexing remains a market leader, advising banks (First Abu Dahbi Bank), insurers, higher education establishments, trade federations and associations, law firms, and the Louvre, as well as corporates in hospitality, automobiles, healthcare, food and pharmaceuticals. Led by advanced technology and data protection legal authority Alain Bensoussan, Chloé Torres (an expert in data regulatory compliance) and experienced data protection litigator Virginie Bensoussan-Brulé, the group’s comprehensive service extends to the auditing of legal compliance of information systems with privacy requirements, the management of prior administrative formalities with the French data protection authority (CNIL), assistance with CNIL inspections and the implementation of Data Protection Officers (DPO) policies.
Data privacy and data protection in France
Alain Bensoussan-Avocats Lexing
Alain Bensoussan; Chloé Torres; Virginie Bensoussan
Other key lawyers:
Céline Avignon; Anne Renard; Frédéric Forster; Jérémy Bensoussan; Emmanuel Walle; Isabelle Chivoret
‘Alain Bensoussan Avocats Lexing stands out for the advanced technologies put in place to support its clients. Always personalised support and appropriate advice. Alain Bensoussan Avocats Lexing is a resource that allows us to feel secure in our procedures and our processes thanks to the system of trust that it has established.’
‘I had the immense honour and pleasure of working with Alain Bensoussan, who is impressive for his quick and fair analysis of situations.’
‘Virginie Bensoussan is very attentive, available and very professional.’
Musée du Louvre
Fondation Abbé Pierre
First Abu Dahbi Bank
Les Hôtels Baverez (Hôtel Raphaël, Hôtel Regina, Majestic Hôtel)
Conseil Général d’Île-de-France
Institut supérieur de l’aéronautique et de l’espace
Ficime (Fédération des Entreprises Internationales de la Mécanique et de l’Electronique)
Syndicat intercommunal de la Périphérie de Paris pour les réseaux de communication
Syndicat Intercommunal Funéraire de la Région parisienne
Régie Réunion THD
Service Général de Médecine Conseil et Contrôle des industries électriques et gazières
ACM Habitat (Office public de l’Habitat de Montpellier Méditerranée Métropole)
Groupement pour l’itinérance des recharges électriques de véhicules
Comité Interentreprises Thales et adhérents
Laboratoire de Biologie du Val d’Orme
Consulting Service by Randstad
Gitec Human Resources
Etablissement public de coopération interdépartemental Yvelines Hauts de Seine
GIE Aréa Santé
Commune de Puteaux
Commune de Rosny-sous-Bois
Commune de Saint-Ouen
Commune de Bussy-Saint-Georges
Commune de Villejuif
Commune de Villeneuve-la-Garenne
Commune de la Courneuve
Commune de la Garenne Colombes
Commune de Clichy
Commune de Villepinte
Lucy In the Sky with Data
- Acting as the outsourced DPO for some fifty entities of Orpea Group, a French private listed group providing healthcare services and homes for the elderly.
- Acting for around 20 entities of Synlab Group, a global group of laboratory diagnostic/test services.
The data privacy and protection team at August Debouzy remains a leader in the marketplace, providing a comprehensive service to corporates in media (JCDecaux), tech (Microsoft), food (Danone), tobacco (Philip Morris), energy, sports (FIFA), beverages (Pernod Ricard) and hospitality. Headed by Florence Chafiol, an expert in data privacy litigations with the French Data Protection Authority (CNIL), the group also advises on data protection/privacy audits, the implementation of compliance programs, crisis management and due diligence. Other key figures in the team include senior associate and data protection compliance specialist Roxane Blanc Dubois, senior associate Stéphanie Lapeyre (who focuses on new technologies).
Other key lawyers:
Roxane Blanc Dubois; Stéphanie Lapeyre; Alice Hourquebie
‘Good understanding of customer needs and price adaptation. Very good technical knowledge. Competent, friendly and responsive team.’
‘Florence Chafiol is an outstanding support in our current endeavours with the French Data Protection Authority.’
‘Clear guidance in a proactive approach.’
‘Always prompt and great to deal with, positive and helpful and responsive.’
‘Florence Chafiol is a technical expert who combines this expertise with charm with hard work and real world client experience. The result is always the best for clients and for instructing lawyers alike.’
‘Excellent firm with partners who are experts in their field.’
‘Florence Chafiol is an excellent lawyer who provides advice and legal services of the highest standard.’
Total Energies Electrice et Gaz France
France Médias Monde
Omnicom and its affiliates (TBWA -Fleishmann Hillard – Omnicom Public Relations Group, MMG etc.)
Philip Morris France
TotalEnergies SE & Total Global Procurement
La Poste Telecom
My Money Bank/Cerberus
- Assisting Pernod Ricard’s data protection team with regards to various data protection issues, including marketing, social media and e-commerce.
- Assisting, from a data protection prospective, Cerberus/My Money Bank Group, in the context of the purchase by MMB of HSBC Continental Europe’s retail banking business in France.
- Assisting the DPO team of GIE AXA in several matters related to the implementation of global projects among the AXA Group and on day-to-day issues related to the compliance with the GDPR of the AXA Group.
With locations spanning America, Asia Pacific and EMEA, the Paris-based data privacy and data protection team at Baker McKenzie remains a force in the marketplace, leveraging the experience of its team and the bench strength of its global network to advise financial institutions (BNP Paribas, Crédit Agricole) and corporates in tech (Oracle), aviation, IT, fashion, e-commerce, luxury goods, logistics and automobiles, on a diverse spectrum of matters. Co-headed by personal data practice leader and compliance authority Yann Padova, the group assists clients with algorithm ethics, data governance, data processing, cybercrime and litigation and enforcement issues. Magalie Dansac Le Clerc brings expertise to consumer protection, GDPR and outsourcing projects.
Rémy Bricard; Laurent Szuskin; Yann Padova
Other key lawyers:
Magalie Dansac Le Clerc
‘Yann Padova is by far the best privacy lawyer in France, and definitely among the top 10 in Europe. He knows the tech industry extremely well, and also the regulatory environment in the EU. His advice is very strategic and extremely well thought-through.’
‘The Baker McKenzie team in Paris offers both the most cutting-edge expertise on the market, availability at all times, and a very appreciable simplicity in exchanges.’
‘Yann Padova is one of the most recognised experts in France and Europe in the field of data protection. Yann is consulted regularly, in addition to his clients, by the public authorities on major societal issues.’
Crédit Agricole Group
With locations spanning America, EMEA and Asia Pacific, the privacy and data protection group at Bird & Bird continues to lead in this arena, combining deep bench strength with the expertise of its team to advise major corporates across such sectors as telecoms, cosmetics, luxury goods, beverages, tech, pharmaceuticals and athletics, on a comprehensive range of matters. Led by data compliance authority Ariane Mole and personal data and cybersecurity expert Merav Griguer, the group’s full service extends to investigation procedures, litigation before CNIL, security breach and ransomware effects, data protection agreements, privacy impact assessments and GDPR-required procedures. Other key figures include counsel Willy Mikalef (a data breach specialist), senior associate Oriane Zubcevic and associate Wissem Addoun.
Ariane Mole; Merav Griguer
Other key lawyers:
Willy Mikalef; Oriane Zubcevic; Wissem Addoun
‘Merav Griguer of the personal data protection division has set up a team of 4 people with very good comprehensive expertise on the complex subjects related to the application of the GDPR. The team knows how to show great reactivity and agility on all issues. Total mobilisation and dedicated, tailor-made support in the event of a crisis or complex file.’
‘Dynamic and very available team; adaptation to customer needs and implementation of tailor-made solutions.’
‘Ariane Mole and Willy Mikalef bring experience, clarity, operational and pragmatic vision of the subjects.’
The data privacy and data protection group at DLA Piper continues to be a leader in the market, utilising its global footprint (spanning America, Europe, the Middle East, Africa and Asia Pacific) and the practice area expertise of its team to advise major financial institutions and corporates across such sectors as pharmaceuticals (Pierre Fabre Group), beverages, retail, tech, cosmetics, aerospace and hospitality, on a diverse spectrum of issues. Headed by Denise Lebeau-Marianna, who brings over 25 years of experience in the data protection and compliance arena, the group assists with matters ranging from global data transfers and transfer impact assessments, global personal data protection compliance projects and cybersecurity incident response to projects involving emerging tech (AI, the metaverse), and approvals from data protection authorities. Other key figures include domestic and international dispute resolution expert Fabienne Panneau, Jonathan Rofé (who handles multi-jurisdictional outsourcing projects), IT dispute specialist Stéphane Lemarchand, counsel Jeanne Dauzier and senior associate Yaël Hirsch.
Other key lawyers:
Fabienne Panneau; Jonathan Rofé; Stéphane Lemarchand; Jeanne Dauzier; Yaël Hirsch
‘The collaboration with DLA Piper is interesting in that it offers internal tools and a pragmatic approach to the files entrusted to it.’
‘Denise Lebeau-Marianna has a very pragmatic approach, which enables her to quickly identify the problem and propose an appropriate response. In particular, she and her team know how to offer media that differ from the simple memo to create a document that is a daily working tool for legal teams. Warm and simple contact.’
Health Data Hub
Pierre Fabre Group
- Advising Health Data Hub on the likelihood of application of US surveillance laws to the data hosted on HDH platform by Microsoft Azur.
- Advised a major aeronautic company’s data protection office on all its strategic data privacy matters, including new AI research projects and the implementation of a global training program for pilots and technicians.
- Assisting in the implementation of a cosmetics company’s GDPR compliance program.
The market-leading privacy, cybersecurity and data innovation practice at the Paris office of global law firm Gibson Dunn brings strength and experience to advising major multinational corporates across such sectors as fashion (Louis Vuitton), tech (Meta), automobiles (Renault), utilities (Suez) and video games, on a diverse spectrum of matters. Led by GDPR compliance and governance expert Ahmed Baladi and Vera Lukic (a specialist in IT and outsourcing projects), the group assists on matters ranging from investigations and procedures before the French data protection authority, data breaches and national security matters to aspects of M&A projects, investigations involving data transfers between the EU and the US and cross-border litigation.
Ahmed Baladi; Vera Lukic
‘Strong team comprising very experienced lawyers who have a keen understanding of GDPR issues.’
‘Hardcore data protection expertise, coupled with the ability to get to grips with new technologies quickly and think creatively in order to provide practical advice.’
‘Ahmed Baladi is the market leader when it comes to advising on data protection issues as they apply to novel technologies. Vera Lukic is also a very strong lawyer.’
Platinum Equity Advisors, LLC
Unibail Rodamco Westfield
The data protection and data privacy team at Gide Loyrette Nouel A.A.R.P.I. remains a key player in the marketplace, providing comprehensive support to major financial institutions (Crédit Agricole), insurers and corporates in media (France Televisions), luxury goods, telecoms, automobiles, tech and energy. Practice area expert Thierry Dor heads the team, bringing strength to global data transfers, personal data processing matters and GDPR compliance. Supported by senior associate Dane Tacchini (a specialist in the implementation of cross-border compliance projects related to global information technology systems, the group’s full service offering also extends to cover data breaches, cookie management and e-privacy related obligations.
Other key lawyers:
‘We appreciated the availability of the team and its support.’
Herbert Smith Freehills LLP
Harnessing the bench strength of offices across the Americas, Asia Pacific and EMEA regions, the experienced IP and TMT team at the offices of Herbert Smith Freehills LLP advise major financial institutions, insurers and corporates across the tech (Google), energy, pharmaceuticals, automotive and travel (Expedia) sectors, on the full range of data privacy and data protection matters. Led by Alexandra Neri, an expert in data protection issues and breaches in information systems, the group assists clients with matters ranging from cyber-criminality, dawn raids and privacy issues and dawn raids to data transfer conflicts, licensing, litigation and pre-litigation. Other key figures include personal data rights specialist Sébastien Proust, associates and experienced IP lawyers Laure Cardinet and Suzanne Carayol, and Antoine Sullice, who handles matters involving tracking technology compliance. Associate Robin Nini joined from Alain Bensoussan-Avocats Lexing in March 2022.
Other key lawyers:
Sébastien Proust; Laure Cardinet; Suzanne Carayol; Antoine Sullice
‘Active and always up-to-date with new regulations and ability to provide practical advices.’
EXPEDIA GROUP/ Homeaway
- Assisting Google in a litigation related to Google’s terms and conditions of use and privacy policies, in line with consumer law and data privacy law (GDPR).
- Assisting Google in several ongoing disputes brought by professional individuals regarding their personal data used in professional listings that appear in Google results.
Based in Paris, the tech, commercial and data team at global firm Clifford Chance brings experience to data privacy and data protection matters, advising major asset managers (Amundi) and multinational corporates in mining (Sibanye Stillwater), telecoms (MTN), tech (Oracle), e-commerce, motor vehicles (Honda), pharmaceuticals and video games. Helmed by Dessislava Savova (who brings expertise to data protection, cybersecurity, platform regulations and AI), the practice assists clients with disputes, data governance, crisis management, digital transformations, compliance investigation and GDPR programmes. Counsel Grégory Sroussi brings strength to cybersecurity IT matters, while senior associate Alexandre Manasterski specialises in the setting-up of strategic partnerships.
Other key lawyers:
Grégory Sroussi; Alexandre Manasterski
‘I very much appreciated my collaboration with the teams of Clifford Chance, in particular, Dessislava Savova and Alexandre Manasterski.’
‘The team is very responsive and offered us a platform that allowed us to simplify exchanges and the production of established documents.’
‘Alexandre Manasterski is reactive and offers pragmatic solutions to the operational problems of the project. In addition, he has understood and integrated the way our society works and knows how to react, accordingly.’
- Assisting Legrand with the launch of home products connected with an online app controlled by users.
- Assisted Oracle with several proceedings and initiatives around the globe against competitor’s data collection, processing and combination practices and their effects on competition in the online targeted advertising and advertising supported service markets.
- Assisted Hitachi in respect of data protection issues arising from personal data transfers outside of the European Union to other entities of the Hitachi Rail group, as well as to third parties.
The Paris-based technologies, media and communications group at CMS Francis Lefebvre employs the experience of its team to assist financial institutions (Bank of China) and multinational corporates in mining (Newmont), aviation, tech, e-commerce, automobiles, engineering, construction and consumer products, on a diverse spectrum of data privacy and data protection matters. Headed by Anne-Laure Villedieu, who brings expertise to representing clients before the courts or the data protection authorities, the practice assists with auditing processing systems, data protection compliance, privacy impact assessments and personal data transfers. The team is supported by senior associate Maxime Hanriot, a specialist in cybersecurity.
Other key lawyers:
Al Khaliji France
Bank of China
- Advising Al Khaliji with respect to all its data protection issues, as its appointed external data protection officer.
- Assisting with a global GDPR compliance program for SPIE Operations affecting all subsidiaries of the SPIE Group.
The data protection and data privacy practice at the Paris offices of De Gaulle Fleurance & Associés provides a one-stop-shop to assist financial institutions (Natixis), government bodies and multinational corporates in water treatment services (Culligan), computer software (Adobe), video games (Epic Games), retail (CVS), IT and construction. The group’s comprehensive service assists with matters ranging from mobility databases opening programmes, HR digitalisation processes and GDPR compliance to assistance with blockchain platforms, cybersecurity, and competition law in the context of data issues. The team is led by software anti-piracy and cyber criminality expert Georgie Courtois, e-commerce and consumer information specialist Matthieu Dary and Cécile Théard-Jallu, who brings expertise to R&D issues and technology transfers.
Georgie Courtois; Matthieu Dary; Cécile Théard-Jallu
‘Cécile Théard-Jallu has good expertise in GDPR.’
‘Practice of expertise with collaborative work.’
‘Very strong business and sector skills, responsiveness.’
Alliance Digitale Maladie Coronavirus.fr
Département des Yvelines – E-tonomy
Gouvernement de la Guyane
Gouvernement de la Nouvelle Calédonie
Monte-Carlo Société des Bains de Mer
MSF Médecins sans Frontière
Orientis Kusmi Tea
The team at Derriennic Associés utilises the experience of its team to assist software publishers, IT service providers, IT manufacturers, insurers and major corporates in energy (EDF subsidiary Dalkia), healthcare, electronics (Xiaomi), automobiles, cosmetics, food and beverages (Heineken), on a wide range of data protection matters, with a speciality in the handling of cyberattacks. The group is headed by Francois-Pierre Lani, an expert in new technologies, Alexandre Fievee, who advises clients in the IT, banking, AI and sports sectors, veteran litigator Bruno Ducoulombier, digital transformation project specialist Pierre-Yves Margnoux and Georges Jenselme, who brings strength to health and insurance matters.
François-Pierre Lani; Alexandre Fievee; Bruno Ducoulombier; Pierre-Yves Margnoux; Georges Jenselme
‘The team is attentive, proactive and shows great pragmatism.’
‘A team with an excellent technical level and very responsive.’
‘Alexandre Fievee is attentive to the imperatives and operational challenges of companies.’
Fondation Pierre Fabre
La Banque Postale
- Advised one of its new clients – a leading wholesale broker in France – in the context of a cyberattack.
- Supported a French multinational in the food industry and its task force dedicated to protection against cyberattacks in their activities/needed related to data protection.
The digital asset specialists at boutique firm Féral bring strength to advising start-ups and domestic and multinational corporates across such sectors as e-commerce, manufacturing, fashion, insurance, aerospace, on a diverse spectrum of matters. The team’s comprehensive service covers matters ranging from the drafting of personal data transfer agreements, data protection compliance audits and drafting IT guidelines to advising on security and archiving policies and providing assistance and training to Data Protection Officers (DPO). Key figures include founding partner Christiane Féral-Schuhl, who brings more than 30 years handling cases involving computer law, information technology law, media law and data protection law; IP and data privacy expert Richard Willemant, who is also a mediator accredited by the Quebec bar; and Farid Bouguettaya, whose practice extends to transactional, litigation and pre-litigation matters. The team is supported by senior counsel and firm data protection officer Justine Sinibaldi, who brings over 15 years in the personal data space.
Other key lawyers:
Christiane Féral-Schuhl; Richard Willemant; Farid Bouguettaya; Justine Sinibaldi
- Assisting a startup with its data protection and GDPR governance, compliance programme and contract negotiations.
- Assisting the French companies of a group in the steel industry with respect to GDPR compliance, acting as Data Protection Officer for all entities in France.
- Assisting the owner of commercial property in continental Europe with respect to GDPR issues, such as information and data protection policy, explicit consent, data retention period, marketing operations and relations with data processors.
Harnessing the bench strength of offices across the Americas, Asia Pacific and EMEA regions, the privacy and cybersecurity team at Hogan Lovells (Paris) LLP advises major insurers and multinationals in media (Groupe Canal+), transport (Aéroports de Lyon), pharmaceuticals (Bristol Myers Squibb/Celgene), manufacturing (General Electric Healthcare), financial services and tech on a broad span of contentious and non-contentious matters across the practice area. These include issues related to IT and telecom infrastructures, digital media, e-commerce and regulatory compliance. The team is led by TMT and data privacy expert Etienne Drouard, cybersecurity specialist Patrice Navarro, experienced IT litigator Christine Gateau; David Taylor, who handles matter related to domain names, and Mikael Salmela, who advises on health tech matters. Maimouna Goudiaby was promoted to counsel in January 2023.
Etienne Drouard; Patrice Navarro; Christine Gateau; David Taylor; Mikael Salmela
‘Hogan Lovells is a firm made up of very close-knit and perfectly synchronised people. Very fast in the treatment of our requests and very reactive in case of emergencies, all the collaborators of the firm have the same objective, the satisfaction of the customer.’
‘Etienne Drouard is competent, available and very pleasant. His great expertise, combined with a very poised and reassuring personality, make him a key partner in the handling of our cases.’
‘Patrice Navarro is particularly attentive to the needs of our company. He understands and adapts to certain innovative positions and allows reflections on new subjects by helping us to support our position. He knows how to be flexible and solution-oriented, while recalling the risks to be taken into account, without falling into an overly conservative approach.’
‘Excellent consulting expertise in the fields of new information, communication and audiovisual technologies and digital services, which distinguishes this practice from other firms.’
‘Patrice Navarro is the best professional in data protection law in Paris bar.’
Groupe CANAL +
Aéroports de Lyon
Bristol Myers Squibb / Celgene
General Electric Healthcare
Doctolib (investment funds Eurazeo, BPI France and Accel)
Backed by a global network spanning five continents, the data protection, privacy and security group at K&L Gates LLP assists financial institutions and multinationals in mining, biotech (Anika Therapeutics), energy (Envision), home appliances (SharkNinja), pharmaceuticals (Ipsen), manufacturing (K&N Engineering), luxury goods and tech, on wide array of matters across the practice area. Headed by Claude-Etienne Armingaud, an expert in multi-jurisdictional transactional matters, dealing with IT outsourcing and data protection, the group also assists clients with GDPR compliance, data sharing agreements and data protection elements of M&A transactions.
‘The team has been able to position itself and develop expertise on relevant/current topics. It also works in close collaboration with teams in other countries in a fairly simplified way.’
‘Claude Etienne Armingaud is, in my opinion, the partner who stands out for several reasons. Beyond the legal skills, he demonstrates a very good knowledge of technological subjects and privacy implications. In addition, he invests heavily in the development of privacy professionals, whether young lawyers, jurists or others.’
Anika Therapeutics S.r.l.
Cyber Civil Rights Initiative
La Boite à Encas d/b/a Foodles
Wiluna Mining Corporation Limited
World Organisation for Animal Health
Young Presidents’ Organization
- Operating a pro-bono initiative, the Cyber Civil Rights Legal Project, which offers free legal services to individuals who fall victim to acts of ‘revenge porn’, i.e. the unauthorised dissemination of intimate content online, often associated with various other acts of harassment and online bullying.
- Assisted Securitas, an operator in the security field, in the data protection due diligence, master agreement and disclosure schedules for the acquisition of a large group of more than 10,000 employees (4,000 employees in France).
- Advising Maytronics, an Israeli-based manufacturer of robotic pool cleaning equipment, with updating its internal and consumer facing policies and practices to help ensure its global data protection compliance, notably with regard to the EU and UK GDPR, the CCPA and upcoming US legislations.
Backed by the strength of a global network spanning North America, Europe, the Middle East and Asia Pacific, the Latham & Watkins data privacy and data protection practice in Paris brings strength to advising a broad clients base, from private investment firms to multinational corporates in tech (Meta), energy, luxury goods and retail. Headed by seasoned data protection litigator Myria Saarinen, the group’s offering extends to GDPR compliance and regulatory issues, data breaches and cybersecurity and disputes and regulatory enforcement.
‘The team is very responsive, provides tactical advice, has good connections with and knowledge about the French data protection authority.’
‘Myria Saarinen is very responsive and makes the time to connect to discuss complex matters. She provides a tactical vision to matters, taking into account local practices and realities.’
Meta Platforms, Inc.
- Advising Meta (formerly Facebook) in relation to a number of highly -complex and multi-jurisdictional regulatory investigations and inquiries regarding alleged data breaches and compliance with data protection laws generally, and any related litigation.
Headed by digital platform advisory specialist Claire Bouchenard and experienced IP litigator Xavier Pican, the Paris-based technology, innovation, media, fintech team at Osborne Clarke brings strength to assisting multinationals in retail (Carrefour), tech, software, apparel, food (Danone) and professional services, on a broad range of data privacy and data protection matters. Supported by Sarah Lenoir (who handles cases involving AI, smart data and blockchain) and counsel Grégoire Dumas (a GDPR specialist who was promoted in January 2022), the group assists with digitalisation programmes, data privacy compliance programmes and cybersecurity response to data breaches. Partner Béatrice Delmas-Linel departed and Julia Darcel was promoted to counsel in January 2022.
Claire Bouchenard; Xavier Pican
Other key lawyers:
Sarah Lenoir; Grégoire Dumas
Groupe La Francaise
Supplay (Manpower Affiliate)
- Assisted professional services company Manpower as an external temporary DPO.
- Providing a privacy training to all the legal team in Danone to negotiate DPAs.
- Assisting Baxter in global and local privacy projects: on assessment, recommendation and implementation, and on geolocation, a distribution agreement, HDS and a partnership agreement.
The team at the Paris office of global law firm Taylor Wessing utilises the combined bench strength of its data privacy, IT and IP practices, to advise a broad client base, ranging from major insurers (Zurich, Hiscox) and crypto platforms (Messari) to corporates in e-commerce (Amazon), tech (IBM), telecoms (Comcast), media, pharmaceuticals and fashion. Led by Marc Schuler, who brings over 20 years of experience in the IT and digital industries space, the team assists with data protection governance schemes, GDPR compliance data protection audits and impact assessments. New associates Alix Capely and Hugo Khalfallaoui arrived in September 2022.
Other key lawyers:
Benjamin Znaty; Alix Capely; Hugo Khalfallaoui
- Assisting on a business model transformation project in relation to its programmatic services platform from a contractual as well as privacy standpoint.
- Assisting the French pastry company Patisserie Ladurée in the context of a global GDPR compliance project.
- Assisting Hiscox in the drafting of its cyber cover and corresponding claims.
Led by IT and IP litigator Jean-Guy de Ruffray and employment specialist Pierre Lubet, the team at ADVANT Altana utilises a multidisciplinary approach to advise insurers, and major corporates in retail supermarkets (Aldi), real estate, telecoms, video games, media, electronics, manufacturing, motor vehicles and hospitality (the Moulin Rouge), on a diverse spectrum of data privacy and data protection matters. These include cybercrime and cross-border disputes, data processing audits, the implementation of personal data management protocols and procedure and personal data transfers.
‘Small, high-quality team. Always exceeding our expectations.’
‘Jean-Guy de Ruffray is an exceptional lawyer.’
‘A stable, reactive and very attentive team. Strong ability to understand the issues in our sector of activity.’
Founded in May 2021, the tech and data team at Algo Avocats brings strength to assisting financial institutions, real estate investment companies and domestic and multinational corporates in energy, transport, software and retail on a wide span of matters. Led by data protection and data privacy expert Sandra Tubert and IT/tech specialist Laura Ziegler, the group advises on data protection impact assessments, compliance audits, implementation of GDPR compliance programs and CNIL investigations. Associate Barbara Ghebali joined in May 2022 from Norton Rose Fulbright, while senior associate Nicolas Lescot joined in June 2022.
Sandra Tubert; Laura Ziegler
‘A listening team that adapts perfectly to our wishes.’
‘Sandra Tubert knows our needs and our internal workings perfectly. She listens and is very responsive when we have an urgent need. It is a pleasure to work with him.’
‘Responsiveness, relevant advice, training of governing bodies, makes difficult subjects accessible.’
‘Sandra Tubert is an excellent lawyer. She is available and handles the files entrusted to her with great professionalism. Solution and business oriented with great human qualities.’
‘The lawyers at Algo Avocats demonstrate great technicality, pedagogy and remarkable responsiveness. They were able to listen to us when it came to the financial resources we had for the projects we wanted to entrust to them, and thus offer an offer adapted to our expectations.’
- Assisting an international communication group with data transfers, impact assessments, implementation of news set of standard contractual clauses, compliance issues related to the launching of a new innovative project involving AI, including drafting a legitimate interest assessment.
- Assisted a French real-estate group of company on a data protection standpoint, implementing and drafting Data Protection Impact Assessments (DPIA) for innovative solutions (connected buildings, e-health apps, cybersecurity tools, etc).
- Provided regular assistance to software editors (AI, e-health, blockchain, targeted advertising) in data protection and privacy matters.
The dedicated personal data department at Delsol Avocats utilises the expertise of its team to provide a comprehensive service to venture capital companies (Runa Capital) and corporates in pharmaceuticals (AstraZeneca), IT (Docaposte), and manufacturing. Led by Jeanne Bossi Malafosse, who brings over 18 years’ experience to this arena, the team assists with impact assessments, GDPR compliance, IT contracts and data protection policies.
Jeanne Bossi Malafosse
‘Jeanne Bossi Malafosse is a rigorous, pragmatic and professional lawyer.’
- Advised Agoria Santé in setting up the consortium and obtaining CNIL authorisation to create a health data warehouse.
- Advised Rhisa in order to obtain CNIL authorisation to create a health data warehouse focused on medical images.
- Advised Runa Capital in the context of the fundraises carried out by Bigblue.
Backed by a global network, the TMT team at the Paris office of Dentons brings experience to assisting infrastructure funds (Global Infrastructure Partners) and corporates in information services (NielsenIQ), automobiles, telecoms, and fintech, on data protection and data privacy matters. The group advises on e-commerce, cybersecurity, outsourcing and regulatory compliance. Team head Christophe Fichet departed the firm in January 2023.
Other key lawyers:
KKR/Global Infrastructure Partners (GIP)
- Assisted Private equity firm KKR and fund manager Global Infrastructure Partners (GIP) (the bidders) on their $15bn deal to acquire data centre operator CyrusOne, Inc.
- Advised NielsenIQ in the context of the acquisition of Foxintelligence, an e-commerce measurement and consumer data analysis company.
The IT and data protection group at independent Paris law firm Franklin marshals the experience of its team to advise a broad range of clients from asset managers to corporates in software, video games, automobiles, real estate and cosmetics. Supported by associate Nolwenn Vignaud, the team assists clients with such matters as cookies compliance, data transfers outside the EU, cybersecurity, data subjects’ rights and personal data breaches. Team leader Valérie Aumage departed in November 2022.
Other key lawyers:
‘The team is particularly didactic and pragmatic, and always provides clear answers on the issues specific to European and market issues in general.’
‘Expertise and advice, great ability to listen and take into account the context, in-depth analysis of the impacts and putting into perspective possible alternatives.’
Led by founding and managing partner Claudia Weber, who brings over 26 years of experience in the practice area, the team at boutique Paris firm ITLAW Avocats advises government financial institutions, multinational corporates across such sectors as energy (Alpiq), fashion and consumer goods. The group assists with matters ranging from digital transformations and licensing to GDPR aspects of public procurement and personal data protection.
Other key lawyers:
Céline Dogan; Zannirah Randera
‘Firm specialised in information technologies with dedicated poles by subject. Very close to customers, reassuring and pragmatic.’
‘Efficient and dynamic team. Very serious in the follow-up of the files. The responses received are relevant and well-documented. Easy and pleasant contact.’
CAVEC (Caisse d’Assurance Vieillesse des Experts-comptables et des Commissaires aux comptes)
AFD (Agence Française de Développement)
- Assisted Alpiq in the management of a security incident involving the IBANs of 17,000 people.
- Assisted CAVEC in its compliance with the GDPR.
- Intervened in the framework of a UGAP (Union des groupements d’achats publics – Union of public purchasing groups) contract for the provision of IaaS services to the AFD (Agence Française de Développement).
The dedicated partners of the intellectual and digital law department at Paris firm Klein Wenner bring experience to providing advice on data privacy and data protection issues to a broad client base of corporates in public services, electronics (Hitachi), printing, retail, agriculture, software, jewellery and transport. Headed by digital tech expert Mathieu Bourgeois and IP specialist Laurent Badiane, the group assists on such matters as cybersecurity, open data, private impact statements, data compliance, the implementation of CNIL formalities, data hosting and internal codes of conduct.
Matthieu Bourgeois: Laurent Badiane
‘Innovative through the adaptability of resources to needs, respect for diversity, the desire to control its carbon footprint and improve the working conditions of its teams while maintaining levels of competence and quality of service close to excellence.’
‘Laurent Badiane: his kindness, his availability, his reactivity added to his professional competence and the quality of the professional relations that he knows how to cultivate distinguishes him in particular from his colleagues.’
Alliance du Commerce
Groupe CRT (CR CESU)
- Assisting Eranove regarding its data protection compliance pursuant to the GDPR and more specifically for carrying out a privacy impact assessment and a cross-border data transfer.
- Assistance to Hitachi Solutions, affiliate of the international Japan group Hitachi, specialised in electronics, telecommunications, audiovisual and energy distribution, for negotiating an important agreement with a customer notably implying issues relating to the use of personal data and intellectual property issues.
- Assisting CEWE France, affiliate of the German Group CEWE, which provides photographic services, on day-to-day basis regarding its compliance with GDPR.
Backed by 30 offices worldwide, the TMT team at the Paris office of Linklaters brings strength to advising insurers, financial institutions and multinational corporates in consumer products (Groupe Bel), manufacturing, automobiles, luxury goods and tech, on a diverse spectrum of matters. Headed by data protection expert Sonia Cissé, who was promoted to partner in May 2022, the group assists with matters ranging from cybersecurity and regulatory compliance to crisis management and fintech issues.
‘The main strength is its highly-specialised expertise, its rigour and the excellence of the services provided. In addition, the team demonstrates, on new subjects, an exceptional capacity for legal analysis.’
‘Sonia Cissé is an exceptional lawyer, endowed with a great capacity for expertise, listening and advice which are very valuable for clients. She is also endowed with an extreme sympathy, which makes the management of files and requests very pleasant.’
‘The quality of service is absolutely impeccable. The Linklaters France TMT/Privacy team is extremely responsive. The lawyers are brilliant and understand our issues very well. They are very pragmatic. The quality of the feedback is excellent, which means that we do not waste time on round trips and other additional questions. Their international presence has also been a very valuable asset in managing complex cross-border issues.’
‘Sonia Cissé is extremely brilliant. Her ability to popularise complex problems and find simple and effective solutions impressed us a lot.’
‘Innovative and efficient.’
‘Sonia Cissé is the reference. Relevant, highly competent, always available, asks the right questions, wastes no time, is able to identify risks.’
Intermarché Entreprises SA
- Advised Bel, the market leading cheese brand owner and major player in healthy snacking, on the EUR 700m sale of the iconic European cheese brand Leerdammer.
- Advised Intermarché on the data protection aspects of several digital and targeted marketing projects.
- Advised Plastic Omnium on its acquisition of the automotive lamps business from Indian group Varroc.
The multidisciplinary team at Paris law firm Luzi Avocats employs a combined IP, IT and data privacy skill set to provide a comprehensive service for corporates across such sectors as travel tech (Expedia), pharmaceuticals (Biogaran), software (DQE Software) and transport, on a wide range of matters. Headed by new technologies expert Olivia Luzi, the group assists with data transfer contractions, dawn raid inspections, GDPR compliance audits and data privacy impact assessments.
Other key lawyers:
‘The advice given is precise and meets our operational needs. Risks are flagged, but more importantly, they come with an appropriate assessment and recommendation, which we find very helpful.’
‘I mainly work directly with Olivia Luzi, managing partner. She remains involved in the cases she deals with and is well-supported by her team. She is dynamic, convincing and a talented IT contract negotiator. She knows perfectly the technical aspects and market practices in our sector of activity.’
‘Very dynamic team with a pragmatic approach to cases.’
‘Olivia Luzi is an excellent lawyer with always appropriate technical and practical recommendations.’
‘Industry knowledge – Luzi Avocats keeps up-to-date with all the latest legal ramifications concerning the IT industry.’
Expedia Group, Inc.
Sqills Product BV
Ortho Clinical Diagnostics
Federation Francaise Du Batiment (French Building Federation)
Consumer Goods Forum – Global Food Initiative
- Advised OVHCloud on data sovereignty issues and the consequences of a possible cross-border data transfer to non-GDPR compliant countries.
- Advised and assisted Zeturf/Zebet, one of the major online betting operators, in the context of a GDPR compliance audit mission.
- Advised and assisted Sqills Product BV in the drafting and renegotiation of a SaaS license agreement with Ouigo (an SNCF company).
Backed by offices across Europe, the Americas and Asia Pacific, the Paris data protection and data privacy group at McDermott Will & Emery AARPI combines bench strength with the experience of its team to advise insurers and multinational corporates in aerospace (Safran), packaging, automobiles (Nissan, Renault), e-commerce, beverages (Moët Hennessy) and software, on wide range of matters. Helmed by sector expert Romain Perray and supported by cybersecurity specialist Lorraine Maisnier-Boché (who was promoted to counsel in January 2022), the group assists with GDPR compliance programmes, international data transfers, on-site controls, data subjects’ rights issues and personal data breaches.
Other key lawyers:
‘Sharp advice and a very responsive team.’
‘Good collective, well-organised, with an optimised distribution of skills and areas of intervention, for a fluid and efficient collaboration, in complete confidence.’
‘Lorraine Maisnier-Boché is a very efficient and competent lawyer, who fully understands the issues of her clients and their needs. Her advice and analysis are always relevant, pragmatic and presented in a clear and direct way.’
‘Romain Perray: knowledge of data protection topics and responsiveness.’
‘The McDermott Will & Emery team, with Romain Perray as head of the personal data protection practice, is particularly efficient. He knows how to show great speed and exceptional diligence and expertise, essential qualities in a field where responsiveness and rigour are essential to deal with cyber-attacks and other regulatory requirements.’
Nissan Motor Co & Nissan International
Disma International (Azura Groupe)
- Aassisting Nissan Motor Co. with their GDPR compliance programme worldwide.
- Providing softwares solutions company, Mirakl with ongoing assistance in the design and implementation of global data protection and a GDPR compliance programme for all aspects of its business.
- Advising Moët Hennessy on multi-jurisdiction retention period issues.
The dedicated technology and innovation practice at the Paris office of Norton Rose Fulbright utilises the expertise of its team to assist financial institutions, insurers (Allianz, AIG) and major multinationals in energy (TotalEnergies), pharmaceuticals (Pfizer) and packaging, on a comprehensive range of data protection and data privacy matters. Tech and IP expert Nadège Martin (who brings over 20 years of experience in the practice area) leads the team, which advises on compliance, the sharing of customer information, cookie policies, information and consent policies, as well as transfer and privacy impact assessments.
- Advising Elopak in the context of the acquisition of Naturepak Beverage Packaging on IT, IP and data privacy issues.
- Advising Wendel on the personal data protection and compliance aspects of the acquisition of ACAMS.
- Advising on the data privacy issues raised by some of Citilog’s business activities in the context of the sale of this subsidiary by the Swedish company Axis Communications AB.
Pinsent Masons LLP
Backed by the bench strength of a global network spanning the Asia Pacific and EMEA regions, the TMT group at Pinsent Masons LLP assists a broad base of clients, including insurers, organisations in the sports sector and corporates in hospitality, healthcare, financial services and gambling. Headed by data protection and cybersecurity specialist Annabelle Richard, and supported by senior associate Anne-Sophie Mouren, who counsels on tech regulatory matters, the group assists with GDPR compliance, contentious data matters and regulator interactions, tech project guidance, cybersecurity governance and data privacy training programmes.
Other key lawyers:
Simmons & Simmons
The technology, media and telecoms team at the Paris office of global law firm Simmons & Simmons brings strength to data privacy and data protection matters, advising asset managers and multinational corporates across such sectors as chemicals, pharmaceuticals, fashion, electronics, motor vehicles, footwear and medical equipment. Led by Sarah Bailey (who brings over 25 years to the practice area) and Eric Le Quellenec (who joined in April 2022 from Alain Bensoussan-Avocats Lexing), the group’s full service extends to GDPR compliance, data breaches, internal investigations and data access requests.
Sarah Bailey; Eric Le Quellenec
‘Good, integrated team, collegiate and customer-focused.’
‘Sarah Bailey is commercial and approachable,’
- Advising a commercial-stage biopharmaceutical company on the personal data issues related to the launch of its business in Europe
Headed by IT expert Bertrand Liard and GDPR implementation specialist Clara Hainsdorf, the Paris-based data protection and data privacy group of global firm White & Case LLP assists financial institutions (Natixis, Société Générale, Crédit Agricole) and corporates in tech (Meta), food (Nestlé), manufacturing (Saint-Gobain), electronics (Celestica) and media, on a wide range of matters across the practice area. These include privacy and cybersecurity policies and audits, privacy claims and disputes, data processing and data transfer agreements, due diligence and privacy aspects of investigations and e-discovery.
Bertrand Liard; Clara Hainsdorf
Agence Française de Développement
Crédit Agricole Group
- Advising and representing Meta in several data protection and unfair competition matters in Europe, in particular, in France, Germany and Austria.
- Advising Free in the context of a dawn raid by the CNIL (Commission nationale de l’informatique et des libertés) and the associated CNIL sanction procedure.
- Advising Natixis in relation to data privacy issues.