Next Generation Partners

Rising Stars

Firms To Watch: Data privacy and data protection

Specialists in digital transformation, the data privacy and data protection practice at Haas Avocats continues to grow, providing comprehensive support with such matters as CNIL interactions and GDPR compliance.
The experienced data protection and compliance team at Paris-based IT boutique Mathias Avocats brings strength to advising financial institutions, governments and corporates across such sectors as manufacturing, education and retail, on  cyber attack prevention and contentious (CNIL-related) and non-contentious matters.
Established in September 2020, Momentum Avocats acts for domestic and multinational corporates in retail, media, software, telecoms and entertainment, on a broad span of data privacy and data protection matters.
The data privacy team at Pwc Société d'Avocats employs a multidisciplinary approach and the combined bench strength of its national offices to advise clients across the fashion, finance, energy, and transport sectors on data privacy impact assessments, multi-jurisdictional data transfers, e-discovery procedures, and employee monitoring.

Data privacy and data protection in France

Alain Bensoussan-Avocats Lexing

The powerhouse data privacy and data protection practice at Alain Bensoussan-Avocats Lexing remains a market leader, advising banks (First Abu Dahbi Bank), insurers, higher education establishments, trade federations and associations, law firms, and the Louvre, as well as corporates in hospitality, automobiles, healthcare, food and pharmaceuticals. Led by advanced technology and data protection legal authority Alain Bensoussan, Chloé Torres (an expert in data regulatory compliance) and experienced data protection litigator Virginie Bensoussan-Brulé, the group’s comprehensive service extends to the auditing of legal compliance of information systems with privacy requirements, the management of prior administrative formalities with the French data protection authority (CNIL), assistance with CNIL inspections and the implementation of Data Protection Officers (DPO) policies.

Practice head(s):

Alain Bensoussan; Chloé Torres; Virginie Bensoussan

Other key lawyers:

Céline Avignon; Anne Renard; Frédéric Forster; Jérémy Bensoussan; Emmanuel Walle; Isabelle Chivoret


‘Alain Bensoussan Avocats Lexing stands out for the advanced technologies put in place to support its clients. Always personalised support and appropriate advice. Alain Bensoussan Avocats Lexing is a resource that allows us to feel secure in our procedures and our processes thanks to the system of trust that it has established.’

‘I had the immense honour and pleasure of working with Alain Bensoussan, who is impressive for his quick and fair analysis of situations.’

‘Virginie Bensoussan is very attentive, available and very professional.’

Key clients

Musée du Louvre

Fondation Abbé Pierre

First Abu Dahbi Bank

Les Hôtels Baverez (Hôtel Raphaël, Hôtel Regina, Majestic Hôtel)

Conseil Général d’Île-de-France

AAA Data


Institut supérieur de l’aéronautique et de l’espace

Ficime (Fédération des Entreprises Internationales de la Mécanique et de l’Electronique)

Syndicat intercommunal de la Périphérie de Paris pour les réseaux de communication

Syndicat Intercommunal Funéraire de la Région parisienne

Régie Réunion THD

Service Général de Médecine Conseil et Contrôle des industries électriques et gazières

ACM Habitat (Office public de l’Habitat de Montpellier Méditerranée Métropole)

Groupement pour l’itinérance des recharges électriques de véhicules

Guest Suite



Comité Interentreprises Thales et adhérents

Laboratoire de Biologie du Val d’Orme

VNH Ressources

Labo Synlab

Synlab Gestion

Synlab Biopaj

Consulting Service by Randstad

Gitec Human Resources


Etablissement public de coopération interdépartemental Yvelines Hauts de Seine


Domidom Services

Adhap Performance

GIE Aréa Santé

Commune de Puteaux

Commune de Rosny-sous-Bois

Commune de Saint-Ouen

Commune de Bussy-Saint-Georges

Commune d’Aulnay-sous-Bois

Commune de Villejuif

Commune de Villeneuve-la-Garenne

Commune de la Courneuve

Commune de la Garenne Colombes

Commune de Clichy

Commune de Villepinte

HMN Partners


Lucy In the Sky with Data

Elit Solutions

Work highlights

  • Acting as the outsourced DPO for some fifty entities of Orpea Group, a French private listed group providing healthcare services and homes for the elderly.
  • Acting for around 20 entities of Synlab Group, a global group of laboratory diagnostic/test services.

August Debouzy

The data privacy and protection team at August Debouzy remains a leader in the marketplace, providing a comprehensive service to corporates in media (JCDecaux), tech (Microsoft), food (Danone), tobacco (Philip Morris), energy, sports (FIFA), beverages (Pernod Ricard) and hospitality. Headed by Florence Chafiol, an expert in data privacy litigations with the French Data Protection Authority (CNIL), the group also advises on data protection/privacy audits, the implementation of compliance programs, crisis management and due diligence. Other key figures in the team include senior associate and data protection compliance specialist Roxane Blanc Dubois, senior associate Stéphanie Lapeyre (who focuses on new technologies).

Practice head(s):

Florence Chafiol

Other key lawyers:

Roxane Blanc Dubois; Stéphanie Lapeyre; Alice Hourquebie


‘Good understanding of customer needs and price adaptation. Very good technical knowledge. Competent, friendly and responsive team.’

‘Florence Chafiol is an outstanding support in our current endeavours with the French Data Protection Authority.’

‘Clear guidance in a proactive approach.’

‘Always prompt and great to deal with, positive and helpful and responsive.’

‘Florence Chafiol is a technical expert who combines this expertise with charm with hard work and real world client experience. The result is always the best for clients and for instructing lawyers alike.’

‘Excellent firm with partners who are experts in their field.’

‘Florence Chafiol is an excellent lawyer who provides advice and legal services of the highest standard.’

Key clients


Total Energies Electrice et Gaz France

France Médias Monde



Omnicom and its affiliates (TBWA -Fleishmann Hillard – Omnicom Public Relations Group, MMG etc.)


Accor SA

Ariane Group


Veolia Environnement

Philip Morris France

TotalEnergies SE & Total Global Procurement



Neuflize OBC

La Poste Telecom


Shift Technology

Pernod Ricard





My Money Bank/Cerberus




Work highlights

  • Assisting Pernod Ricard’s data protection team with regards to various data protection issues, including marketing, social media and e-commerce.
  • Assisting, from a data protection prospective, Cerberus/My Money Bank Group, in the context of the purchase by MMB of HSBC Continental Europe’s retail banking business in France.
  • Assisting the DPO team of GIE AXA in several matters related to the implementation of global projects among the AXA Group and on day-to-day issues related to the compliance with the GDPR of the AXA Group.

Baker McKenzie

With locations spanning America, Asia Pacific and EMEA, the Paris-based data privacy and data protection team at Baker McKenzie remains a force in the marketplace, leveraging the experience of its team and the bench strength of its global network to advise financial institutions (BNP Paribas, Crédit Agricole) and corporates in tech (Oracle), aviation, IT, fashion, e-commerce, luxury goods, logistics and automobiles, on a diverse spectrum of matters. Co-headed by personal data practice leader and compliance authority Yann Padova, the group assists clients with algorithm ethics, data governance, data processing, cybercrime and litigation and enforcement issues. Magalie Dansac Le Clerc brings expertise to consumer protection, GDPR and outsourcing projects.

Practice head(s):

Rémy Bricard; Laurent Szuskin; Yann Padova

Other key lawyers:

Magalie Dansac Le Clerc


‘Yann Padova is by far the best privacy lawyer in France, and definitely among the top 10 in Europe. He knows the tech industry extremely well, and also the regulatory environment in the EU. His advice is very strategic and extremely well thought-through.’

‘The Baker McKenzie team in Paris offers both the most cutting-edge expertise on the market, availability at all times, and a very appreciable simplicity in exchanges.’

‘Yann Padova is one of the most recognised experts in France and Europe in the field of data protection. Yann is consulted regularly, in addition to his clients, by the public authorities on major societal issues.’

Key clients

BNP Paribas



IES Synergy



Crédit Agricole Group



Bird & Bird

With locations spanning America, EMEA and Asia Pacific, the privacy and data protection group at Bird & Bird continues to lead in this arena, combining deep bench strength with the expertise of its team to advise major corporates across such sectors as telecoms, cosmetics, luxury goods, beverages, tech, pharmaceuticals and athletics, on a comprehensive range of matters. Led by data compliance authority Ariane Mole and personal data and cybersecurity expert Merav Griguer, the group’s full service extends to investigation procedures, litigation before CNIL, security breach and ransomware effects, data protection agreements, privacy impact assessments and GDPR-required procedures. Other key figures include counsel Willy Mikalef (a data breach specialist), senior associate Oriane Zubcevic and associate Wissem Addoun.

Practice head(s):

Ariane Mole; Merav Griguer

Other key lawyers:

Willy Mikalef; Oriane Zubcevic; Wissem Addoun


‘Merav Griguer of the personal data protection division has set up a team of 4 people with very good comprehensive expertise on the complex subjects related to the application of the GDPR. The team knows how to show great reactivity and agility on all issues. Total mobilisation and dedicated, tailor-made support in the event of a crisis or complex file.’

‘Dynamic and very available team; adaptation to customer needs and implementation of tailor-made solutions.’

‘Ariane Mole and Willy Mikalef bring experience, clarity, operational and pragmatic vision of the subjects.’

Key clients

Orange SA

Fnac Darty

DLA Piper

The data privacy and data protection group at DLA Piper continues to be a leader in the market, utilising its global footprint (spanning America, Europe, the Middle East, Africa and Asia Pacific) and the practice area expertise of its team to advise major financial institutions and corporates across such sectors as pharmaceuticals (Pierre Fabre Group), beverages, retail, tech, cosmetics, aerospace and hospitality, on a diverse spectrum of issues. Headed by Denise Lebeau-Marianna, who brings over 25 years of experience in the data protection and compliance arena, the group assists with matters ranging from global data transfers and transfer impact assessments, global personal data protection compliance projects and cybersecurity incident response to projects involving emerging tech (AI, the metaverse), and approvals from data protection authorities. Other key figures include domestic and international dispute resolution expert Fabienne Panneau, Jonathan Rofé (who handles multi-jurisdictional outsourcing projects), IT dispute specialist Stéphane Lemarchand, counsel Jeanne Dauzier and senior associate Yaël Hirsch.

Practice head(s):

Denise Lebeau-Marianna

Other key lawyers:

Fabienne Panneau; Jonathan Rofé; Stéphane Lemarchand; Jeanne Dauzier; Yaël Hirsch


‘The collaboration with DLA Piper is interesting in that it offers internal tools and a pragmatic approach to the files entrusted to it.’

‘Denise Lebeau-Marianna has a very pragmatic approach, which enables her to quickly identify the problem and propose an appropriate response. In particular, she and her team know how to offer media that differ from the simple memo to create a document that is a daily working tool for legal teams. Warm and simple contact.’

Key clients

Health Data Hub

Pierre Fabre Group

Work highlights

  • Advising Health Data Hub on the likelihood of application of US surveillance laws to the data hosted on HDH platform by Microsoft Azur.
  • Advised a major aeronautic company’s data protection office on all its strategic data privacy matters, including new AI research projects and the implementation of a global training program for pilots and technicians.
  • Assisting in the implementation of a cosmetics company’s GDPR compliance program.

Gibson Dunn

The market-leading privacy, cybersecurity and data innovation practice at the Paris office of global law firm Gibson Dunn brings strength and experience to advising major multinational corporates across such sectors as fashion (Louis Vuitton), tech (Meta), automobiles (Renault), utilities (Suez) and video games, on a diverse spectrum of matters. Led by GDPR compliance and governance expert Ahmed Baladi and Vera Lukic (a specialist in IT and outsourcing projects), the group assists on matters ranging from investigations and procedures before the French data protection authority, data breaches and national security matters to aspects of M&A projects, investigations involving data transfers between the EU and the US and cross-border litigation.

Practice head(s):

Ahmed Baladi; Vera Lukic


‘Strong team comprising very experienced lawyers who have a keen understanding of GDPR issues.’

‘Hardcore data protection expertise, coupled with the ability to get to grips with new technologies quickly and think creatively in order to provide practical advice.’

‘Ahmed Baladi is the market leader when it comes to advising on data protection issues as they apply to novel technologies. Vera Lukic is also a very strong lawyer.’

Key clients


Louis Vuitton


Platinum Equity Advisors, LLC



TAG Heuer



Unibail Rodamco Westfield

Western Digital


Gide Loyrette Nouel A.A.R.P.I.

The data protection and data privacy team at Gide Loyrette Nouel A.A.R.P.I. remains a key player in the marketplace, providing comprehensive support to major financial institutions (Crédit Agricole), insurers and corporates in media (France Televisions), luxury goods, telecoms, automobiles, tech and energy. Practice area expert Thierry Dor heads the team, bringing strength to global data transfers, personal data processing matters and GDPR compliance. Supported by senior associate Dane Tacchini (a specialist in the implementation of cross-border compliance projects related to global information technology systems, the group’s full service offering also extends to cover data breaches, cookie management and e-privacy related obligations.

Practice head(s):

Thierry Dor

Other key lawyers:

Dane Tacchini


‘We appreciated the availability of the team and its support.’

Key clients

Crédit Agricole

France Televisions



Herbert Smith Freehills LLP

Harnessing the bench strength of offices across the Americas, Asia Pacific and EMEA regions, the experienced IP and TMT team at the offices of Herbert Smith Freehills LLP advise major financial institutions, insurers and corporates across the tech (Google), energy, pharmaceuticals, automotive and travel (Expedia) sectors, on the full range of data privacy and data protection matters. Led by Alexandra Neri, an expert in data protection issues and breaches in information systems, the group assists clients with matters ranging from cyber-criminality, dawn raids and privacy issues and dawn raids to data transfer conflicts, licensing, litigation and pre-litigation. Other key figures include personal data rights specialist Sébastien Proust, associates and experienced IP lawyers Laure Cardinet and Suzanne Carayol, and Antoine Sullice, who handles matters involving tracking technology compliance. Associate Robin Nini joined from Alain Bensoussan-Avocats Lexing in March 2022.

Practice head(s):

Alexandra Neri

Other key lawyers:

Sébastien Proust; Laure Cardinet; Suzanne Carayol; Antoine Sullice


‘Active and always up-to-date with new regulations and ability to provide practical advices.’

Key clients



Work highlights

  • Assisting Google in a litigation related to Google’s terms and conditions of use and privacy policies, in line with consumer law and data privacy law (GDPR).
  • Assisting Google in several ongoing disputes brought by professional individuals regarding their personal data used in professional listings that appear in Google results.

Clifford Chance

Based in Paris, the tech, commercial and data team at global firm Clifford Chance brings experience to data privacy and data protection matters, advising major asset managers (Amundi) and multinational corporates in mining (Sibanye Stillwater), telecoms (MTN), tech (Oracle), e-commerce, motor vehicles (Honda), pharmaceuticals and video games. Helmed by Dessislava Savova (who brings expertise to data protection, cybersecurity, platform regulations and AI), the practice assists clients with disputes, data governance, crisis management, digital transformations, compliance investigation and GDPR programmes. Counsel Grégory Sroussi brings strength to cybersecurity IT matters, while senior associate Alexandre Manasterski specialises in the setting-up of strategic partnerships.

Practice head(s):

Dessislava Savova

Other key lawyers:

Grégory Sroussi; Alexandre Manasterski


‘I very much appreciated my collaboration with the teams of Clifford Chance, in particular, Dessislava Savova and Alexandre Manasterski.’

‘The team is very responsive and offered us a platform that allowed us to simplify exchanges and the production of established documents.’

‘Alexandre Manasterski is reactive and offers pragmatic solutions to the operational problems of the project. In addition, he has understood and integrated the way our society works and knows how to react, accordingly.’

Key clients









Sibanye Stillwater

Work highlights

  • Assisting Legrand with the launch of home products connected with an online app controlled by users.
  • Assisted Oracle with several proceedings and initiatives around the globe against competitor’s data collection, processing and combination practices and their effects on competition in the online targeted advertising and advertising supported service markets.
  • Assisted Hitachi in respect of data protection issues arising from personal data transfers outside of the European Union to other entities of the Hitachi Rail group, as well as to third parties.

CMS Francis Lefebvre

The Paris-based technologies, media and communications group at CMS Francis Lefebvre employs the experience of its team to assist financial institutions (Bank of China) and multinational corporates in mining (Newmont), aviation, tech, e-commerce, automobiles, engineering, construction and consumer products, on a diverse spectrum of data privacy and data protection matters. Headed by Anne-Laure Villedieu, who brings expertise to representing clients before the courts or the data protection authorities, the practice assists with auditing processing systems, data protection compliance, privacy impact assessments and personal data transfers. The team is supported by senior associate Maxime Hanriot, a specialist in cybersecurity.

Practice head(s):

Anne-Laure Villedieu

Other key lawyers:

Maxime Hanriot

Key clients

Al Khaliji France

Bank of China

SPIE Operations

SPIE France


Work highlights

  • Advising Al Khaliji with respect to all its data protection issues, as its appointed external data protection officer.
  • Assisting with a global GDPR compliance program for SPIE Operations affecting all subsidiaries of the SPIE Group.

De Gaulle Fleurance & Associés

The data protection and data privacy practice at the Paris offices of De Gaulle Fleurance & Associés provides a one-stop-shop to assist financial institutions (Natixis), government bodies and multinational corporates in water treatment services (Culligan), computer software (Adobe), video games (Epic Games), retail (CVS), IT and construction. The group’s comprehensive service assists with matters ranging from mobility databases opening programmes, HR digitalisation processes and GDPR compliance to assistance with blockchain platforms, cybersecurity, and competition law in the context of data issues. The team is led by software anti-piracy and cyber criminality expert Georgie Courtois, e-commerce and consumer information specialist Matthieu Dary and Cécile Théard-Jallu, who brings expertise to R&D issues and technology transfers.

Practice head(s):

Georgie Courtois; Matthieu Dary; Cécile Théard-Jallu


‘Cécile Théard-Jallu has good expertise in GDPR.’

‘Practice of expertise with collaborative work.’

‘Very strong business and sector skills, responsiveness.’

Key clients


Alliance Digitale Maladie




Consortium Tehdas



Département des Yvelines – E-tonomy

Epic Games


Gouvernement de la Guyane

Gouvernement de la Nouvelle Calédonie






Legal Place

Monte-Carlo Société des Bains de Mer

MSF Médecins sans Frontière


Orientis Kusmi Tea


Pole Systematic




WI Pharma

Derriennic Associés

The team at Derriennic Associés utilises the experience of its team to assist software publishers, IT service providers, IT manufacturers, insurers and major corporates in energy (EDF subsidiary Dalkia), healthcare, electronics (Xiaomi), automobiles, cosmetics, food and beverages (Heineken), on a wide range of data protection matters, with a speciality in the handling of cyberattacks. The group is headed by Francois-Pierre Lani, an expert in new technologies, Alexandre Fievee, who advises clients in the IT, banking, AI and sports sectors, veteran litigator Bruno Ducoulombier, digital transformation project specialist Pierre-Yves Margnoux and Georges Jenselme, who brings strength to health and insurance matters.

Practice head(s):

François-Pierre Lani; Alexandre Fievee; Bruno Ducoulombier; Pierre-Yves Margnoux; Georges Jenselme


‘The team is attentive, proactive and shows great pragmatism.’

‘A team with an excellent technical level and very responsive.’

‘Alexandre Fievee is attentive to the imperatives and operational challenges of companies.’

Key clients

Cerba Healthcare


City One

Fondation Pierre Fabre


Hopscotch Congrès

La Banque Postale



Talentia Softaware

Generix Group

Eurobio Scientific

Live Colonies


Work highlights

  • Advised one of its new clients – a leading wholesale broker in France – in the context of a cyberattack.
  • Supported a French multinational in the food industry and its task force dedicated to protection against cyberattacks in their activities/needed related to data protection.


The digital asset specialists at boutique firm Féral bring strength to advising start-ups and domestic and multinational corporates across such sectors as e-commerce, manufacturing, fashion, insurance, aerospace, on a diverse spectrum of matters. The team’s comprehensive service covers matters ranging from the drafting of personal data transfer agreements, data protection compliance audits and drafting IT guidelines to advising on security and archiving policies and providing assistance and training to Data Protection Officers (DPO). Key figures include founding partner Christiane Féral-Schuhl, who brings more than 30 years handling cases involving computer law, information technology law, media law and data protection law; IP and data privacy expert Richard Willemant, who is also a mediator accredited by the Quebec bar; and Farid Bouguettaya, whose practice extends to transactional, litigation and pre-litigation matters. The team is supported by senior counsel and firm data protection officer Justine Sinibaldi, who brings over 15 years in the personal data space.

Other key lawyers:

Christiane Féral-Schuhl; Richard Willemant; Farid Bouguettaya; Justine Sinibaldi

Work highlights

  • Assisting a startup with its data protection and GDPR governance, compliance programme and contract negotiations.
  • Assisting the French companies of a group in the steel industry with respect to GDPR compliance, acting as Data Protection Officer for all entities in France.
  • Assisting the owner of commercial property in continental Europe with respect to GDPR issues, such as information and data protection policy, explicit consent, data retention period, marketing operations and relations with data processors.

Hogan Lovells (Paris) LLP

Harnessing the bench strength of offices across the Americas, Asia Pacific and EMEA regions, the privacy and cybersecurity team at Hogan Lovells (Paris) LLP advises major insurers and multinationals in media (Groupe Canal+), transport (Aéroports de Lyon), pharmaceuticals (Bristol Myers Squibb/Celgene), manufacturing (General Electric Healthcare), financial services and tech on a broad span of contentious and non-contentious matters across the practice area. These include issues related to IT and telecom infrastructures, digital media, e-commerce and regulatory compliance. The team is led by TMT and data privacy expert Etienne Drouard, cybersecurity specialist Patrice Navarro, experienced IT litigator Christine Gateau; David Taylor, who handles matter related to domain names, and Mikael Salmela, who advises on health tech matters. Maimouna Goudiaby was promoted to counsel in January 2023.

Practice head(s):

Etienne Drouard; Patrice Navarro; Christine Gateau; David Taylor; Mikael Salmela


‘Hogan Lovells is a firm made up of very close-knit and perfectly synchronised people. Very fast in the treatment of our requests and very reactive in case of emergencies, all the collaborators of the firm have the same objective, the satisfaction of the customer.’

‘Etienne Drouard is competent, available and very pleasant. His great expertise, combined with a very poised and reassuring personality, make him a key partner in the handling of our cases.’

‘Patrice Navarro is particularly attentive to the needs of our company. He understands and adapts to certain innovative positions and allows reflections on new subjects by helping us to support our position. He knows how to be flexible and solution-oriented, while recalling the risks to be taken into account, without falling into an overly conservative approach.’

‘Excellent consulting expertise in the fields of new information, communication and audiovisual technologies and digital services, which distinguishes this practice from other firms.’ 

‘Patrice Navarro is the best professional in data protection law in Paris bar.’

Key clients

Groupe CANAL +

Aéroports de Lyon


Bristol Myers Squibb / Celgene


General Electric Healthcare


Doctolib (investment funds Eurazeo, BPI France and Accel)

K&L Gates LLP

Backed by a global network spanning five continents, the data protection, privacy and security group at K&L Gates LLP assists financial institutions and multinationals in mining, biotech (Anika Therapeutics), energy (Envision), home appliances (SharkNinja), pharmaceuticals (Ipsen), manufacturing (K&N Engineering), luxury goods and tech, on wide array of matters across the practice area. Headed by Claude-Etienne Armingaud, an expert in multi-jurisdictional transactional matters, dealing with IT outsourcing and data protection, the group also assists clients with GDPR compliance, data sharing agreements and data protection elements of M&A transactions.

Practice head(s):

Claude-Etienne Armingaud


‘The team has been able to position itself and develop expertise on relevant/current topics. It also works in close collaboration with teams in other countries in a fairly simplified way.’

‘Claude Etienne Armingaud is, in my opinion, the partner who stands out for several reasons. Beyond the legal skills, he demonstrates a very good knowledge of technological subjects and privacy implications. In addition, he invests heavily in the development of privacy professionals, whether young lawyers, jurists or others.’

Key clients

Anika Therapeutics S.r.l.


Argo AI

ChannelAdvisor Corporation

Coty Inc.

Cyber Civil Rights Initiative




Evoqua Waters

La Boite à Encas d/b/a Foodles


K&N Engineering

Maytronics Limited

OneStream Networks



TM Forum


Wiluna Mining Corporation Limited

Wabtec Corporation

World Organisation for Animal Health

Young Presidents’ Organization

Work highlights

  • Operating a pro-bono initiative, the Cyber Civil Rights Legal Project, which offers free legal services to individuals who fall victim to acts of  ‘revenge porn’, i.e. the unauthorised dissemination of intimate content online, often associated with various other acts of harassment and online bullying.
  • Assisted Securitas, an operator in the security field, in the data protection due diligence, master agreement and disclosure schedules for the acquisition of a large group of more than 10,000 employees (4,000 employees in France).
  • Advising Maytronics, an Israeli-based manufacturer of robotic pool cleaning equipment, with updating its internal and consumer facing policies and practices to help ensure its global data protection compliance, notably with regard to the EU and UK GDPR, the CCPA and upcoming US legislations.

Latham & Watkins

Backed by the strength of a global network spanning North America, Europe, the Middle East and Asia Pacific, the Latham & Watkins data privacy and data protection practice in Paris brings strength to advising a broad clients base, from private investment firms to multinational corporates in tech (Meta), energy, luxury goods and retail. Headed by seasoned data protection litigator Myria Saarinen, the group’s offering extends to GDPR compliance and regulatory issues, data breaches and cybersecurity and disputes and regulatory enforcement.

Practice head(s):

Myria Saarinen


‘The team is very responsive, provides tactical advice, has good connections with and knowledge about the French data protection authority.’

‘Myria Saarinen is very responsive and makes the time to connect to discuss complex matters. She provides a tactical vision to matters, taking into account local practices and realities.’

Key clients

Meta Platforms, Inc.

Work highlights

  • Advising Meta (formerly Facebook) in relation to a number of highly -complex and multi-jurisdictional regulatory investigations and inquiries regarding alleged data breaches and compliance with data protection laws generally, and any related litigation.

Osborne Clarke

Headed by digital platform advisory specialist Claire Bouchenard and experienced IP litigator Xavier Pican, the Paris-based technology, innovation, media, fintech team at Osborne Clarke brings strength to assisting multinationals in retail (Carrefour), tech, software, apparel, food (Danone) and professional services, on a broad range of data privacy and data protection matters. Supported by Sarah Lenoir (who handles cases involving AI, smart data and blockchain) and counsel Grégoire Dumas (a GDPR specialist who was promoted in January 2022), the group assists with digitalisation programmes, data privacy compliance programmes and cybersecurity response to data breaches. Partner Béatrice Delmas-Linel departed and Julia Darcel was promoted to counsel in January 2022.

Practice head(s):

Claire Bouchenard; Xavier Pican

Other key lawyers:

Sarah Lenoir; Grégoire Dumas

Key clients






Groupe La Francaise





Supplay (Manpower Affiliate)

Work highlights

  • Assisted professional services company Manpower as an external temporary DPO.
  • Providing a privacy training to all the legal team in Danone to negotiate DPAs.
  • Assisting Baxter in global and local privacy projects: on assessment, recommendation and implementation, and on geolocation, a distribution agreement, HDS and a partnership agreement.

Taylor Wessing

The team at the Paris office of global law firm Taylor Wessing utilises the combined bench strength of its data privacy, IT and IP practices, to advise a broad client base, ranging from major insurers (Zurich, Hiscox) and crypto platforms (Messari) to corporates in e-commerce (Amazon), tech (IBM), telecoms (Comcast), media, pharmaceuticals and fashion. Led by Marc Schuler, who brings over 20 years of experience in the IT and digital industries space, the team assists with data protection governance schemes, GDPR compliance data protection audits and impact assessments. New associates Alix Capely and Hugo Khalfallaoui arrived in September 2022.

Practice head(s):

Marc Schuler

Other key lawyers:

Benjamin Znaty; Alix Capely; Hugo Khalfallaoui

Key clients







Zurich Insurance







Work highlights

  • Assisting on a business model transformation project in relation to its programmatic services platform from a contractual as well as privacy standpoint.
  • Assisting the French pastry company Patisserie Ladurée in the context of a global GDPR compliance project.
  • Assisting Hiscox in the drafting of its cyber cover and corresponding claims.


Led by IT and IP litigator Jean-Guy de Ruffray and employment specialist Pierre Lubet, the team at ADVANT Altana utilises a multidisciplinary approach to advise insurers, and major corporates in retail supermarkets (Aldi), real estate, telecoms, video games, media, electronics, manufacturing, motor vehicles and hospitality (the Moulin Rouge), on a diverse spectrum of data privacy and data protection matters. These include cybercrime and cross-border disputes, data processing audits, the implementation of personal data management protocols and procedure and personal data transfers.


‘Small, high-quality team. Always exceeding our expectations.’

‘Jean-Guy de Ruffray is an exceptional lawyer.’

‘A stable, reactive and very attentive team. Strong ability to understand the issues in our sector of activity.’

Key clients

Bouygues Immobilier

Moulin Rouge

NRJ Group

Algo Avocats

Founded in May 2021, the tech and data team at Algo Avocats brings strength to assisting financial institutions, real estate investment companies and domestic and multinational corporates in energy, transport, software and retail on a wide span of matters. Led by data protection and data privacy expert Sandra Tubert and IT/tech specialist Laura Ziegler, the group advises on data protection impact assessments, compliance audits, implementation of GDPR compliance programs and CNIL investigations. Associate Barbara Ghebali joined in May 2022 from Norton Rose Fulbright, while senior associate Nicolas Lescot joined in June 2022.

Practice head(s):

Sandra Tubert; Laura Ziegler


‘A listening team that adapts perfectly to our wishes.’

‘Sandra Tubert knows our needs and our internal workings perfectly. She listens and is very responsive when we have an urgent need. It is a pleasure to work with him.’

‘Responsiveness, relevant advice, training of governing bodies, makes difficult subjects accessible.’

‘Sandra Tubert is an excellent lawyer. She is available and handles the files entrusted to her with great professionalism. Solution and business oriented with great human qualities.’

‘The lawyers at Algo Avocats demonstrate great technicality, pedagogy and remarkable responsiveness. They were able to listen to us when it came to the financial resources we had for the projects we wanted to entrust to them, and thus offer an offer adapted to our expectations.’

Key clients



Work highlights

  • Assisting an international communication group with data transfers, impact assessments, implementation of news set of standard contractual clauses, compliance issues related to the launching of a new innovative project involving AI, including drafting a legitimate interest assessment.
  • Assisted a French real-estate group of company on a data protection standpoint,   implementing and drafting Data Protection Impact Assessments (DPIA) for innovative solutions (connected buildings, e-health apps, cybersecurity tools, etc).
  • Provided regular assistance to software editors (AI, e-health, blockchain, targeted advertising) in data protection and privacy matters.

Delsol Avocats

The dedicated personal data department at Delsol Avocats utilises the expertise of its team to provide a comprehensive service to venture capital companies (Runa Capital) and corporates in pharmaceuticals (AstraZeneca), IT (Docaposte), and manufacturing. Led by Jeanne Bossi Malafosse, who brings over 18 years’ experience to this arena, the team assists with impact assessments, GDPR compliance, IT contracts and data protection policies.

Practice head(s):

Jeanne Bossi Malafosse


‘Jeanne Bossi Malafosse is a rigorous, pragmatic and professional lawyer.’

Key clients




Impact Healthcare

Runa Capital



Work highlights

  • Advised Agoria Santé in setting up the consortium and obtaining CNIL authorisation to create a health data warehouse.
  • Advised Rhisa in order to obtain CNIL authorisation to create a health data warehouse focused on medical images.
  • Advised Runa Capital in the context of the fundraises carried out by Bigblue.


Backed by a global network, the TMT team at the Paris office of Dentons brings experience to assisting infrastructure funds (Global Infrastructure Partners) and corporates in information services (NielsenIQ), automobiles, telecoms, and fintech, on data protection and data privacy matters. The group advises on e-commerce, cybersecurity, outsourcing and regulatory compliance. Team head Christophe Fichet departed the firm in January 2023.

Other key lawyers:

Laëtitia Flour

Key clients

KKR/Global Infrastructure Partners (GIP)


Work highlights

  • Assisted Private equity firm KKR and fund manager Global Infrastructure Partners (GIP) (the bidders) on their $15bn deal to acquire data centre operator CyrusOne, Inc.
  • Advised NielsenIQ in the context of the acquisition of Foxintelligence, an e-commerce measurement and consumer data analysis company.


The IT and data protection group at independent Paris law firm Franklin marshals the experience of its team to advise a broad range of clients from asset managers to corporates in software, video games, automobiles, real estate and cosmetics. Supported by associate Nolwenn Vignaud, the team assists clients with such matters as cookies compliance, data transfers outside the EU, cybersecurity, data subjects’ rights and personal data breaches. Team leader Valérie Aumage departed in November 2022.

Other key lawyers:

Nolwenn Vignaud


‘The team is particularly didactic and pragmatic, and always provides clear answers on the issues specific to European and market issues in general.’

‘Expertise and advice, great ability to listen and take into account the context, in-depth analysis of the impacts and putting into perspective possible alternatives.’

ITLAW Avocats

Led by founding and managing partner Claudia Weber, who brings over 26 years of experience in the practice area, the team at boutique Paris firm ITLAW Avocats advises government financial institutions, multinational corporates across such sectors as energy (Alpiq), fashion and consumer goods. The group assists with matters ranging from digital transformations and licensing to GDPR aspects of public procurement and personal data protection.

Practice head(s):

Claudia Weber

Other key lawyers:

Céline Dogan; Zannirah Randera


‘Firm specialised in information technologies with dedicated poles by subject. Very close to customers, reassuring and pragmatic.’

‘Efficient and dynamic team. Very serious in the follow-up of the files. The responses received are relevant and well-documented. Easy and pleasant contact.’

Key clients


CAVEC (Caisse d’Assurance Vieillesse des Experts-comptables et des Commissaires aux comptes)

AFD (Agence Française de Développement)


Work highlights

  • Assisted Alpiq in the management of a security incident involving the IBANs of 17,000 people.
  • Assisted CAVEC in its compliance with the GDPR.
  • Intervened in the framework of a UGAP (Union des groupements d’achats publics – Union of public purchasing groups) contract for the provision of IaaS services to the AFD (Agence Française de Développement).

Klein Wenner

The dedicated partners of the intellectual and digital law department at Paris firm Klein Wenner bring experience to providing advice on data privacy and data protection issues to a broad client base of corporates in public services, electronics (Hitachi), printing, retail, agriculture, software, jewellery and transport. Headed by digital tech expert Mathieu Bourgeois and IP specialist Laurent Badiane, the group assists on such matters as cybersecurity, open data, private impact statements, data compliance, the implementation of CNIL formalities, data hosting and internal codes of conduct.

Practice head(s):

Matthieu Bourgeois: Laurent Badiane


‘Innovative through the adaptability of resources to needs, respect for diversity, the desire to control its carbon footprint and improve the working conditions of its teams while maintaining levels of competence and quality of service close to excellence.’

‘Laurent Badiane: his kindness, his availability, his reactivity added to his professional competence and the quality of the professional relations that he knows how to cultivate distinguishes him in particular from his colleagues.’

Key clients




Alliance du Commerce

Totem Pharmaciens

Lucky Cart


Groupe CRT (CR CESU)


Work highlights

  • Assisting Eranove regarding its data protection compliance pursuant to the GDPR and more specifically for carrying out a privacy impact assessment and a cross-border data transfer.
  • Assistance to Hitachi Solutions, affiliate of the international Japan group Hitachi, specialised in electronics, telecommunications, audiovisual and energy distribution, for negotiating an important agreement with a customer notably implying issues relating to the use of personal data and intellectual property issues.
  • Assisting CEWE France, affiliate of the German Group CEWE, which provides photographic services, on day-to-day basis regarding its compliance with GDPR.


Backed by 30 offices worldwide, the TMT team at the Paris office of Linklaters brings strength to advising insurers, financial institutions and multinational corporates in consumer products (Groupe Bel), manufacturing, automobiles, luxury goods and tech, on a diverse spectrum of matters. Headed by data protection expert Sonia Cissé, who was promoted to partner in May 2022, the group assists with matters ranging from cybersecurity and regulatory compliance to crisis management and fintech issues.

Practice head(s):

Sonia Cissé


‘The main strength is its highly-specialised expertise, its rigour and the excellence of the services provided. In addition, the team demonstrates, on new subjects, an exceptional capacity for legal analysis.’

‘Sonia Cissé is an exceptional lawyer, endowed with a great capacity for expertise, listening and advice which are very valuable for clients. She is also endowed with an extreme sympathy, which makes the management of files and requests very pleasant.’

‘The quality of service is absolutely impeccable. The Linklaters France TMT/Privacy team is extremely responsive. The lawyers are brilliant and understand our issues very well. They are very pragmatic. The quality of the feedback is excellent, which means that we do not waste time on round trips and other additional questions. Their international presence has also been a very valuable asset in managing complex cross-border issues.’

‘Sonia Cissé is extremely brilliant. Her ability to popularise complex problems and find simple and effective solutions impressed us a lot.’

‘Innovative and efficient.’

‘Sonia Cissé is the reference. Relevant, highly competent, always available, asks the right questions, wastes no time, is able to identify risks.’

Key clients

Groupe Bel

Intermarché Entreprises SA

Plastic Omnium

Work highlights

  • Advised Bel, the market leading cheese brand owner and major player in healthy snacking, on the EUR 700m sale of the iconic European cheese brand Leerdammer.
  • Advised Intermarché on the data protection aspects of several digital and targeted marketing projects.
  • Advised Plastic Omnium on its acquisition of the automotive lamps business from Indian group Varroc.

Luzi Avocats

The multidisciplinary team at Paris law firm Luzi Avocats employs a combined IP, IT and data privacy skill set to provide a comprehensive service for corporates across such sectors as travel tech (Expedia), pharmaceuticals (Biogaran), software (DQE Software) and transport, on a wide range of matters. Headed by new technologies expert Olivia Luzi, the group assists with data transfer contractions, dawn raid inspections, GDPR compliance audits and data privacy impact assessments.

Practice head(s):

Olivia Luzi

Other key lawyers:

Agathe Moulins


‘The advice given is precise and meets our operational needs. Risks are flagged, but more importantly, they come with an appropriate assessment and recommendation, which we find very helpful.’

‘I mainly work directly with Olivia Luzi, managing partner. She remains involved in the cases she deals with and is well-supported by her team. She is dynamic, convincing and a talented IT contract negotiator. She knows perfectly the technical aspects and market practices in our sector of activity.’

‘Very dynamic team with a pragmatic approach to cases.’

‘Olivia Luzi is an excellent lawyer with always appropriate technical and practical recommendations.’

‘Industry knowledge – Luzi Avocats keeps up-to-date with all the latest legal ramifications concerning the IT industry.’

Key clients



Expedia Group, Inc.

Sqills Product BV


Ortho Clinical Diagnostics


DQE Software


Federation Francaise Du Batiment (French Building Federation)

SCR Group


Consumer Goods Forum – Global Food Initiative

Work highlights

  • Advised OVHCloud on data sovereignty issues and the consequences of a possible cross-border data transfer to non-GDPR compliant countries.
  • Advised and assisted Zeturf/Zebet, one of the major online betting operators, in the context of a GDPR compliance audit mission.
  • Advised and assisted Sqills Product BV in the drafting and renegotiation of a SaaS license agreement with Ouigo (an SNCF company).

McDermott Will & Emery AARPI

Backed by offices across Europe, the Americas and Asia Pacific, the Paris data protection and data privacy group at McDermott Will & Emery AARPI combines bench strength with the experience of its team to advise insurers and multinational corporates in aerospace (Safran), packaging, automobiles (Nissan, Renault), e-commerce, beverages (Moët Hennessy) and software, on wide range of matters. Helmed by sector expert Romain Perray and supported by cybersecurity specialist Lorraine Maisnier-Boché (who was promoted to counsel in January 2022), the group assists with GDPR compliance programmes, international data transfers, on-site controls, data subjects’ rights issues and personal data breaches.

Practice head(s):

Romain Perray

Other key lawyers:

Lorraine Maisnier-Boché


‘Sharp advice and a very responsive team.’

‘Good collective, well-organised, with an optimised distribution of skills and areas of intervention, for a fluid and efficient collaboration, in complete confidence.’

‘Lorraine Maisnier-Boché is a very efficient and competent lawyer, who fully understands the issues of her clients and their needs. Her advice and analysis are always relevant, pragmatic and presented in a clear and direct way.’

‘Romain Perray: knowledge of data protection topics and responsiveness.’

‘The McDermott Will & Emery team, with Romain Perray as head of the personal data protection practice, is particularly efficient. He knows how to show great speed and exceptional diligence and expertise, essential qualities in a field where responsiveness and rigour are essential to deal with cyber-attacks and other regulatory requirements.’

Key clients

Nissan Motor Co & Nissan International

Aptar Group

Disma International (Azura Groupe)





Moët Hennessy


UKG Inc.

Work highlights

  • Aassisting Nissan Motor Co. with their GDPR compliance programme worldwide.
  • Providing softwares solutions company, Mirakl with ongoing assistance in the design and implementation of global data protection and a GDPR compliance programme for all aspects of its business.
  • Advising Moët Hennessy on multi-jurisdiction retention period issues.

Norton Rose Fulbright

The dedicated technology and innovation practice at the Paris office of Norton Rose Fulbright utilises the expertise of its team to assist financial institutions, insurers (Allianz, AIG) and major multinationals in energy (TotalEnergies), pharmaceuticals (Pfizer) and packaging, on a comprehensive range of data protection and data privacy matters. Tech and IP expert Nadège Martin (who brings over 20 years of experience in the practice area) leads the team, which advises on compliance, the sharing of customer information, cookie policies, information and consent policies, as well as transfer and privacy impact assessments.

Practice head(s):

Nadège Martin

Key clients





Schneider Electric


Groupe Beaumanoir


Work highlights

  • Advising Elopak in the context of the acquisition of Naturepak Beverage Packaging on IT, IP and data privacy issues.
  • Advising Wendel on the personal data protection and compliance aspects of the acquisition of ACAMS.
  • Advising on the data privacy issues raised by some of Citilog’s business activities in the context of the sale of this subsidiary by the Swedish company Axis Communications AB.

Pinsent Masons LLP

Backed by the bench strength of a global network spanning the Asia Pacific and EMEA regions, the TMT group at Pinsent Masons LLP assists a broad base of clients, including insurers, organisations in the sports sector and corporates in hospitality, healthcare, financial services and gambling. Headed by data protection and cybersecurity specialist Annabelle Richard, and supported by senior associate Anne-Sophie Mouren, who counsels on tech regulatory matters, the group assists with GDPR compliance, contentious data matters and regulator interactions, tech project guidance, cybersecurity governance and data privacy training programmes.

Practice head(s):

Annabelle Richard

Other key lawyers:

Anne-Sophie Mouren

Simmons & Simmons

The technology, media and telecoms team at the Paris office of global law firm Simmons & Simmons brings strength to data privacy and data protection matters, advising asset managers and multinational corporates across such sectors as chemicals, pharmaceuticals, fashion, electronics, motor vehicles, footwear and medical equipment. Led by Sarah Bailey (who brings over 25 years to the practice area) and Eric Le Quellenec (who joined in April 2022 from Alain Bensoussan-Avocats Lexing), the group’s full service extends to GDPR compliance, data breaches, internal investigations and data access requests.

Practice head(s):

Sarah Bailey; Eric Le Quellenec


‘Good, integrated team, collegiate and customer-focused.’

‘Sarah Bailey is commercial and approachable,’

Key clients


Work highlights

  • Advising a commercial-stage biopharmaceutical company on the personal data issues related to the launch of its business in Europe

White & Case LLP

Headed by IT expert Bertrand Liard and GDPR implementation specialist Clara Hainsdorf, the Paris-based data protection and data privacy group of global firm White & Case LLP assists financial institutions (Natixis, Société Générale, Crédit Agricole) and corporates in tech (Meta), food (Nestlé), manufacturing (Saint-Gobain), electronics (Celestica) and media, on a wide range of matters across the practice area. These include privacy and cybersecurity policies and audits, privacy claims and disputes, data processing and data transfer agreements, due diligence and privacy aspects of investigations and e-discovery.

Practice head(s):

Bertrand Liard; Clara Hainsdorf

Key clients






Société Générale

Agence Française de Développement

Crédit Agricole Group




Work highlights

  • Advising and representing Meta in several data protection and unfair competition matters in Europe, in particular, in France, Germany and Austria.
  • Advising Free in the context of a dawn raid by the CNIL (Commission nationale de l’informatique et des libertés) and the associated CNIL sanction procedure.
  • Advising Natixis in relation to data privacy issues.