Lauded by one client as being the ‘number 1’ data privacy, cyber and AI experts in France, the team at August Debouzy has an undeniable force within the industry and is a regular advisor to a litany of outstanding clients including global social media platforms, applications, governments, luxury brands and leading gaming companies. The firm regularly advises on data breaches as data controllers and its subsequent regulatory notification requirements, as well as compliance, GDPR issues, Florence Chafiol leads the team and is a GDPR expert and is assisted by Roxane Blanc-Dubois, who is a life sciences and health regulation expert and Stéphanie Lapeyre, who has particular strength advising on matters pertaining to new technologies and associated data issues.

Baker McKenzie is a well respected team in the field and acts for an exclusive list of clients which includes major banks, software conglomerates, and fashion houses. As part of its work, the firm advises clients on CNIL investigations, cyber crime, and data privacy litigation. Magalie Dansac Le Clerc has an outstanding wealth of experience and advises clients on GDPR compliance and related issues, including data transfer issues, processing of sensitive data, data breaches, information and consent, direct marketing, data privacy impact assessment, data subject access requests and data processing agreements. Rémy Bricard and Laurent Szuskin are other names to note.

The team at Bird & Bird regularly handles regulatory compliance, GDPR issues, data transfers, personal data issues, ransomware attacks and data governance both in France and across other European states. Clients include large consultancy firms, sports organisations, banks and major players in the health and life sciences sectors. Digital compliance expert Ariane Mole heads the practice and has expertise in dawn raids, data-related litigation, cyber security and e-health. Willy Mikalef leverages his experience to advise on data protection and cybersecurity requirements among other matters. Oriane Zubcevic is noted for handling GDPR compliance audits and Julie Verdure provides additional support.

DLA Piper's clients include life sciences and pharmaceutical companies, banks, and data science companies. The team is adept at advising on compliance with data protection laws, particularly with regards to healthcare professionals, data processing, internet web sites, marketing campaigns and events, negotiation of data processing agreements, the data implications of AI, GDPR compliance and cross-border data transfers. Denise Lebeau-Marianna advises on cybersecurity programme incident response plans, e-discovery procedures and blocking statutes, data protection aspects of internal investigations and projects involving AI. Yaël Hirsch has significant expertise in CNIL contentious work.

The team at Gibson Dunn is jointly led by Ahmed Baladi, who handles matters concerning GDPR compliance alongside data breach and national security matters including handling investigations, enforcement defence and crisis management, and Vera Lukic, who in addition to advising on IT and data privacy aspects in connection with major M&A deals, including carve-out and transition issues is also noted for her expertise in strategic digital related-projects including NFTs, AI, and Metaverse projects Clémence Pugnet, who is noted for her ability to draft privacy and cookie policies, provides additional support.

Gide Loyrette Nouel A.A.R.P.I. handles data audits, data protection impact assessments, GDPR compliance and data surveys. The team is headed by Thierry Dor who in addition to handling personal data processing matters, also leads on global data transfers and GDPR compliance as well as contentious matters with the CNIL and in matters relating to cybersecurity. Aurélie Pacaud and Julien Guinot-Deléry provide support in matters of AI and data transfers outside of the EU.

The ‘very sharp’ team at Herbert Smith Freehills LLP is equally adept at handling contentious and advisory matters for its clients. The firm regularly represents its clients on GDPR compliance, CNIL issues, and large-scale digitalisation projects. Noted by clients for being an ‘outstanding lawyer’ the team is led by Alexandra Neri, who in addition to being a cyber crime expert is noted for her ability to handle data privacy issues and dawn raids, as well as data transfer conflicts. Sébastien Proust is also a key name at the firm; his recent work includes advising on the digitalisation of books and the “right to be forgotten”, and the legal status of video platforms as well as personal data rights.

The team at Hogan Lovells (Paris) LLP is lauded by clients for being ‘one of the most expert teams in the market’ and acts for a strong roster of clients including international mass media companies and search engines. Etienne Drouard advises private and public entities operating IT and telecoms infrastructures, as well as clients involved with online services, digital media, e-commerce, mobility, and transport services, financial, insurance and payment services. Julie Schwartz has significant expertise with regards to data breach responses, negotiating data processing agreements, and assisting clients during CNIL dawn-raids as well as GDPR compliance, drafting internal policies and privacy impact assessments.

The data privacy and data protection team at Clifford Chance regularly assists with GDPR compliance, as well as data protections issues related to emerging technologies and strategic matters. Dessislava Savova is a specialist in terms of data protection, cybersecurity, artificial intelligence, and platform regulations. Alexandre Balducci is noted for his AI and cyber security capabilities. The team was further bolstered by the arrival of Patrice Navarro from Hogan Lovells LLP in 2024.

CMS Francis Lefebvre is proficient in handling contentious and non-contentious matters for its roster of clients which includes national and multinational companies, public entities, banks, gaming technology companies, and social media platforms. The team advises on clients’ responses to CNIL investigations and dawn raids, data regulatory compliance, and also has notable strength in data security. Anne-Laure Villedieu is an expert in personal data transfers and privacy impact assessments but also harnesses the firm’s employment team to advise on employee data transfers. Maxime Hanriot and Pierre Fumery are other names to note.

Noted for its strength in the life-sciences, pharmaceutical, and healthcare sector, De Gaulle Fleurance & Associés advises on digitalisation processes, data security, data transfers and data aspects of M&A transactions, among other matters. The team is led by Cécile Théard-Jallu, who advises clients on the implementation of their digital innovation strategies; Georgie Courtois, who is noted for handling software piracy issues; Jean-Marie Job , who is adept at advising on personal and commercial data issues as well as CNIL disputes;  and compliance expert Matthieu Dary.

The team at Derriennic Associés  has a strong presence within the industry and fields a sizeable in this space. The firm frequently undertakes matters of contract management and negotiation, privacy impact assessments, as well as DPO and CNIL matters. Alexandre Fievee advises on data protection as it relates to new technologies, an area where François-Pierre Lani is also prominent. Pierre-Yves Margnoux advises on the data aspects of digital transformation projects.

FÉRAL is a strong choice for clients from the financial services, chemicals, healthcare, industrial engineering, pharmaceuticals and life sciences sectors. Under the firm's regular handlings includes data protection compliance audits, data transfer agreements and binding corporate rules, data protection impact assessments, CNIL dawn raid management, data protection training, and drafting IT guidelines, GDPR compliance, and international data transfer contracts. Richard Willemant is regularly sought out to provide immediate assistance to clients in the wake of data breaches. Olivia Luzi is an expert in GDPR compliance and data protection regulations. Christiane Féral-Schuhl and Bruno Gregoire Sainte Marie are also key names in the team.

Handling data protection liability issues in M&A transactions, data transfers, and compliance matters, K&L Gates LLP has a strong presence in the industry. Practice head Claude-Étienne Armingaud is a key name for cross-border technology matters.

The team at Latham & Watkins regularly handles matters pertaining to cookies and other trackers, international transfers of data, data protection considerations in AI, data protection considerations in the taking of evidence abroad as well as enforcement and litigation matters. Clients include emerging companies, strategic investors as well as multinational corporations. The team is led by Myria Saarinen, who is a key litigator and leverages significant experience.

Linklaters is well placed to handle the full gamut of data protection and privacy issues including litigation, transactional and regulatory issues. Practice head Sonia Cissé advises on the data aspects of cyber security and fintech, and also has expertise in assisting with commercial contracts, sourcing and complex procurement transactions ,regulation of data and networks, e-commerce, cybersecurity security and telecoms projects and interweaves these aspects into her data advice, GDPR compliance and personal data breach work.

McDermott Will & Emery AARPI has a particular strength in the life sciences and biotechnology sectors as well as insurance, e-commerce, digital advertising and luxury goods and advises market leaders in these sectors. The firm regularly assists on matters pertaining to the full gamut of EU data regulation, international intragroup data transfer agreements, GDPR and cyber security compliance, CNIL investigations and strategic data contract negotiations. Romain Perray has significant experience in Data Act compliance. Lorraine Maisnier-Boché leverages her expertise in health, complex IT projects and life sciences. Hélène Adda is also a name to note on the team and handles data protection audits, regarding in particular the review and risk assessment of user experience on websites and mobile applications.

The team at Osborne Clarke is sought after by clients from sectors including life sciences, healthcare, gaming, shipping and logistics, insurance, energy, sport, travel, IT, energy, technology, media and communications. The team regularly advises on cyber attacks, data breaches, outsourcing and privacy policies. Claire Bouchenard is an expert in advertising as it relates to personal data, commercial and digital regulation and Xavier Pican leverages his previous expertise working in-house to advise clients on drafting and negotiating for complex technology and data projects. Laurène Zaggia is also a key name in the team and has strengths with regards to personal data issues and GDPR. The practice was further bolstered by the arrival of Antoine Sullice in November 2024 from Herbert Smith Freehills LLP.

White & Case LLP's team is a preferred choice for clients from the financial services, media and advertisement, transportation, and luxury brands industries, among others. The team is led by Bertrand Liard, who has strength in advising on cross-border disputes, compliance issues and transactions as well as regulatory issues, and the ‘excellent’ Clara Hainsdorf, who is noted for her ability to advise on GDPR and CNIL matters.

ADVANT Altana advises on CNIL matters, GDPR compliance, data processing audits and personal data management protocols. The team is led by litigator Pierre Lubet, Laura Morelli and Jean-Guy de Ruffray. Morelli is a popular choice for clients in the healthcare, engineering, technology and IT, food, luxury, fashion, consumer goods and real estate sectors, and De Ruffray leverages his prior experience at major international law firms. Camille Raclet is also a name to note and advises on audits, implementation of compliance plans, the management of security breaches, as well as drafting and the review of regulatory documentation.

Alain Bensoussan-Avocats Lexing's portfolio of work strikes a good balance between regulatory compliance work, data litigation matters, and DPO policies with a particular focus on emerging technologies. Key names include Alain Bensoussan, who is a data and emerging law expert, digital litigation lead Virginie Bensoussan-Brulé, Chloé Torres, compliance and certification expert Anne Renard, and Céline Avignon.

The team at Algo Avocats acts for clients across a plethora of industries including software, retail and manufacturing. The team is co-headed by Sandra Tubert and Laura Ziegler who collectively handle GDPR compliance matters, CNIL notice procedures, data protection impact assessments, data protection compliance audits as well as international data transfers, personal data breaches and the implementation of web-marketing projects.

At Bersay, Bradley Joslove, who is able to draw on previous experience of practising in the US, and Frédéric Lecomte are the key names. The group is adept at handling cross-border GDPR compliance issues, including the transfer of data, the implementation of GDPR tools and crisis management for clients from a cross-section of industries.

Delsol Avocats’ team has a particular niche advising on data protection as it relates to life sciences and health information systems but also regularly advises on GDPR compliance, CNIL dawn raids, compliance audits, DPO matters and data protection policies, among other matters. The team is led by Jeanne Bossi Malafosse, who also heads the firm’s life sciences department and advises on the protection issues and regulatory requirements of health data sharing.

The team at Franklin advises on the drafting and negotiating of complex commercial and IT contracts, the management of cyber-attacks and cyber-security incidents, GDPR compliance, and contentious matters including CNIL issues. The firm is a popular choice for French and international corporates with a strong multijurisdictional element with services expanding to the Middle East, US, South and East Asia and Africa. Merav Griguer is noted for handling data disputes before regulatory bodies.

Momentum Avocats is sought after by major French and global clients to handle data access requests, data issues as they pertain to AI, data transfers and data protection impact assessments. Julie Carel  Julien Canlorbe Jean-Sébastien Mariez are the key names.

Norton Rose Fulbright regularly advises on the collection, use, storage, disclosure, transfer and destruction of business data as well as data privacy issues as they relate to IT transactions. Nadège Martin  handles GDPR compliance, cross-border data issues, and is particularly skilled in advising clients in the life sciences sector and on internal investigations. Geoffroy Coulouvrat handles major cyber incidents and has a particular specialism in advising pharmaceutical companies on data protection and public health regulations applicable to medical studies.

Simmons & Simmons frequently combines with the firm’s European offices to provide cross-border advice on data regulatory compliance. The group also assists with data breaches, interceptions of communications and data access requests. Sarah Bailey is a key name for matters relating to health and financial data; Emilie Danglades-Perez provides additional support. Former co-head Eric Le Quellenec left the firm in March 2025.

The team at Taylor Wessing regularly advises on GDPR compliance programmes, data protection audits and impact assessment including employee system, set-up and support for data protection governance schemes, as well as CNIL investigations and international data sharing contracts. Marc Schuler  handles the full gamut of regulatory, advisory, and transactional issues. Benjamin Znaty is a key port of call for IT software and hardware providers, financial and payment technology providers, e-commerce platforms and digital media industries.

UGGC Avocats is notably active in handling an impressive mix of contentious and non-contentious matters. Its workload includes advising on the management of data breaches, the implementation of data compliance programmes, the management of personal data and representation in disputes relating to the deindexation of e-data. Corinna Khayat is the key name.

Bignon Lebray

Clyde & Co LLP

Ernst & Young Société d'Avocats

Freshfields Bruckhaus Deringer LLP

NEXT AVOCATS

Pinsent Masons LLP

PwC Société d'Avocats