Expertise·Digital · GDPR

Personal data
and digital platforms

The firm helps businesses, platforms and organisations comply with the GDPR, and assists them during audits, complaints and litigation.

Wind-sculpted snow, in black and white

Clients

Who the firm works with

01Businesses and retailersCustomer and prospect data, human resources, cookies and marketing tools.
02Platforms and digital playersTerms of use, moderation, obligations specific to platforms and social networks.
03Associations and organisationsData on members, donors and beneficiaries, including sensitive data.

Services

From compliance to litigation

Compliance

Mapping of processing activities, records, legal bases, retention periods, information notices, audit and action plan.

Outsourced DPO

Appointment of the firm as data protection officer and ongoing compliance monitoring.

Contracts and data security

Contract audits, data processing clauses, confidentiality obligations, transfers of data outside the European Union.

Audits and litigation

CNIL inspections and formal notices, complaints, data breaches, exercise of rights.

Case examples

Situations handled by the firm

01Preparing for a CNIL inspection or responding to a letter
02Notifying a data breach within the 72-hour deadline
03Responding to an access or erasure request
04Deploying an AI tool or solution that processes personal data
05Updating contracts with service providers
06Revising the cookie banner and the privacy policy

Legal framework

General Data Protection Regulation (GDPR)

  • French Data Protection Act
  • CNIL recommendations
  • Digital Services Act (DSA)

The GDPR (Regulation (EU) 2016/679) and the French Data Protection Act of 6 January 1978 govern all processing of personal data. The CNIL (French data protection authority) clarifies how they apply through its guidelines and recommendations, and monitors compliance.

Online platforms are also subject to the Digital Services Act. The firm also advises on automated systems and artificial intelligence solutions that process personal data.

Publications

Recent analysis

All publications

Get in touch

Let’s talk about your project