Data & Cyber

Our Data & Cyber department is involved in all aspects of data, digital and cyber security:

Assisting international companies and public entities in complying with the GDPR and all regulations relating to data, personal data and technologies in general (e-Privacy, AI Act , Data Act, DSA etc.)
Assisting with pre-litigation and litigation before the courts (particularly during IT & Data disputes) and before administrative authorities such as the CNIL and the ANSSI
Drafting and negotiating complex commercial and IT contracts: software, licences, integration, CRM or business applications, maintenance, outsourcing, cloud computing
Management of cyber-attacks and cyber-security incidents on a global scale, including exchanges and notifications to various authorities around the world (EU, Asia, India, South America, etc.)
Advising clients on the digital use of content (social networks, audiovisual and webTV, advertising, influencer partnerships, etc.)

Our broad scope. We work with clients in a wide range of sectors: distribution, defense & security, e-commerce, telecoms, luxury, banking and finance, insurance, health & pharmaceutical, aviation & space, construction, real estate.

Our pioneering approach to compliance. We have created and developed tools to help our clients deal with new requirements in an operational way:

A tool to help qualify the parties to a contract
A tool for monitoring and assessing data flows
A tool for assessing the legal basis for data processing

Our involvement in public issues. We are regularly consulted by ministries, government agencies and elected representatives to provide legal solutions. For example, we have assisted ministries in drafting decrees and participated in the implementation of innovative technologies involving biometrics in particular.

What they say

Legal 500 EMEA 2026 – The department is ranked in “Data Privacy and Data Protection” and “IT and Internet” categories
Franklin demonstrates notable expertise across all facets of data privacy and protection. The team maintains close ties with domestic and regional corporates and is also active in cross-border matters, where it assists international companies with multi-jurisdictional data mandates. Practice head Merav Griguer is an established figure in the field, with experience representing clients before the CNIL in sensitive matters and advising on non-contentious data privacy matters.
Testimonials:
“A dynamic team that knows how to approach issues operationally with specific expertise. Good knowledge of technical subjects. Effective pre-litigation support.”
“Experienced team.”
“Fantastic team – joy to work with, high quality output.”
Leaders League 2025 – The team is ranked in the category “Data Protection Law and Cybersecurity” (Leading) of the « Innovation, technology & telecoms» Guide
Leaders League 2025: Gold award « Personal data and cyber security »
Leaders League 2025 – The team is ranked in “Compliance program” (Excellent) and “International investigation and internal investigation” (Highly recommended) categories of the Compliance Guide
Leaders League 2025 – The team is ranked in the category “E-Health” (Excellent) of the Healthcare, pharmaceuticals & biotech Guide
Leaders League 2024 – Silver award « Personal data and cyber security »
Leaders League 2024 – Special mention « Health – Pharmaceuticals Regulatory law »