Oriane Zubcevic

I am a senior data protection attorney working in the Paris office at Bird & Bird. I have several years of experience in a data protection team of a leading law firm in Paris recognised in data protection & new technology.

My expertise in data protection and my in-depth technology knowledge have given me the opportunity to assist both large firms as well as start-ups in the management of data protection issues by dealing with them with data protection regulation compliance and cybersecurity issues. I also act for clients in proceedings before the CNIL.

The use of new technologies, and in particular the Cloud, is having an impact on companies' business models. The new relationships developed by companies and organisations with their clients are based on data. Data has become strategic and is at the heart of the economic and commercial challenges for clients. This is a front-line subject for management and operational teams, sometimes anxiety-provoking, always complex and often not mastered and therefore risk generators.

Thanks to my training in both law and business at HEC Business School, I have a good commercial understanding, and my clients trust me to work on projects they want to develop or create, so I can propose the best legal, pragmatic and operationally compliant solutions for them. I integrate the complexity of the data protection regulation as simply as possible into internal processes of the companies and organisations, whether for strategic projects (compliance, privacy impact assessment, dealing with data subjects' complaints and requests, focus on biometrics devices) or highly operational projects (CCTV surveillance, transfer of personal data, marketing issues, and data breach). Data protection is a cross-disciplinary area. I deal with its complexity to protect the clients I work with from data management risks.

Having a lot of experience in advising several companies in sectors as diverse as banking, social housing, manufacturing, consumer brands and healthcare, I am able to provide strong expertise to assist and advise organisations on issues such as data protection project management, data protection governance, data protection compliance audits, management of personal data transfer, marketing issues and customer relationship management, and cookie regulation.

I conduct several data protection training sessions and I am a speaker at conferences. I also published articles in legal journals.

• Data protection audit in several group companies - my last experience was in an international manufacturing group.
• Data transfer management for an international company.
• Assistance during CNIL's inspection.
• Advice on big data project in the area of insurance.
• Assisting on GDPR's requirements (right of access, security breach, data protection impact assessment, etc.)