Overview
Romain has extensive experience in data privacy and data protection law, and lectures on these subjects in Master of Law classes at the University of Paris-I Panthéon-Sorbonne, the University of Paris-II Panthéon-Assas and the University of Paris V Cité.
He advises on the full range of data protection and data security for clients in life sciences, automotive, ad techs, insurance, e-commerce, leisure, social networks and even the public sector, especially in the context of smart cities projects. Romain is the EU head of the Firm’s Global Privacy & Cybersecurity Practice Group.
His experience extends to cross-border transfers of data (including global intragroup data transfers framework agreements), joint data controllers and/or data processor agreements, the formulation of privacy and/or cookies policies, and the use of personal data for marketing purposes, including through profiling techniques, notably in a Big Data context.
Romain has also conducted numerous privacy impact assessments (notably in case of pseudonymization or anonymization) as well international data protection audits in order to ensure compliance with both EU and domestic data protection requirements, more specifically those resulting from the General Data Protection Regulation (GDPR). He assists clients on data breaches and on data subjects’ rights issues.
Romain is also a regular contributor to leading legal publications such as LexisNexis and Lamy Editions for which he is the author of two significant manuals on, respectively, data protection and video monitoring issues.
Results
- Advised a multinational car manufacturer on its Global GDPR compliance program
- Advised a multi-jurisdictions B2C web platform in the course of investigations by the French Data Protection Authority
- Advised a multinational on the development and implementation of anonymization and pseudonymisation techniques in order to release special categories of data sets
- Advised a multinational on several contractual negotiations raising data capacities issues as data controller (joint or distinct) as well as data processor
- Advised a multinational on several data breaches
- Assisted biotech companies on several contractual negotiations with CROs and IT providers raising data capacities issues as data controller (joint or distinct) as well as data processor
- Advised a national professional association on the role of its members under GDPR and its impact on the sharing of personal data with public authorities
Recognitions
- The Best Lawyers in France, Lawyer of the Year, Privacy & Data Security Law, 2026
- Chambers France, Band 2 in TMT: Data Protection, 2025
- The Best Lawyers in France, 2022-2026
- The Legal 500 EMEA, Leading Individual, France: Data Privacy and Data Protection, 2023-2025
- Chambers Europe, France: TMT: Data Protection, 2024
Credentials
Education
University of Paris II Panthéon-Assas, DEA in Public Law
University of Paris II Panthéon-Assas, Maîtrise in Comparative Law
Institute of Political Sciences of Rennes, Major in Public Service
University of the Western Cape, South Africa, LLM Program
