August & Debouzy advises many French and foreign companies on implementing the French Data Protection Act (Act of January 6, 1978, as amended).

We assist our clients with determining which processing needs to be notified to or requires the authorisation of the Commission Nationale de l’Informatique et des Libertés (French Data Protection Commission). We help them with the formalities which need to be completed within the company (notification of employees, works council).

We also assist with data transfers abroad: formalities with the CNIL, setting up data protection systems (Safe Harbor certification, signature of an agreement between the data controller and the recipient, BCR).

More generally, our clients seek our day-to-day advice on interpreting applicable provisions.