Cybersecurity 2026

FRANCE Law and Practice Contributed by: Jérôme Philippe, Laéna Bouafy, Thomas Retière and Annabelle Hamelin, Freshfields

Freshfields operates a premier global data, privacy and cybersecurity practice, featuring a dedicated team of more than 150 specialist lawyers across strategic hubs in London, Paris, Germany, the Unit - ed States and Asia. The firm offers comprehensive, multi-jurisdictional advice on a vast range of digital matters, spanning global data strategy, digital trans - formation, and complex cyber-regulatory frame - works. Its expertise integrates seamlessly with M&A, competition and intellectual property to address business-critical challenges. Freshfields manages

high-stakes mandates including large-scale data in - vestigations, cross-border litigation and incident re - sponse, notably in cases of complex cyber-attacks. Recent engagements include advising multinational leaders in the technology and financial sectors on global AI governance, international data flows and landmark regulatory disputes. By leveraging its vast international network, the firm provides a co-ordinat - ed and immediate response to the evolving digital and security needs of clients across all major indus - trial sectors.

Authors

Jérôme Philippe leads Freshfields’ Paris AI, data, privacy and cybersecurity team. He graduated as an engineer from the Ecole Polytechnique before becoming a lawyer. Combining legal and technical

AI Act, the GDPR and the Data Act, helping them navigate new obligations, anticipate regulatory risks and implement robust compliance frameworks. Laéna is a Certified Information Privacy Professional/Europe (CIPP/E) from the IAPP.

approaches, he provides a unique multidisciplinary vision to complex matters. He specialises in high- profile GDPR cases and litigation, privacy and cyber investigations, incident response and tech M&A. Additionally, Jérôme advises on emerging regulations such as the EU AI Act and the NIS 2 Directive, focusing on the intersection of competition law, AI and national security. Regarding the latter, Jérôme is a fellow (“auditeur”) of the Institute of Advanced Studies in National Defence (IHEDN), involved particularly in the debate on data sovereignty.

Thomas Retière is a mid-level associate in Freshfields’ global AI, data, privacy and cybersecurity team in Paris. He advises leading multinational clients on complex data protection, cybersecurity and EU

digital regulatory matters, with a particular focus on AI, digital markets and large-scale cross-border compliance. His experience includes managing high-stakes data breaches and ransomware incidents, regulatory investigations and contentious matters before the French data protection authority (CNIL) and criminal courts. Thomas also supports strategic digital transformation and M&A projects. Before joining Freshfields in 2023, he trained at top Paris firms and the CNIL. He is admitted to the Paris Bar and is a Certified Information Privacy Professional/Europe (CIPP/E) from the IAPP.

Laéna Bouafy is a senior associate in Freshfields’ global AI, data, privacy and cybersecurity practice in Paris. She advises leading global companies on high-stakes matters at the intersection of data protection,

cybersecurity and digital regulation, often in complex multi-jurisdictional contexts. Laéna has significant experience in guiding major operators through large-scale data breach incidents involving sensitive personal data affecting thousands of individuals, as well as supporting critical infrastructure and digital players on NIS2 compliance. She also advises clients on the fast- evolving EU regulatory landscape, including the EU

Annabelle Hamelin is an associate in Freshfields’ global AI, data,

cybersecurity and tech team in Berlin. She provides advice on data and tech matters within the French, German and European legal frameworks. She has experience in co-ordinating multi-jurisdictional surveys, including global product reviews and

120 CHAMBERS.COM

Powered by