Data Protection and Privacy 2026

EU Trends and Developments

Trends and Developments Contributed by: Charlotte Gerrish and Evane Alexandre Gerrish Legal

Gerrish Legal is a Paris and Stockholm-based bou - tique law firm with additional presence in London, specialising in privacy, data protection, AI and tech - nology law. With lawyers qualified in France, England and Wales and Ireland, the firm’s multilingual team advises international clients – from scale-ups to list - ed multinationals – across sectors such as SaaS, life sciences, fashion, recruitment, security and catering. Its core practice focuses on GDPR compliance, in - ternational data transfers, AI regulation, digital plat - form regulation, privacy-by-design frameworks, data

breach management and privacy litigation. The firm also has strong expertise in commercial law, par - ticularly technology contracts (SaaS), cross-border commercial arrangements and intellectual property matters. Gerrish Legal advises both EU-based or - ganisations on privacy compliance and non-EU com - panies expanding into Europe (particularly France) by adapting their data governance frameworks and commercial practices to EU regulatory requirements, including the GDPR, AI Act, Data Act and sector-spe - cific digital regulations.

Authors

Charlotte Gerrish is the founder of Gerrish Legal and a Franco-British lawyer qualified in France, England and Wales, Ireland, and registered with the Swedish Bar Association as an EU Lawyer. Based in Paris and

Evane Alexandre is a French-qualified lawyer admitted to the Paris Bar specialising in privacy, data protection, AI and technology law. A

graduate of the DJCE Master’s programme with an LLM from an American university, she advises clients on GDPR compliance, international data transfers, AI regulation, privacy-by-design implementation and data governance frameworks. Her professional experience spans law firms, global companies and academia, including the legal department of a French luxury fashion house. At Gerrish Legal, she combines her privacy expertise with a strong foundation in French commercial and contract law, providing strategic guidance on technology agreements, cross-border data flows and regulatory compliance.

Stockholm, she specialises in privacy, data protection, AI and technology law, advising clients on GDPR compliance, international data transfers, AI regulation, privacy litigation and digital regulatory frameworks. Her practice encompasses strategic technology (SaaS) contracting, cross-border commercial arrangements and compliance advisory. Charlotte regularly assists non-EU companies expanding into France and Europe, adapting their data governance and commercial frameworks to EU regulatory requirements including the GDPR, AI Act and Data Act.

Gerrish Legal 15 rue de Surène 75008 Paris France Kammakargatan 47 11124 Stockholm Sweden Tel: +33 6 74 02 45 07

Email: info@gerrishlegal.com Web: www.gerrishlegal.com

103 CHAMBERS.COM

Powered by