People default image

Stéphanie Lapeyre-Castellane

Counsel
About

Stéphanie is Counsel in the IPT team. She specializes in new technology law and has been advising numerous French and foreign companies on their innovative projects for over 10 years. Her clientele cover a wide range of sectors, including luxury goods, retail, media, energy, transport, healthcare, finance and tech.

In particular, she has acquired recognized expertise in all issues relating to the protection of personal data, and is involved in a wide range of subjects and fields, such as the implementation of GDPR compliance procedures, contractual negotiations, investment operations, internal investigations, product launches involving cutting-edge technologies (AI, connected objects, facial recognition, etc.), data transfers, large-scale profiling, targeted advertising, management of data subjects’ rights, and so on. 

She also assists her clients in the event of cyber attacks and data breaches, throughout the management of the resulting crisis.

Finally, she assists clients who have been the subject of formal notices or inspections in managing their CNIL pre-litigation and litigation procedure. She also assists clients in their “personal data” litigation before civil and criminal courts.

Stéphanie always strives to offer a high level of expertise and knowledge of market practices, while maintaining a pragmatic and operational approach to her clients' needs.

Professional QualificationsAvocate admitted to the Paris Bar

EXPERIENCE

  • Advise of several CAC40 companies, including the world's leading beauty company, in the implementation of new advertising models requiring better exploitation and enrichment of data through relevant partnerships;
  • Assistance of a major digital services group regarding its crisis management following cyber attacks;
  • Advise of an American fund on all aspects of personal data protection during the acquisition of a network of French banks from a major international banking group;*
  • Advise of a French multinational, operating in particular in the water and energy sectors, in the management of all its international data transfers;*
  • Advise a major French industrial group with diversified services (construction, real estate, telecoms, etc.) in implementing best practices in the use of generative AI;*
  • Support for several clients in various sectors (hotels, energy, transport, IT, media, cosmetics, delivery, etc.) in their pre-litigation and litigation before the CNIL (assistance during inspections, drafting of observations in response to the Rapporteur’s report, assistance during hearings before the CNIL, support in implementing corrective measures).*

*Previous law firm matters

Languages
  • French
  • English
Education
  • Sciences Po / Law University double degree, 5 years
  • Sciences Po Diploma in International Affairs, 2007-2012
  • Université Paris 1 Panthéon-Sorbonne, Master 1 in Business Law, 2007-2012
  • Université Paris 1 Panthéon-Sorbonne, Master 2 in Digital Creation Law, 2007-2012

Publications and media

  • Le RGPD 5 ans après : une instrumentalisation manifeste des droits des personnesLe RGPD 5 ans après : une instrumentalisation manifeste des droits des personnes - La Tribune, 26 May 2023
  • Contrôles de la CNIL et sanctions: les principales tendances - Le Journal du net (JDN), 18 April 2023
  • Pistage des réseaux sociaux par le fisc : le particulier ne peut s'opposer à la collecte de ses données - La Tribune, 3 April 2021
  • Les éditeurs n’ont plus que quatre mois pour adopter la nouvelle recette de la CNIL sur les cookies - Edition multimédia, 30 November 2020
  • Quelles sont les évolutions dans le référentiel CNIL en matière de gestion RH ? - Culture RH, 12 May 2020
  • Employee data breachesEmployee data breaches - One Trust - Data Guidance, 2 April 2020
  • Entreprises, les clés d'une application réussie du GDPR - Livre Blanc publié par l'AFAI, Tech'In France et le CIGREF, 14 November 2017
  • Les formalités CNIL en open data - Le Monde du Droit, 12 September 2017
  • Le délégué à la protection des données : une force pour l’entreprise - Les Echos, 18 July 2017

Seminars

  • Stéphanie has taught at the Université of Paris-Dauphine and at the Université of Paris-Cité.

Prior Experience

  • 10 years with a leading French law firm, particularly renowned for its practice in personal data protection and new technology law.

Connect