Marie-Laure Lapeyronie

A passionate lawyer specializing in data protection and digital data governance, I assist companies in structuring and fully securing their GDPR compliance, integrating emerging issues related to artificial intelligence and algorithmic systems.

After practicing as an independent consultant through my network on data protection assignments, my activity naturally evolved, and I structured this expertise within my own firm to offer strategic, rigorous, and results-oriented support.

I am involved in high-value-added assignments, including:

• In-depth compliance audits;

• Mapping of processing activities and implementation of the register (Article 30 GDPR);

• Analysis and securing of contractual environments (GTC, SaaS contracts, sub-processors, liability clauses, international transfers);

• Structuring of internal documentation;

• Management of compliance implementation plans and coordination with business and IT teams.

My approach is based on a dual legal and operational understanding of the challenges related to digital environments (software, data, algorithmic systems), enabling regulatory compliance to be aligned with the company's technical and business reality.

I work in both operational consulting and strategic support for general management, compliance teams, and international projects.

My goal: to transform GDPR compliance into a lever for risk management, credibility, and sustainable structuring, with the aim of simplifying GDPR for you, so that it becomes a tool and not a constraint.

• Contract analysis, drafting, negotiation, review, updating, and GDPR compliance.

• Mapping of data processing activities and identification of sensitive flows.

• Creation, maintenance, and updating of the processing register with the external DPO.

• Data breach management.

• Responses to data subject rights requests within the imposed deadlines.

• Conducting GDPR compliance audits.

• Support for compliance implementation for agency directors (subsidiaries).

• Drafting and updating of information notices and privacy policies.

• Compliance of the company's websites (e.g., cookies).

• Conducting DPIAs to assess and mitigate risks related to sensitive data.

• Coordination of audits and development of action plans with the external DPO.

• Training of personnel from the parent company and its subsidiaries.

• Monitoring of recommendations and control of their implementation.

• Management of requests related to data subject rights and responses to authorities.

• Application of privacy by design and privacy by default in the creation of digital applications.

• Close collaboration with the IT team on data protection for IT projects.

• Legal watch on personal data protection and the legal implications of AI.

• Verification and contractual updating of airline company contracts, analyzing the compliance of commercial contracts with GDPR and ISO 27001 standards in an international environment.

• Drafting and modification of contracts (amendments, change orders/contract changes), integrating and adjusting specific data protection clauses.

• Participation in the updating and management of the internal contractual database.

• Legal analysis and internal and external collaboration (English-speaking lawyers) by conducting in-depth legal research to address complex issues related to data protection in an international environment.

• Close collaboration with internal stakeholders (IT, legal, and operational teams).