Romain Perray

Romain advises clients across the full spectrum of data protection and data security matters, including automotive, adtech, life sciences, insurance, e-commerce, leisure, social networks, and even the public sector, especially in the context of smart city projects. His experience extends to multijurisdictional cross-border data transfers strategy (including global intragroup data transfers framework agreements), joint data controllers and/or data processor agreements, the formulation of privacy and/or cookies policies, and the use of personal data for marketing purposes, including through profiling techniques, particularly in a Big Data context. He has also conducted numerous privacy impact assessments (notably in cases of pseudonymisation or anonymisation) and international data protection audits to ensure compliance with both EU and domestic data protection requirements. Beyond data privacy, he also advises on the EU Data Act, open data issues and cybersecurity (including incident response to cyberattacks, NIS2 and DORA compliance programs). He is also a lecturer in data privacy and data protection at the University of Paris-I Panthéon-Sorbonne, the University of Sorbonne Abu Dhabi, the University of Sorbonne Morocco and the University of Tokyo. Alongside his work, he lectures on data privacy and data protection in Master of Laws classes at the University of Paris-I Panthéon-Sorbonne, the University of Sorbonne Abu Dhabi, Sorbonne Morocco and the University of Tokyo (2026). He is also a regular contributor to leading legal publications, including LexisNexis and Lamy Editions, and the author of two significant manuals on data protection and video monitoring. He is a bilingual speaker and advises clients in both English and French. · Bird & Bird