Sandra TUBERT advises French and international clients in data protection and privacy law matters.
She has gained in-depth and cross practice knowledge of privacy and data protection issues, thanks to the various matters she has worked on since 2012 as well as the secondments in legal departments of several companies
This enables her to assist clients in various projects, including feasibility notes and memoranda (where data is at the heart of the project, mainly big data, Artificial Intelligence, blockchain and connected objects matters), data protection impact assessments, data protection compliance audits, implementation of GDPR compliance programs, assistance for the implementation of international data transfers and outsourcing projects, implementation of marketing and web marketing projects (direct marketing, cookies placement, profiling, drive-to-store) in sectors such as tech, retail, life science, healthcare and transportation services.
She also provides daily assistance to DPOs, CTOs and legal departments.
Her past experiences have allowed her to acquire a solid experience in CNIL pre-litigation and litigation, which enables her to assist her clients in their relations with the CNIL or in pre-litigation and litigation procedures : investigations, formal notices and CNIL sanction procedures, procedures before the French courts.
She also acts in matters of communication law, whether for audits and compliance of websites or to advise her clients on the compliance of their web marketing and direct marketing projects (targeted advertising, cookies, profiling, drive-to-store, etc.).
Finally, she provides assistance in cybersecurity matters, whether in the context of personal data breach management (analysis of the situation to determine whether notifications to the authorities or the data subjects are necessary, crisis meetings, drafting of notifications) or in terms of advice on the formalities to be carried out with the ANSSI, for example in the context of the use of encryption methods, or in assisting clients to identify the certifications that can be obtained (eIDAS, RGS, etc.).