Oriane Zubcevic

I am a solicitor specialising in personal data protection within Bird & Bird's personal data protection team in Paris, working alongside Willy Mikalef and Ariane Mole. I joined the team in 2017 after several years at a renowned Parisian law firm specialising in data protection and new technologies

My expertise in personal data protection and my in-depth knowledge of new technologies have enabled me to assist both large international groups and start-ups in managing these risks, working with them on compliance with data protection regulations, including health data regulations, cybersecurity issues and CNIL procedures. I also assist clients with their projects to integrate AI technologies into their products and services.

Data has become strategic and is at the heart of the economic challenges facing businesses and organisations. It is a subject for management and operational teams that can sometimes be anxiety-inducing, is always complex and often uncontrolled, and therefore generates risks.

Thanks to my training in law and management at HEC Paris and the Ecole des Mines Paris, I understand the business of clients who share with me the projects they wish to develop or evolve so that I can offer them the best legal, pragmatic and operational solutions. Passionate about new technologies, I integrate the complexity of the law as simply as possible into the work processes of companies and organisations. Whether it's strategic projects (regulatory compliance, privacy impact assessments, managing access requests, employee monitoring, analysing complaints from individuals, focusing on biometrics) or highly operational projects (implementing video surveillance systems, transferring personal data, commercial prospecting, managing complex security incidents). Data protection is a cross-functional field, and I handle its complexity to protect companies from the risks associated with data management.

I support many companies in several sectors, including healthcare and life sciences, banking and insurance, and retail. I have extensive expertise in assisting and advising organisations on data project management, organising personal data governance within the company, conducting personal data protection audits, supervising data transfers, commercial prospecting and customer relationship management, and compliance with cookie regulations.
I lead numerous training courses and participate in conferences. I also publish articles in specialist journals.

I am an active member of the firm's Diversity & CSR committee.

I was ranked as a best lawyer 2026 by Legal 500 in Privacy and Data Security.

• Data protection audit in several group companies - my last experience was in an international manufacturing group.
• Data transfer management for an international company.
• Assistance during CNIL's inspection.
• Advice on big data project in the area of insurance.
• Assisting on GDPR's requirements (right of access, security breach, data protection impact assessment, etc.)