image

Fabrice Naftalski, CIPP/E

Partner
Ernst & Young, société d'avocats

Fabrice Naftalski, CIPP/E, is a former member of IAPP Europe Advisory Board from January 2010 to December 2012, a data protection law expert, an Ernst & Young France data privacy officer (Correspondant Informatique et Libertés) and a EuroPrise legal expert to certify compliance of IT services and products to European Directive 95/46 (data protection law) and 2002/58 (privacy). Naftalski is the Ernst & Young law partner in charge of EMEIA IPIT law and has 18 years of data protection law practice.

Naftalski serves clients from the banking and insurance sectors, pharma, media and technology industries, nonprofit organizations, industrial groups (including airplane, automotive and luxury industries) and local governments, working with various stakeholders from legal, IT, DPO, R&D, compliance, risk management and HR. He assists clients in data protection law compliance programs and tools covering inter-alia inventory of data files, compliance audit and PIAs, drafting of notifications to the data protection regulators, personal data management procedures (including drafting and implementation of binding corporate rules and other tools to secure transfers), relations with national data protection regulators, retention policies, whistleblowing policies and codes of conduct.

He is also a regular lecturer on information technology law within ESSEC Business School and French universities.