Gerrish Legal SARL

Gerrish Legal offers Enterprise Solutions, Law Firm Services and Automated Law to clients being a multi-national company, a small to medium business, a start-up or a freelancer under which it provides commercial and contract law services; GDPR and data protection advice; new technologies law; intellectual property and an external in-house counsel service. As a digital law firm with experience supporting businesses of all stripes globally with their EMEA and UK legal requirements, we truly embrace the notion of doing business without borders. We stay on top of the latest trends, embrace innovation, and provide flexible legal advice in accordance with budget and deadlines. More specifically, we have launched a legal tech portal allowing users to generate bespoke legal documents in minutes. About us: https://www.gerrishlegal.com/aboutServices: https://www.gerrishlegal.com/services https://www.linkedin.com/in/charlottegerrishlegal?originalSubdomain=fr Founder, Charlotte Gerrish, a Solicitor of England & Wales and Ireland and an Avocat at the Paris Bar, is experienced in English, French, and European Law and has gained extensive industry recognition including the European Women of Legal Tech Award. Having worked at some of the world’s best-known law firms, Charlotte Gerrish witnessed the problems with the traditional law firm structure, and identified the different areas where disruption was required. With a passion for commercial law and design thinking, she founded Gerrish Legal to meet the needs of all kinds of businesses and establish more meaningful and successful relationships with her clients. ea@gerrishlegal.comfr.linkedin.com/in/evane-alexandre-b68784151 Evane Alexandre is currently a trainee lawyer at Gerrish Legal, a digital law firm spanning Paris, Stockholm, and London. With dual degrees from France and the United States, Evane has acquired valuable knowledge and expertise in business law, with a specialized focus on digital law. At Gerrish Legal, Evane has been assisting companies across the globe to help them navigate legal complexities and achieve compliance seamlessly and promoting legal innovation and global business collaboration. Proficient in commercial law, contracts, intellectual property, and data privacy, Evane will qualify and register at the Paris bar in 2024.

Representatives

Charlotte Gerrish

partner

Evane Alexandre

member

Contact

Publications

• French pass system to be deployed during 2024 Olympic and Paralympic Games.As France gears up to host the 2024 Olympic and Paralympic Games, expecting several million spectators and thousands of athletes, the country is not only preparing its infrastructure and venues, but also setting up measures to guarantee the smooth running and safety of this highly awaited event. Most notably, the French authorities have recently developed a robust pass system, designed to manage the accreditation and movement of individuals in several perimeters of the city within which traffic restrictions may be imposed. Given the significant privacy implications of this system, the Commission Nationale de l'Informatique et des Libertés (CNIL), France's data protection authority, has weighed in on the proposed system, providing key observations and recommendations to balance security needs with individual privacy rights.18 June 2024
• Loud and Clear! CNIL sends strong privacy with new €40 million fine of CRITEOFrench Data Protection Authority, the CNIL, has fined advertising company CRITEO €40 million for improper conduct in handling users’ personal data. This is one of the largest fines of its kind, and perhaps a sign of a new era.27 September 2023
• The interplay between contractual relations and the GDPR’s security principle: A lesson from FranceSecurity breaches and data loss are a core concern of any controller or processor. What possible avenues of redress can a Controller have when data losses are caused due to failings by its Processor? A recent case from the Lille Commercial Court in the context of the OVH data center fires tells us that the interplay between contractual commitments and the security obligations under Articles 82 and 32 of the GDPR can be a strategic one, both offering redress to controllers.16 March 2023
• The CNIL reminds us of the rules on e-marketing and the rights of individualsCompanies have long used e-marketing to facilitate their development and attract new customers, and in our digital world, reliance on such strategies is ever-increasing. As e-marketing strategies involve the processing of personal data, unsurprisingly, e-marketing is subject to strict regulations, which can lead to non-negligible sanctions if breaches occur. On August 17th 2022 the French Data Protection Supervisory Authority, the Commission Nationale de l'Informatique et des Libertés ("CNIL"), issued a 600,000 Euro fine against French hotel group, ACCOR for carrying out e-marketing without data subject consent, thus violating customer and prospect rights. The case is interesting in that it covers both GDPR and e-privacy regulation breaches and shows the interesting cross-over between the two pieces of legislation.26 October 2022
• Schrems II resolved? Unpacking the EU-US Trans-Atlantic Data Privacy FrameworkThe United States and the European Commission have agreed in principle to a new Trans-Atlantic Data Privacy Framework (the ‘Framework’) to foster EU-US data flows and address the concerns raised by the Court of Justice of the European Union (‘CJEU’) in the now infamous Schrems II decision. This is highly welcomed by businesses on both sides of the Atlantic, with continued data flows between the two regions underpinning €900 billion in cross-border commerce each year.11 May 2022