
Molitor Avocats a La Cour
INPLP member firm · Luxembourg, Luxembourg
MOLITOR is a leading independent Luxembourg law firm with extensive international reach, known for pairing legal precision with practical commercial judgment. The firm covers a wide range of practice areas with capacity to team-up to better serve its clients’ interests, including banking and finance, commercial, corporate and M&A, employment, insurance, data and technologies, litigation, private equity, real estate and tax. The team delivers innovative, commercially focused solutions on domestic and cross-border matters. Our lawyers are multi-disciplinary specialists in their chosen practice areas, and they advise local and global corporate clients from across industry sectors in a wide range of corporate and commercial law matters, including Media, Data, Technologies & IP. Our firm is consistently involved in high-profile matters, and we work closely with an ever-increasing number of top-ranked international law firms on a variety of complex issues. MOLITOR is recognised by the main legal directories. The Legal 500 EMEA recommends the firm for combining “deep legal expertise, strategic foresight, and a client-first ethos” and for providing “practical and forward-looking solutions”. The firm’s Media, Data & Technologies team advises clients on the full range of issues arising from the creation, protection, exploitation and governance of media, data and technology assets. Its intellectual property practice covers trademarks and domain names (including Benelux, EU and international filings and UDRP disputes), patents, Benelux and EU designs, copyright and related rights, as well as trade secrets and know-how. The team also handles IT and new technologies matters, including IT contracts for software development and licensing, IT system integration, cloud computing and IT outsourcing. It further advises on telecommunications, electronic signatures and archiving, as well as the development and use of artificial intelligence tools, AI Act regulatory compliance, and the data protection and intellectual property implications of AI. In data protection matters, the team deals with GDPR information notices, privacy policies and procedures, data breach management and related notification requirements, as well as on international data transfers. The team also represents clients in administrative and judicial procedures before the competent authorities. The team advises on digital marketing and cookie compliance, and on cybersecurity (including NIS 2, DORA and GDPR compliance) and cyber-incident management. The Media, Data & Technologies lawyers support clients on a broad range of commercial matters, including reviewing and drafting various agreements and general terms and conditions. In addition, the team the legal and regulatory aspects of e-commerce and marketplaces, and consumer law and unfair commercial practices. Michel MOLITOR, Managing Partner, is Avocat à la Cour and has been a member of the Luxembourg Bar since 1985. He has a law degree from the University of Strasbourg and a PhD in political sciences from the University of Vienna. Michel has over 40 years’ extensive experience representing local and international companies and advising clients on commercial law matters. Michel heads the firm’s Business & Commercial department. He is a renowned litigator and is highly experienced in advising domestic and foreign banks, insurance companies and other professionals in the financial sector on regulatory compliance issues. He is an active member of the International Bar Association (IBA), the Luxembourg Insurance and Reinsurance Association (ACA) and the European Employment Lawyers Association (EELA). He is consistently ranked by the main legal directories. In The Legal 500, Michel is ranked in the Hall of Fame, recognising him as a lawyer at the very top of the profession, widely known and respected by peers and clients for his longstanding involvement in market-leading work. Clients describe him as a “seasoned lawyer with many years of experience” and say that he “always has a smart idea and solution to a problem”. Julien PÉTRÉ, Counsel, is Avocat à la Cour and has been a member of the Luxembourg Bar since 2019. He holds a Master’s degree focused on business and intellectual and property laws from the Université catholique de Louvain, and an LL.M. in Intellectual Property and Information Law from King’s College London. With over ten years of experience advising clients in Luxembourg, Julien heads the firm’s Media, Data & Technologies practice group and he regularly assists domestic and international companies and organisations in navigating complex legal and regulatory issues relating to intellectual property, data, technology and digital activities. Julien has a particular focus on legal matters arising at the intersection of innovation, regulation, digital transformation and business strategy. He also has significant experience in intellectual property litigation and enforcement and co-authored several publications including the Luxembourg chapter of the publication “Enforcement of Intellectual Property Rights in the EU Member States” and a dedicated article on the Luxembourg regime relating to cookies.
Representatives

Michel Molitor
partner

Julien Pétré
member
Contact
Publications
- When the GDPR Clock Never Stops: Lessons from a EUR 175,000 Fine for Delayed Data Subject ResponsesIn a recent decision (n° 1FR/2025 of 6 January 2025), the Luxembourg National Data Protection Authority (the “CNPD”) sanctioned a major credit institution for non complying with access request’s deadlines as set by the GDPR- despite arguments of force majeure and operational challenges. The initial sanction suggested by the CNPD during the investigation phase to fine the credit institution amounted EUR 493,560 for the breach of Art. 12 (3) and (4) of the GDPR comprinsing 47 access right requests made by data subjects.10 July 2025
- Blockchain vs Data protectionAt first sight, blockchain technology and the General Data Protection Regulation (GDPR) seem to be intrinsically incompatible. The convergence of personal data protection and blockchain technology raises therefore complex issues surrounding data privacy and data protection issues.30 July 2024
- AI Act and GDPR: managing the world of data in the world of privacy.Contrary to some persisting beliefs that the AI Act and GDPR are inherently incompatible, GDPR may in fact be interpreted in a way that concords with the purposes of the AI Act. Processing personal data through an artificial intelligence (AI) system’s algorithm triggers the application of GDPR.24 October 2023
- Transparency in the sights of the Luxembourg data protection AuthorityAs in the past, the Luxembourg data protection Authority (the “CNPD”) launched in 2020 a thematic investigation on transparency (Article 12.1 of the GDPR). This investigation resulted in interesting and useful decisions of 13 December 2022 on the Authority's expectations regarding the application of the principle of transparency in the context of web services.9 May 2023
- Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law: what are impacts on data protection?Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law entered into force on 17 December 2021 in the Member States (the “whistleblowing Directive”). While the transposition of the whistleblowing Directive in the different member States is underway, this new regulation will impact companies’ business compliance. In terms of personal data protection, new challenges are already be anticipated.6 December 2022
- The use of CCTV in light of the Luxembourg National Commission for Data Protection’s sanctions.In 2021, the Luxembourg National Commission for Data Protection (the “CNPD”) issued 48 decisions following assessments. 18 of these 48 decisions related to non-compliance of CCTV systems deployed by the controlled entities. Recently, the CNPD issued again new decisisions to sanction entities using CCTV systems that were not compliant with the GDPR.14 July 2022
- Back to work: open sesame!The health situation in Luxembourg has been stable for several weeks now which allows for a possible return to a pre-crisis situation, in particular for companies. Athough teleworking should remain in the spotlight, companies are willing to see their employees again physically at work.1 November 2021
- Enforcement of the GPDR in Luxembourg: an issue at stake?Max Schrems and his organisation NOYB (None Of Your Business) have recently begun a new battle, taking place in Luxembourg! Legal proceedings have been issued against two decisions of the Luxemburg Data Protection Authority (the “CNPD”). These decisions dismissed two complaints lodged against two different US-based data controllers, Apollo and RocketReach. These claims are currently pending before the Luxembourg Administrative Court.14 May 2021
- Are fines imposed by the Luxembourg Data Protection Authority for breach of data protection regulations insurable?There is no shortage of recent examples of cyber-attacks and the current COVID-19 pandemic is undoubtedly contributing to an intensification of this phenomenon1. While such attacks can be devastating…12 February 2021
- DATA PROTECTION AND CORONAVIRUS: A difficult challenge for Businesses.In the context of the coronavirus pandemic, companies are implementing exceptional measures to protect the health and safety of their employees and clients. As a result of these measures, employers may collect new types of personal data, for example they might want to check whether employees have symptoms of the virus.3 September 2020
Join the network
Applications from qualified privacy practices are reviewed individually by the INPLP board.