Paul Lanois

Paul Lanois is a European technology and privacy professional at Fieldfisher and an attorney admitted to the bar in California, New York, the District of Columbia (DC) and the Supreme Court of the United States (SCOTUS).

Paul provides guidance on information governance, data protection, privacy, cybersecurity and digitalization. In particular, he advises businesses on a wide range of domestic and international privacy compliance matters, including issues related to privacy and data optimization, social media integrations, mobile apps, Internet of Things and connected devices, e-commerce and electronic payments. Paul also advises on cybersecurity matters, including on data breaches and incident response, risk assessments, policy development and compliance with industry standards, such as the Payment Card Industry Data Security Standard (PCI DSS).

Before joining Fieldfisher, Paul was Vice President and senior legal counsel at a leading international bank, Credit Suisse, at its headquarters in Switzerland as well as its Hong Kong office. As in-house senior legal counsel, he advised the bank on various matters, including its global compliance program, cross-border matters, the bank’s digital transformation initiatives and the launch of new online services and products. Before that, he worked on technology transactions at large international law firms in London (United Kingdom) and Luxembourg.

Paul has written extensively on current developments in relation to cybersecurity, as well as American and European privacy law. For example, he was one of the lead authors of the Cloud Security Alliance’s guidance “Observations and Recommendations on Connected Vehicle Security” published in 2017 which covered vehicle security connectivity, possible attack vectors of concern, and recommendations for securing the connected vehicle environment. He was also one of the lead authors of the Cloud Security Alliance’s guide on “Future-proofing the Connected World: 13 Steps to Developing Secure IoT Products” published in 2016 and which provides a comprehensive guidance for product designers and developers.

Paul frequently speaks at conferences around the world and lead industry committees and organizations. He is also a member of the International Association of Privacy Professionals’ Education Advisory Board and CIPT Exam Development Board. From 2018 through 2019, he was also a member of the IAPP’s European Advisory Board.

Paul has received a number of awards, including the Association of Corporate Counsel’s “Top 10 30-Somethings” award, the “ACC Advocacy Award”, as well as the Transatlantic General Counsel of the Year award at The American Lawyer’s Transatlantic Legal Awards. He was named a “Cybersecurity & Data Privacy Trailblazer” by the National Law Journal and an “Innovative Corporate Counsel” by Law 360.

Paul is a Systems Security Certified Practitioner (SSCP) from (ISC)², the world’s largest non-profit association of cybersecurity professionals, and he is also a Payment Card Industry Professional (PCIP). In addition, he is a Fellow of Information Privacy (FIP) of the International Association of Privacy Professionals (IAPP) and a Certified Information Privacy Professional, with concentrations in Asian law (CIPP/A), US law (CIPP/US), European law (CIPP/E) and Canadian law (CIPP/C).He is also a Certified Information Privacy Manager (CIPM) and a Certified Information Privacy Technologist (CIPT).

Paul is fluent in both English and French. He also has an intermediate level of German.