21 Jan 2026
Oyat strengthens its Digital & Innovation team with partner Stéphanie Lapeyre-Castellane
"Oyat hires partner Stéphanie Lapeyre-Castellane to lead Personal Data & Cybersecurity and co-lead the firm’s Artificial Intelligence offering within its Digital & Innovation team."
A recognised digital law practitioner, Stéphanie Lapeyre-Castellane brings more than eleven years of experience acquired at leading French and international law firms. She advises in both strategic matters and litigation for major French and foreign clients — including large corporate groups, investment funds, public actors and technology companies — across sectors such as luxury, retail, media, energy, transport, health, finance and tech.
Her areas of expertise include GDPR compliance (data governance, international transfers, targeted advertising, fraud prevention, cookies and tracking technologies, internal investigations, processing of sensitive data), contractual structuring of processing, data sharing and transfers, management of CNIL controls and civil and criminal litigation, crisis management and response to data breaches, compliance with European cybersecurity regulations (NIS 2, DORA, CRA), and alignment with the EU Artificial Intelligence Regulation and IA risk management.
Stéphanie has worked on data-driven advertising transformation programmes for CAC 40 groups, international transactions with complex data protection issues, major cyberattacks, strategic AI and cybersecurity projects in highly regulated environments, and on pre-contentious and contentious procedures before authorities for a number of companies including GAFAM and other leading actors.
Her arrival is intended to strengthen and structure Oyat’s digital offering alongside Marie-Hélène Tonnellier and to contribute to the firm’s transversal approach. Her expertise will be closely articulated with the Private Equity and M&A practice to secure transactions involving data, cyber or AI issues, with the employment law team to address HR-technology interface matters (employee privacy, internal investigations, employment litigation with a GDPR component), and with the public law offering to support public-sector actors in their digital transformation projects.