
Professional Summary
Stephan has nearly 30 years of experience advising technology companies on the legal, operational, and compliance issues that arise when operating across international markets. One of the few attorneys admitted to practice in the U.S., Canada, the U.K., and France/the European Union, Stephan combines deep knowledge of multiple legal systems with extensive in-house experience to help clients navigate complex cross-border legal and business challenges.
Stephan advises clients on a broad range of privacy, technology, and commercial matters, with a particular focus on international data privacy compliance, cross-border technology transactions, and the localization of commercial agreements for foreign jurisdictions. He regularly counsels clients on compliance with the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), U.S. state privacy laws, EU member state privacy requirements, and Canadian provincial privacy legislation.
Drawing on his multi-jurisdictional experience, Stephan develops privacy documentation that satisfies the requirements of multiple legal frameworks, helping clients streamline compliance across jurisdictions. His work includes:
- Internal privacy policies and procedures, including HR privacy policies, data security, incident response, data breach and data retention policies, and data subject access request procedures
- External privacy notices, including privacy policies and cookie notices
- Data processing agreements and cross-border data transfer agreements, including EU Standard Contractual Clauses (SCCs) and UK International Data Transfer Agreements (IDTAs)
Stephan also regularly handles a wide range of technology transactions under multiple bodies of law, drafting, negotiating, and localizing to EU, UK and Canadian requirements — website and mobile app terms of use, SaaS agreements, AI-enabled product and service agreements, and other commercial contracts for use in foreign jurisdictions. His AI work extends across governance frameworks, contract terms, ownership of inputs and outputs, and regulatory compliance, including under the EU AI Act. By leveraging his knowledge of international legal systems, Stephan helps clients navigate the disparate business requirements that exist in different jurisdictions.
Prior to joining Outside GC, Stephan held senior legal leadership positions with several global, blue chip technology corporations, including Senior Attorney for Intel; Director, Legal and Head of International Privacy for Symantec; and Chief Legal Counsel, EMEA for Altiris. In these roles, Stephan advised on international technology transactions, data privacy compliance, intellectual property issues, commercial contracting, and day-to-day legal functions across Europe, North America and other international markets.
Stephan began his legal career in the Paris office of Shearman & Sterling, practicing mergers and acquisitions before moving into in-house leadership roles supporting multinational technology companies.
He earned his J.D. and an LL.M from the Université of Paris 1 Panthéon-Sorbonne School of Law, an LL.M from the New York University School of Law, and an MBA from the École Supérieure de Commerce de Paris (ESCP). He is a member of the New York Bar, the Law Society of England and Wales, and the French Bar. He is also a licensed Canadian lawyer.
Stephan is a member of the International Association of Privacy Professionals and is also an Adjunct Professor of U.S. and international privacy law at the University of Paris School of Law. He has authored a number of books and articles on privacy, and has contributed to the IAPP Privacy Advisor.
He recently served as a co-chair to the Privacy, Cybersecurity, and Virtual Rights Committee of the American Bar Association’s Section of International Law. He also served as a co-chair to the Committee on Legal Education and Admission to the Bar of the New York State Bar Association.
Stephan loves everything international, navigating foreign cultures and juggling foreign legal concepts. He enjoys traveling to foreign countries, and is a real film buff. He is also a tennis fan and has a passion for Indian cooking, which he studied for three years in university in the UK.
Key Experience
- Senior Attorney, Intel
- Chief Legal Counsel, EMEA, Altiris
- Director, Legal, Symantec
- Associate, Shearman & Sterling (Paris)
Practice Areas
Industries
Education
Université of Paris 1 Panthéon-Sorbonne School of Law, J.D. and LL.M
New York University School of Law, LL.M
École Supérieure de Commerce de Paris, MBA
Paris School of Political Science (Sciences Po)
Credentials
Bar Admissions
New York
France
Law Society of England and Wales
Canada
Professional Memberships & Affiliations
International Association of Privacy Professionals
American Bar Association
Association Française des Juristes d’Entreprise French (AFJE, French Corporate Counsel Association)
Canadian Technology Law Association
Canadian Bar Association
Canadian Corporate Counsel Association
UK Society for Computers and Law
CyberLex
Association Française des Correspondants en Données Personnelles (AFCDP, French Association of Data Protection Officers)
Association Française de Droit de l’Informatique et de la Télécommunication (AFDIT, French Association of IT Lawyers)