Nathalie Poupaert | Fieldfisher
Skip to main content
Professional background

Professional background

My area of expertise covers a full range of topics relating to the GDPR and ePrivacy rules, including drafting privacy notices, data processing clauses and assisting clients during pre-litigation procedures before the Belgian Data Protection Authority. I have practical experience dealing with data breaches and data subject requests.
 
I can assist clients in drafting data transfer agreements and selecting the appropriate mechanism for transferring personal data outside the EU (such as binding corporate rules or standard contractual clauses).
 
I have additional expertise on the definition and in the setup of privacy programs for multinational organisations, also acting as external DPO.
 
I have worked with clients across a broad range of industries (in particular, financial and life sciences sectors) and supporting all kinds of departments (advertising and marketing, IT, human resources, research and development).
 
I am a regular speaker at data protection events and conferences.

I earned a Master in Laws from the UCLouvain in 1998. In 2021, I obtained a Certificate in European Data Protection from Solvay Brussels School in Economics and Management (ULB).
 
My mother tongue is French. I am fluent in English and have a good knowledge of Dutch. Furthermore, I also have notions of German and Italian.
 

Authored pieces

All Resources
custom.Technology_OutsourcingAndPrivacy
Insight

EDPS v SRB: CJEU’s contextual approach to pseudonymised data

26.09.2025
In the ever-evolving landscape of EU data protection law, the boundaries of what constitutes “personal data” and the practical implications of pseudonymisation have long been subjects of debate and uncertainty. The recent decision of the Court of Justice of the European Union (“CJEU”) in Case C-413/23 P – EDPS v SRB aims to shed some light on these concepts.
Learn more