Myriam Gufflet

WORK HISTORY

EDUCATION

SKILLS

ABOUT MYRIAM GUFFLET

I have about 15 years of experience in providing legal and policy advice to both private and public sector organisations on personal data protection and privacy matters.With my experience at the EDPB Secretariat, as well as the French and UK data protection supervisory authorities (CNIL and ICO), I have a deep understanding of the data protection regulatory environment. As Head of Litigation and International Affairs at the EDPB Secretariat, I oversee a wide range of activities, including, for instance- litigation before EU courts - international matters, such as transfers, and cooperation with other fora - law enforcement matters - internal compliance, such as data protection under Regulation 2018/1725 and access to documents under Regulation 1049/2001.As a former consultant, I have also great experience assisting private sector multinational organisations implementing complex data protection compliance programmes (GDPR/BCR).Some of my achievements include- Co-led the drafting of the first Art 65 (dispute resolution) and Art 66 (urgency) GDPR decisions adopted by the EDPB- Assisted a client with the drafting and approval by EU regulators of its controller and processor BCR application, the first one to be approved in less than 7 months- Set up and led a unit dedicated to BCR within CNIL, in charge of approving BCR more quickly and promoting them across the globe- Acted as Coordinator of the International Transfers\' Subgroup part of the former EU privacy watchdog (i.e, the Article 29 Working Party/WP29 that became the EDPB post GDPR)- Acted as rapporteur and jointly led, on the WP29 side, the discussions with the Asia-Pacific Economic Cooperation (APEC) that led to the adoption by both APEC and WP29 of a BCR and Cross-Border Privacy Rules (CBPR) referential.Last but not least, I created and ran alone a catering business for a year, hence have a good feel of what it means to run a small business.