Skip to content

Catherine Di Lorenzo

Counsel

Luxembourg

Di Lorenzo Catherine
Catherine Di Lorenzo

Counsel

Luxembourg

Catherine is the head of the IP, data and tech practice in Luxembourg. She specialises in the fields of data protection, cybersecurity, IT contracts and negotiations, e-commerce, advertising, media and telecommunications, intellectual property and regulatory issues (notably regarding digitalisation projects, including IT outsourcing in the financial, funds and insurance sectors). Catherine has a particular interest in the life sciences sector and regularly assists clients on regulatory, contractual, IP and data protection related questions in these sectors. She also advises on Luxembourg contractual law and other general civil law related matters.

Catherine regularly assists multinational companies from various sectors with respect to their data protection compliance (including cookie consent aspects, filing of data breach notifications, handling of data subject access requests, drafting and negotiation of processing agreements, etc.), regarding investigations from data protection authorities and on specific projects involving personal data (e.g. use of geo-location or biometric data, Internet of Things, artificial intelligence, machine-learning and Binding Corporate Rules). Catherine also regularly advises clients (in close cooperation with the Litigation team) on investigations from Luxembourg authorities or data requests under mutual cooperation procedures.

Catherine also assists several clients with respect to their digitalisation projects and IT contracts (including all intellectual property related aspects thereof, for instance in case of joint software development projects) and IT outsourcing projects, including filings with the financial sector supervisory authority, drafting and negotiation of outsourcing contracts and investigations.

She also advises clients on questions relating to trademarks, copyright and trade secrets and on the drafting of agreements with third parties (e.g. license agreements, coexistence agreements, etc.).

Catherine is a member of APDL (the Luxembourg association for data protection), FedISA (the Luxembourg chapter of an international electronic archiving community) and ITechLaw. She is also a member of Cloud Community Europe-Luxembourg and is a member of the Data Protection Forum, the ICT Forum, and of the Trust and Cyber security Forum of the Luxembourg Bankers' Association (ABBL).

Catherine is also visible in the Luxembourg market through her participation in technical working groups and speaking engagements. She has lectured IT law at the University of Luxembourg. She is ranked “Band 3” by Chambers Europe 2020 and as a “Rising Star” by Legal 500 2020.

Related articles

Simplified CSSF procedure authorisation of material IT outsourcings replaced by prior notification

Publications: 12 November 2021

Simplified CSSF procedure authorisation of material IT outsourcings replaced by prior notification

On 20 October 2021, the CSSF published a press release 21/25 in relation to the new CSSF Circular 21/785 on the replacement of the prior authorisation obligation by a prior notification obligation in…

Read more

Publications: 11 October 2021

GIR - data privacy & transfer in investigations

Read more

Publications: 11 May 2021

DORA – Enhancing digital resilience for the financial sector and its ICT service providers is more important than ever

Read more

Publications: 11 March 2021

Implications of digital operational resilience (DORA) podcast series

Read more

Office

Luxembourg

Allen & Overy
5 Avenue John F. Kennedy, L-1855 
Luxembourg

View office →

Qualifications

Professional

Admitted as avocat à la Cour, Luxembourg, 2010

Admitted to the Luxembourg bar under her professional home title, 2006

Admitted as Rechtsanwalt, Germany, 2006

Referendarin, Germany, 2003-2005

Academic

Doctorate in law, University of Trier, 2013

Second German Law Degree, Oberlandesgericht Koblenz, 2005

First German Law Degree, University of Trier, 2003

Published work

"Protection des données personnelles - recueil de textes" (co-author, 2019)

"La sous-traitance informatique dans le secteur financier - cadre légal et implications pratiques" (co-author, ALJB 2014)

"Probleme der strafrechtlichen Produkthaftung von Vorstandsmitgliedern einer Aktiengesellschaft für das Zustandekommen eines rechtswidrigen Beschlusses - Haftung für vorsätzliches positives Tun bei Zustimmung, Enthaltung und Gegenstimme" (Europäische Hochschulschriften 2013)

"Luxemburg als Vorreiter - Chance e-Archivierung" (interview Lëtzebuerger Journal, February 2013) 

"VoIP: une activité réglementée ?" (AGEFI, January 2010) 

"IT outsourcing in Luxembourg: impact of outsourcing in practice" (four-parts article, AGEFI, September 2009, October 2009, November 2009 and December 2009) 

Global Privacy and Security Law – Luxembourg chapter (Aspen Publishers, 2009) 

"La biométrie ou comment faire de l’homme une donnée" (ITNews, November 2008)