WSGR logoWSGR logo
Cédric Burton
Partner
Data, Privacy, and Cybersecurity
Brussels

D32-2-2745722

Download vCard
Open PDF
  • Comprehensive Global Privacy and Cybersecurity Practice

    Cédric covers all facets of data protection law globally, including counseling clients of all sizes, regulatory investigations, litigation, transactional privacy, and thought leadership in Europe and beyond.

  • Focus on Real Life Risks and Market Practices

    Clients praise Cédric for his pragmatic approach and describe him as a lawyer who is "sensitive to political issues and honest in his perception of risk.” (Chambers Europe)

  • Represents Companies in High-Stakes Incidents and Complex Regulatory Matters

    Clients turn to Cédric for his strategic direction in data breach responses, regulatory investigations, and litigation.

  • A Recognized Practitioner

    Cédric is listed in Chambers, Legal 500, and BTI Consulting, and was selected for inclusion in Law360’s 2019 list of "Top Attorneys Under 40" in the cybersecurity and privacy category.

Cédric Burton co-chairs Wilson Sonsini's global privacy and cybersecurity practice, is the managing partner of the firm's Brussels office, and is a previous member of the firm's board of directors. He also leads the EU data regulatory practice.

Cédric has nearly 20 years of experience assisting technology clients on all matters related to privacy and data protection and cyber security. He helps clients navigate data protection regulations, balancing their business needs and market practice with legal requirements and regulators' enforcement priorities. By doing this, Cédric helps clients innovate and grow while mitigating the risks related to data protection law. Over the years, Cédric has developed a unique expertise, representing companies in high-stakes and complex regulatory investigations in Europe and throughout the world.

He regularly advises clients on:

  • Complying with all requirements of the General Data Protection Regulation (GDPR);
  • Creating and implementing global compliance programs;
  • Defining international data transfers’ strategy;
  • Planning for and managing data breaches and cyber security incidents;
  • Advising on data protection issues in the context of mergers, acquisitions, and other commercial transactions;
  • Negotiation of data processing agreements; and
  • Multijurisdictional regulatory investigations, including coordinating litigation before national courts and the European Court of Justice.

Cédric also advises companies on the upcoming new EU data regulations that are part of the EU's digital strategy and that will significantly impact technology companies in Europe, including the:

  • Data Act (DA);
  • Artificial Intelligence Act (AI Act);
  • Data protection issues related to the Digital Market Act (DMA) and the Digital Service Act (DSA);
  • Network Information Security Directive 2 (NIS2);
  • Data Governance Act (DGA);
  • Data protection aspects of Payment Service Directive 2 (PSD2); and
  • E-Privacy Regulation.

In particular, Cédric focuses on data protection issues related to these (upcoming) acts, their overlap with the GDPR, and how companies can build a compliance program that meets these seemingly diverging requirements.

Cédric has authored many articles relating to privacy and data protection law and regularly speaks on data protection-related topics. All major legal directories consistently recognize him as a leader in EU data protection and cybersecurity, including Who's Who Legal Thought Leaders, Chambers Europe, Legal 500, BTI Consulting, and Law360.

Earlier in his career, Cédric was an associate in the Brussels office of Hunton & Williams. Before that, he worked as a research fellow in privacy and data protection law at the Research Center on IT and Law (CRID) of the University of Namur (Belgium), as well as the Center on Law and Information Policy (CLIP) at Fordham University (New York). Cédric is fluent in French and English.

Experience

Cédric Burton co-chairs Wilson Sonsini's global privacy and cybersecurity practice, is the managing partner of the firm's Brussels office, and is a previous member of the firm's board of directors. He also leads the EU data regulatory practice.

Cédric has nearly 20 years of experience assisting technology clients on all matters related to privacy and data protection and cyber security. He helps clients navigate data protection regulations, balancing their business needs and market practice with legal requirements and regulators' enforcement priorities. By doing this, Cédric helps clients innovate and grow while mitigating the risks related to data protection law. Over the years, Cédric has developed a unique expertise, representing companies in high-stakes and complex regulatory investigations in Europe and throughout the world.

He regularly advises clients on:

  • Complying with all requirements of the General Data Protection Regulation (GDPR);
  • Creating and implementing global compliance programs;
  • Defining international data transfers’ strategy;
  • Planning for and managing data breaches and cyber security incidents;
  • Advising on data protection issues in the context of mergers, acquisitions, and other commercial transactions;
  • Negotiation of data processing agreements; and
  • Multijurisdictional regulatory investigations, including coordinating litigation before national courts and the European Court of Justice.

Cédric also advises companies on the upcoming new EU data regulations that are part of the EU's digital strategy and that will significantly impact technology companies in Europe, including the:

  • Data Act (DA);
  • Artificial Intelligence Act (AI Act);
  • Data protection issues related to the Digital Market Act (DMA) and the Digital Service Act (DSA);
  • Network Information Security Directive 2 (NIS2);
  • Data Governance Act (DGA);
  • Data protection aspects of Payment Service Directive 2 (PSD2); and
  • E-Privacy Regulation.

In particular, Cédric focuses on data protection issues related to these (upcoming) acts, their overlap with the GDPR, and how companies can build a compliance program that meets these seemingly diverging requirements.

Cédric has authored many articles relating to privacy and data protection law and regularly speaks on data protection-related topics. All major legal directories consistently recognize him as a leader in EU data protection and cybersecurity, including Who's Who Legal Thought Leaders, Chambers Europe, Legal 500, BTI Consulting, and Law360.

Earlier in his career, Cédric was an associate in the Brussels office of Hunton & Williams. Before that, he worked as a research fellow in privacy and data protection law at the Research Center on IT and Law (CRID) of the University of Namur (Belgium), as well as the Center on Law and Information Policy (CLIP) at Fordham University (New York). Cédric is fluent in French and English.

Focus Areas
Recent Insights
Alerts
UK Announces Social Media Ban and Broader Online Restrictions for Users Under 16
On June 15, 2026, the UK government announced plans to introduce a social media ban for users under 16 (under-16s), alongside restrictions on features deemed harmful to minors, such as livestreaming and messaging functions, for a wider range of online services, including those in the gaming sector. These measures, which may require platforms active in the UK market to significantly alter their operations, are expected to come into force in Spring 2027.
Learn More
Alerts
European Commission Publishes Proposal for Act to Reduce Reliance on Foreign Cloud and AI
On June 3, 2026, the European Commission (EC) released its first draft of a proposed Cloud and AI Development Act (Proposal or CADA), marking a significant step forward in the EU’s efforts to strengthen its digital infrastructure and reduce strategic dependence on non-EU cloud providers.
Learn More
View All
Recent Events
Affiliated Programs
IAPP Europe Data Protection Congress 2025
IAPP Europe Data Protection Congress 2025 returns to Brussels for its 14th year—bringing together leaders in data protection, AI governance, and cybersecurity law to discuss the top issues affecting the region.
Learn More
Affiliated Programs
Global Incident Response: Managing Incidents Impacting Global Enterprises
Incident Response Forum Europe 2024 is a unique, one-day virtual conference that brings together hundreds of lawyers, consultants and other professionals around the world.
Learn More
View All
WSGR logo
Copyright © 2026 Wilson Sonsini Goodrich & Rosati. All Rights Reserved.