Skip to main content

Stéphanie focuses on technology and commercial law in the broad sense. She guides clients through complex contract drafting and negotiation, and advises on pre-litigious and regulatory matters. Her broad experience encompasses commercial contracting, including distribution law, unfair market practices, consumer regulations, as well as IP/ICT matters such as technology transfers, counterfeit disputes, e-commerce regulations, and software/IT contracting. She is the go-to person for clients active in the technology and digital economy industry.

Throughout her career, Stéphanie has developed a recognised expertise in regulatory compliance, more specifically in relation to data protection and cybersecurity. As a CIPP/E-certified expert, Stéphanie advises on GDPR compliance frameworks, data breach management, and cybersecurity matters, including NIS2 and DORA. She has managed large-scale GDPR audits and privacy-by-design projects, represented clients in high-profile data protection litigation and regularly assists with the implementation of compliant contracts and compliance frameworks.

Stéphanie also advises clients on compliance with new EU regulatory frameworks such as the AI Act, the Data Act, DSA/DMA, etc. Topics such as cybersecurity, artificial intelligence and new technologies in general are part of her core focus areas.

In her areas of expertise, Stéphanie represents clients before the courts and the Belgian Data Protection Authority, as well as in alternative dispute resolution proceedings. She has also been appointed by CEPANI, the Belgian Centre for Arbitration and Mediation, as a third-party decider in alternative dispute resolution proceedings concerning .be domain names.

Contributions

Memberships

Brussels Bar (Nederlandse Orde van Advocaten), 2012
iTechLaw (International Association of Technology Lawyers)
IAPP (International Association of Privacy Professionals)
Professional Union of DPOs in Belgium (DPO-Pro)

Qualifications

LL.M. in European Competition and Intellectual Property law, Université de Liège (Belgium), 2012
Master in law, Katholieke Universiteit Leuven (Belgium), 2011
Summer school in international business, Haas Business School, University of California (Berkeley, United States), 2010
CIPP/E Certification (IAPP)

Publications

• De Smedt, S., Surinx, D. (2022). Gebruik biometrische gegevens: ondernemingen hopen op wetgevend initiatief. De Juristenkrant
• De Smedt, S., Caproni M. (2019). Praktische gids privacy in de onderneming. Belgium: Wolters Kluwer
• De Smedt, S., Verstraeten V. (2018). GDPR Implementation Series - Belgium: Substantial Reform of Supervisory Authority and Framework Implementing Act Finally Adopted. European Data Protection Law Review, Lexxion, (Volume 4, issue 3), 353 - 359
• De Smedt, S., van Waesberge, C. (2016). Cybersecurity and Data Breach Notification Obligations Under the Current and Future Legislative Framework. European Data Protection Law Review, Lexxion (Volume 2, issue 3), 391 - 398
• De Smedt, S. (2016). Data Protection May Have to Yield in IP Infringement Cases. European Data Protection Law Review, Lexxion, (2015/4), 316 - 320
Event
M&A Academy | Beyond the Deal
Brussels
24-11-2026
12:30 - 14:00 CET
M&A Academy | Beyond the Deal
The M&A Academy goes beyond the transaction. In this series, we explore the strategic, regulatory, and compliance challenges arising in today's dealmaking climate.

What others say

"Stéphanie de Smedt is personable and responsive."
Legal 500 - EMEA (2026)
"Stéphanie De Smedt is a highly available and splendid communicator with in-depth knowledge in data protection and cybersecurity combined with thorough knowledge of the industry and sector."
Legal 500 - EMEA (2025)
"Since the appointment as partner of Stephanie de Smedt the team has experienced a significant boost and is now a reference in Belgium and abroad."
Legal 500 - EMEA (2025)
stéphanie De Smedt is highly available and responsive with practical and intelligible advice in complex matters. She understands the legal needs of technology-driven companies."
Legal 500 - EMEA (2024)
"For every request received from our business, Stéphanie De Smedt makes her best effort to concretely understand the business need in the current case and our expectations from the firm in this respect. This helps to ensure that we, as a client, receive high-quality legal advice on privacy/data protection matters, adjusted to our expectations at that particular moment."
Legal 500 - EMEA (2024)
"Clearly, Stéphanie De Smedt leads the practice very well. She has very good pragmatic feedback that enables clients to have a realistic risk-exposure approach. She is highly responsive and fully reliable to meet deadlines."
Legal 500 - EMEA (2024)
"It's a true pleasure working with the superbly knowledgeable Stéphanie De Smedt, who quickly spots the sensitive topics in the case and offers practical solutions."
Legal 500 - EMEA (2024)
Sharp and always looking for cutting edge advice. I would emphasize the work of Stéphanie De Smedt."
Legal 500 - EMEA (2024)
Stéphanie De Smedt named "Next generation partner" in EU Regulatory: Privacy and Data Protection
Legal 500 - EMEA (2024)
‘Stéphanie De Smedt: Asked great questions to help develop our strategy. She worked hand and hand with Hakim in putting together our strategy and provided timely advice as we learned the Belgium legal system. Was extremely flexible in responding to last-minute requests.’
Legal 500 - EMEA (2023)
In most cases we communicate directly with Stéphanie de Smedt. Stéphanie is able to always find a suitable communication approach depending on what client’s departments/functions are involved into a discussion of a project.’
Legal 500 - EMEA (2023)
Stéphanie De Smedt named "Rising star" in EU Regulatory: Privacy and Data Protection
Legal 500 - EMEA (2023)
Stéphanie de Smedt is an expert in the field of data protection, including on key and complex topics such as sensitive data, transfers outside of the EU and data protection impact assessments. She always provides pragmatic advice of a great quality as well as recommendations at a strategic level, taking into account the business needs and the reality of industry practice.’
Legal 500 - EMEA (2023)
Stéphanie De Smedt is consistently excellent, and very responsive, in my experience.’
Legal 500 - EMEA (2023)
Stéphanie De Smedt is highly available and responsive with practical and intelligible advice in complex matters. She understands the (legal) needs of technology driven companies.’
Legal 500 - EMEA (2023)
Stéphanie De Smedt named "Rising star" in EU Regulatory: Privacy and Data Protection
Legal 500 - EMEA (2022)
"Stéphanie De Smedt is a GDPR expert with multinational (i.e., outside the EU) experience."
Legal 500 - EMEA (2022)
Rising Star - "Stéphanie de Smedt is a very good lawyer, quick reaction, sound advice."
Legal 500 - EMEA (2022)
Stéphanie De Smedt – "always responsive, very smart" "Stéphanie De Smedt has excellent insights. She is courteous and great to work with"
Legal 500 - EMEA (2021)
"Stéphanie de Smedt is personable and responsive."
Legal 500 - EMEA (2026)
"Stephanie De Smedt is sharp, commercial and provides excellent counsel."
Legal 500 - EMEA (2026)
"Stephanie de Smedt is a talented partner with great expertise in the sector and always a practical vision on how to approach matters. It is a great pleasure working with her."
Legal 500 - EMEA (2026)

Stéphanie De Smedt

Partner - Attorney at Law

stephanie.de.smedt@loyensloeff.com

Brussels, Amsterdam

Dutch, English, French

<p>Stéphanie De Smedt heads the firm's practice in technology and commercial law, with particular expertise in data protection & cybersecurity. She also advises on life sciences and healthcare matters.</p>

Stéphanie focuses on technology and commercial law in the broad sense. She guides clients through complex contract drafting and negotiation, and advises on pre-litigious and regulatory matters. Her broad experience encompasses commercial contracting, including distribution law, unfair market practices, consumer regulations, as well as IP/ICT matters such as technology transfers, counterfeit disputes, e-commerce regulations, and software/IT contracting. She is the go-to person for clients active in the technology and digital economy industry.

Throughout her career, Stéphanie has developed a recognised expertise in regulatory compliance, more specifically in relation to data protection and cybersecurity. As a CIPP/E-certified expert, Stéphanie advises on GDPR compliance frameworks, data breach management, and cybersecurity matters, including NIS2 and DORA. She has managed large-scale GDPR audits and privacy-by-design projects, represented clients in high-profile data protection litigation and regularly assists with the implementation of compliant contracts and compliance frameworks.

Stéphanie also advises clients on compliance with new EU regulatory frameworks such as the AI Act, the Data Act, DSA/DMA, etc. Topics such as cybersecurity, artificial intelligence and new technologies in general are part of her core focus areas.

In her areas of expertise, Stéphanie represents clients before the courts and the Belgian Data Protection Authority, as well as in alternative dispute resolution proceedings. She has also been appointed by CEPANI, the Belgian Centre for Arbitration and Mediation, as a third-party decider in alternative dispute resolution proceedings concerning .be domain names.