Thanasis Christou

Jurist

Overview

Thanasis Christou is a jurist with Crowell & Moring’s Privacy & Cybersecurity Group. Based in Brussels, he focuses his practice on the intersection of privacy, cybersecurity, and broader EU technology law. He advises clients on strategic cross-border incident response and regulatory enforcement matters. He also assists clients on the implementation of the GDPR, the EU AI Act, the NIS2 Directive and the Cyber Resilience Act (CRA), and he provides general counseling services in relation to all aspects of EU Digital Regulation law.

As a dual-qualified attorney in both the EU (Greece) and California, Thanasis leverages his transatlantic background to help clients translate complex data and digital regulation requirements into concrete compliance strategies that can then be integrated into their business operations.

Thanasis is an engaged member of the privacy and cybersecurity community: he is a member of the IAPP, the ABA and other international organizations focusing on privacy, AI Governance and IP, and is CIPP/E and CIPP/US certified.

Prior to joining Crowell & Moring, Thanasis worked at an independent Greek law firm, where he advised multinational clients on the privacy and IP aspects of multi-jurisdictional transactions. He also participated in Berkeley Law’s IP Practicum, where he advised a Bay Area start-up on technology licensing and patents.

Career & Education

    • University of California, Berkeley School of Law, LL.M., Certificate of Specialization in Law and Technology, 2025
    • National Kapodistrian University of Athens, LL.B., summa cum laude, 2022
    • University of California, Berkeley School of Law, LL.M., Certificate of Specialization in Law and Technology, 2025
    • National Kapodistrian University of Athens, LL.B., summa cum laude, 2022
    • Greece/EU
    • California
    • Greece/EU
    • California
    • Certified Information Privacy Professional Europe (CIPP/E), IAPP
    • Certified Information Privacy Professional United States (CIPP/US), IAPP
    • Member of the American Bar Association’s Science and Technology Section (2024–2026)
    • Member of the Copyright Society
    • Certified Information Privacy Professional Europe (CIPP/E), IAPP
    • Certified Information Privacy Professional United States (CIPP/US), IAPP
    • Member of the American Bar Association’s Science and Technology Section (2024–2026)
    • Member of the Copyright Society
    • English
    • French
    • Greek
    • English
    • French
    • Greek

Representative Matters

  • Representing one of the world’s leading B2B and B2G mission-critical communications and security solutions provider in a global cyber incident impacting 200+ jurisdictions;
  • Counselling a global enterprise HR software solutions provider in relation to the implementation of new AI deployments in relation to its global workforce under the EU AI Act;
  • Providing product and compliance counsel to a prominent video management software company under the EU Cyber Resilience Act (CRA);
  • Assisting a U.S. airline with sensitive GDPR DSARs and related information requests, biometric processing restrictions and Global Privacy Controls (GPC);
  • Representing a leading global industrial automation and digital transformation company in complex CRA implementation projects;
  • Counselling various clients in critical infrastructure in assessing biometric verification and authentication restrictions under GDPR and U.S. State law regimes;
  • Advising a leading retailer in relation to matters under the EU Data Act;
  • Advising an energy tech provider on international data transfers in the context of US litigation and e-discovery requests.