Homepage » Equity Partners » André Zanatta
André Zanatta

André Zanatta

Mail: andrezanatta@felsberg.com.br

Phone: +55 (11) 3141-3625

City: São Paulo

Languages: Portuguese, English and Spanish

Linkedin: André Zanatta

Practice areas:

  • Data Protection and Technology

Profile

André Zanatta has over 20 years of experience as a lawyer, with a solid track record in the areas of Technology, Privacy, Data Protection, Artificial Intelligence, and Law Enforcement. He is a partner and head of the Privacy and AI practice at Felsberg Advogados, leading a multidisciplinary team and serving large national and international clients, particularly in the technology, finance, and digital retail sectors. He worked as an in-house counsel at Google for nearly nine years and as Associate General Counsel for McKinsey & Company in Latin America.

His work spans from strategic consulting on compliance programs and digital ethics to complex litigation and high-impact disputes. He also provides advice on public policy, crisis management, and relationships with regulatory bodies such as ANPD, CADE, and consumer protection agencies. He is recognized by leading legal rankings, including Chambers & Partners, The Legal 500, and Leaders League, as one of Brazil’s leading lawyers in Data Protection, Technology, and Media. He teaches at Insper’s graduate law program and actively participates in debates on AI regulation and privacy.

 

Professional Associations

  • Admitted to the Brazilian Bar Association (OAB/SP);
  • Member of the Legal Committee of the American Chamber of Commerce (Amcham);
  • Guest Lecturer at Insper – Graduate Program in Digital Law.

Education

  • M. (Master of Laws), University of Chicago Law School – recipient of the “Ann Watson Barber Outstanding Service Award”;
  • Bachelor of Laws, Pontifical Catholic University of São Paulo (PUC-SP);
  • Executive courses in Legal Leadership and Digital Transformation (FGV and Insper).

Experience

His recent experience includes advising on:

  • Structuring privacy and data protection compliance programs for large digital platforms, marketplaces, and financial institutions;
  • Representing companies in public civil actions and administrative proceedings before ANPD, consumer protection agencies, the Public Prosecutor’s Office, and higher courts;
  • Legal management of cybersecurity incidents and data breaches, with a strategic focus on mitigating legal and reputational risks;
  • Regulatory consulting on projects involving Artificial Intelligence, risk assessment, algorithmic impact, and governance;
  • Negotiating national and international contracts with data protection clauses and specific compliance obligations;
  • Participation in public consultations and legal-legislative advice on issues such as the Fake News Bill, the Civil Rights Framework for the Internet, and AI regulation.

Related articles