André Zanatta

André Zanatta

Mail: andrezanatta@felsberg.com.br

Phone: +55 (11) 3141-3625

City: São Paulo

Languages: Portuguese, English and Spanish

Linkedin: André Zanatta

Practice areas:

  • Technology, Data Protection, Cybersecurity, AI and Law Enforcement

Profile

Lawyer with 20+ years of experience in-house and at major national and international law firms. He has been working with law and technology since 2011, both consulting and litigation (administrative, judicial and arbitral). His focus is on Technology, Data Protection, Cybersecurity, AI and Law Enforcement. Highly recognized by Chambers & Partners, The Legal 500, and Leaders League.

 

Professional Associations

  • Admitted to the Brazilian Bar Association (OAB/SP);
  • Guest Lecturer at FGV – International Graduate Program;
  • Guest Lecturer at Insper – Post-Graduate Program in Digital Law;
  • Member of the Data Protection Commission at IASP – Institute of Lawyers of São Paulo.

Education

  • LL.M. (Master of Laws), University of Chicago Law School – recipient of the “Ann Watson Barber Outstanding Service Award”.
  • Bachelor of Laws, Pontifical Catholic University of São Paulo (PUC-SP);
  • Executive courses in Legal Leadership and Digital Transformation (FGV and Insper).

Experience

His recent experience includes advising on:

  • Responsible for legal practices focused on data privacy and emerging technologies, with extensive experience designing and implementing compliance programs, conducting risk assessments, developing governance frameworks for AI, drafting Data Protection Impact Assessments (DPIAs), and issuing legal opinions on ethics, algorithmic transparency, content moderation, and online safety.
  • Advises and represents clients in administrative and judicial proceedings, including class actions, investigations by Data Protection Authorities, Consumer Protection Agencies, Public Prosecutors, and self-regulatory bodies. Experienced in advocacy before Higher Courts and in participating as amicus curiae in strategic litigation involving platform liability, advertising, child protection, and emerging tech regulations.
  • Leads legal strategies for handling data requests from civil, labor, and criminal authorities, including legal analysis, response drafting, appeals against unlawful orders, and related litigation. Maintains regular interaction with regulatory bodies such as the Data Protection Authority, Central Bank, and legislative institutions, including active participation in public consultations and regulatory processes.
  • Extensive experience negotiating complex technology contracts (SaaS, DPAs, consulting), providing legal advice for product launches, crisis management, public policy engagement, and reputational matters. Frequently collaborates with internal teams—sales, communications, marketing, trust & safety, HR—and coordinates with global legal teams on cross-border matters.
  • International experience in complex dispute resolution, including commercial and investment treaty arbitrations.
  • Academic involvement as a lecturer in postgraduate programs on Law and Technology, bridging legal theory and industry practice.

Related articles