Home / People / Thomas Dubuisson
Portrait of Thomas Dubuisson

Thomas Dubuisson

Senior Associate

CMS DeBacker
Chaussée de La Hulpe 178
1170 Brussels
Languages French, English, Dutch, Spanish

Thomas specializes in data protection, intellectual property (IP) and related rights, and ICT. Thomas's experience includes both contentious and non-contentious work. After graduating from Law School in 2010 (Catholic University, Louvain-la-Neuve), Thomas obtained a specialized LL.M. degree in both the Netherlands (LL.M, Maastricht University) and the U.S. (LL.M, The George Washington University), which provide him an in-depth understanding of both the civil and common law traditions.

Thomas was called to the Brussels Bar in May 2015. He started his 3-year apprenticeship at a major U.S. law firm in the IP Litigation practice group where he participated in various stages of litigation. He then followed his apprenticeship at two Franco-Belgian law firms within the Media, ICT and data protection practices.

He is a Certified Information Privacy Professional - Europe (CIPP-E) by the IAPP. The IAPP-certified professionals are recognized around the world as members of an elite group of skilled and dedicated data protection professionals. This certification (CIPP/E) attests high level knowledge in data protection topics.
Thomas is also an occasional guest blogger for various IP blogs and contributes monthly to the “International IP Legal Updates Newsletter” of the American Bar Association.

He is fluent in French and English and is proficient in Spanish and Dutch. Thomas joined CMS in May 2018.

more less

Relevant experience

  • September 2012 - March 2013 - European Union Intellectual Property Office (EUIPO) - Trademark Law Division, Alicante, Spain
  • April - August 2013 - European Patent Office (EPO) - Patent Law Directorate, Munich, Germany
  • November 2013 – November 2014 - World Intellectual Property Organization (WIPO) - IP Enforcement Division, Geneva, Switzerland
more less

Memberships & Roles

  • Member of the International Association of Privacy Professionals (IAPP)
  • Member of the Belgian National Association for the Protection of Industrial Property (ANBPPI / BNVBIE)
  • Member of the International Association for the Protection of Intellectual Property (AIPPI)
  • Member of the Robotics Law Association (ADDR)
more less


more less


  • June 2010 - Law Degree - CATHOLIC UNIVERSITY OF LOUVAIN - Louvain-La-Neuve, Belgium
  • June 2011 - LL.M in Intellectual Property Law and Knowledge Management - MAASTRICHT UNIVERSITY - Maastricht,
  • Netherlands
  • May 2012 - LL.M in Intellectual Property Law - GEORGE WASHINGTON UNIVERSITY LAW SCHOOL - Washington DC, United States of America
  • June 2018 - Bar admission (Brussels, Belgium)
more less


CMS Bel­gi­um ad­vised Su­per­bet on its ac­quis­i­tion of Na­po­leon Games Group
CMS Bel­gi­um ad­vised Su­per­bet in con­nec­tion with the ac­quis­i­tion from Wa­ter­land of Na­po­leon Games Group, a lead­ing Bel­gian op­er­at­or act­ive in the on­line, re­tail ar­cade and sports bet­ting busi­ness, with...
EU fi­nally ad­opts new data trans­fer clauses
On 4 June 2021, the European Com­mis­sion an­nounced two new sets of stand­ard con­trac­tu­al clauses: (i) for in­ter­na­tion­al trans­fers of per­son­al data (new SCCs) (avail­able here) and (ii) to be used by con­trol­lers...
Meet the AI team
The mem­bers of the AI group are at­tent­ive ob­serv­ers of the de­vel­op­ment of ar­ti­fi­cial in­tel­li­gence in their field of ex­pert­ise. They are pas­sion­ate about in­nov­a­tion and spe­cial­ized in new tech­no­lo­gies...
Data pro­tec­tion and cy­ber­se­cur­ity laws in Bel­gi­um
Data pro­tec­tion 1. Loc­al data pro­tec­tion laws and scope Gen­er­al Data Pro­tec­tion Reg­u­la­tion n° 2016/679 (GDPR);Law of 30 Ju­ly 2018 on the pro­tec­tion of nat­ur­al per­sons with re­gard to the pro­cessing...
CMS Bel­gi­um as­sisted Prox­imus with the ac­quis­i­tion of Mo­bile Vik­ings
We as­sisted Prox­imus in con­nec­tion with the ac­quis­i­tion of Mo­bile Vik­ings, a so-called MVNO or Mo­bile Vir­tu­al Net­work Op­er­at­or, from DPG. The trans­ac­tion is sub­ject to clear­ance by the Bel­gian Com­pet­i­tion...
Dead­line ap­proach­ing for im­ple­ment­ing re­com­mend­a­tions on out­sourcing to...
In re­cent years, in­sur­ance and re­in­sur­ance com­pan­ies have taken an in­creas­ing in­terest in us­ing the ser­vices of cloud ser­vice pro­viders. This has led the Bel­gian Na­tion­al Bank to is­sue 15 re­com­mend­a­tions...
EU Court of Justice cla­ri­fies concept of “in­formed con­sent” for col­lec­tion...
On 11 Novem­ber, the Court of Justice of the EU (“CJEU”) rendered its judg­ment (Case C‑61/19) in a case (Or­ange România SA v. Autor­it­atea Naţion­ală de Supra­ve­ghere a Pre­lucrării Date­lor cu Ca­ra­c­ter...
EU Cy­ber Se­cur­ity Month: learn how multi-factor au­then­tic­a­tion can pro­tect...
The EU Cy­ber Se­cur­ity Month (“EC­SM”) is the EU’s an­nu­al aware­ness cam­paign that takes place every Oc­to­ber across Europe. Through this ini­ti­at­ive, European in­sti­tu­tions aim to raise aware­ness about...
How to handle your ex-em­ploy­ees’ mail­boxes? The Bel­gian Data Pro­tec­tion...
An em­ploy­ee is leav­ing a com­pany. It hap­pens all the time. But what do we do about their MS Out­look 365 ac­count? The Lit­ig­a­tion Cham­ber of the Bel­gian Data Pro­tec­tion Au­thor­ity re­minds us of the prac­tic­al...
Schrems strikes again: EU-US Pri­vacy Shield in­val­id; Stand­ard Con­trac­tu­al...
A clash between US na­tion­al sur­veil­lance law and EU data pro­tec­tion stand­ards, which lies at the heart of Case C-311/18, Data Pro­tec­tion Com­mis­sion­er v Face­book Ire­land and Max­i­mil­lian Schrems (“Schrems...
Bel­gian Data Pro­tec­tion Au­thor­ity provides new guid­ance on cook­ies
The Bel­gian Data Pro­tec­tion Au­thor­ity (“BDPA”) has high­lighted pri­vacy in the di­git­al en­vir­on­ment (in­clud­ing cook­ies) as one of its top pri­or­it­ies in the next five years. This is il­lus­trated by the...
Dead­line ap­proach­ing for no­ti­fy­ing CCTV cam­er­as to Bel­gian po­lice
The trans­ition peri­od for no­ti­fy­ing your sur­veil­lance closed-cir­cuit tele­vi­sion cam­er­as (“CCTV cam­er­as”) to the Bel­gian po­lice ends on 25 May 2020. Mean­while, the European Data Pro­tec­tion Board (“EDPB”)...