P.O. Box 21150
1502 Nicosia, Cyprus
17 Stasinou Avenue
1060 Nicosia
Cyprus
Lefteris was admitted to the Cyprus bar in 2024 and is an Associate in the Corporate and Commercial Department with a focus on Privacy & Data Protection and IP where he works with local and international clients advising them on data protection compliance, privacy regulation, other commercial and IP matters.
He has extensive experience in providing legal advice on various data protection issues. Lefteris’ work covers all aspects of privacy and data protection law, including negotiating data processing agreements, carrying out data protection impact assessments and managing data protection compliance projects. Lefteris has experience in Privacy and Data Protection matters both in in-house as well as in the consulting space and can provide business-oriented and practical legal advice. He has previously worked with clients in several industries including Shipping, Healthcare & Pharmaceutical, Financial, TMT and the Public Sector.
Lefteris is also experienced with IP matters. He advises clients on brand protection and can assist clients with trademark and domain registrations as well as disputes and enforcement of IP rights.
LLB Law, University of Surrey (2018)
MSc Media Communication Governance, The London School of Economics and Political Science (LSE)
Cyprus Bar Association
Nicosia Bar Association
Certified Information Privacy Professional/Europe (CIPP/E) under the IAPP.
Mondaq Thought Leadership Award Autumn 2025 & Spring 2024
GDPR Compliance & Consultation
DPO
Data protection, privacy and security
Electronic Commerce
Domain Registration & Disputes
Intellectual Property
Associate, Michael Kyprianou & Co LLC (since 2024)
Legal Consultant, Michael Kyprianou & Co LLC (2023-2024)
Assistant Manager, Forvis Mazars (London) (2021-2023)
Under data protection officer (DPO) capacity, advised clients on the management of personal data breaches and data subject rights requests, coordinating incident response measures, conducting legal risk assessments, preparing notifications to supervisory authorities where required, and ensuring timely and compliant responses to regulatory and individual enquiries.
Represented a rights holder in a domain name dispute involving the unauthorised registration and use of a domain incorporating the client’s intellectual property rights. He inter alia prepared and issued cease and desist correspondence, managed proceedings under the .eu Alternative Dispute Resolution (ADR) framework, and secured the protection and enforcement of the client’s brand rights.
Led the implementation of a privacy compliance programme for an international shipping organisation, including the development of data protection policies and procedures, organisation-wide data mapping exercises, and governance frameworks designed to embed privacy compliance into day-to-day operations. He also provided tailored training for the employees and key stakeholders.
Successfully conducted a comprehensive GDPR audit and compliance assessment for a healthcare organisation, identifying regulatory gaps and operational risks across its processing activities. Developed a tailored remediation programme, including corrective measures, governance enhancements, and the provision of legal advice to strengthen compliance with data protection requirements.
Worked with Microsoft Qatar for a Privacy and Data Protection assessment under their regional laws.
Worked as the lead consultant on setting up and preparing the Privacy and Data Protection compliance plan for Regent’s University London including remediation work.
