Penny Kontogeorgou

Practice Areas

Digital Transformation & Innovation Strategy

Advising organizations on the legal and strategic aspects of digital transformation across industries.

Technology Transfer & R&D Collaborations

Supporting research institutions, spin offs, scientists, corporates, and startups in commercialization of innovation, IP structuring, and collaborative research frameworks.

Innovation & Deep Tech

Legal advisory on cutting-edge technologies, including deep tech ventures and high-impact innovation projects.

Robotics, Automation & IoT

Advising on legal and regulatory issues related to robotics systems, industrial automation, and connected devices (IoT).

Dual-Use & Strategic Technologies

Legal and regulatory advisory on technologies with both commercial and defense/security applications, including compliance and risk considerations.

Artificial Intelligence & Emerging Technologies

Legal and regulatory advisory on AI systems, automation, and advanced technologies.

Blockchain, Crypto-Assets & FinTech

Including regulatory compliance under frameworks such as MiCAR and digital finance.

Data Protection & Privacy (GDPR)

Advising on compliance, governance frameworks, and cross-border data issues.

E-Commerce & Digital Platforms

Advising on online business models, platform regulation, and consumer law.

IT & Technology Contracts

Drafting and negotiating complex IT, SaaS, and digital transformation agreements.

Cybersecurity & Digital Risk

Legal aspects of cybersecurity frameworks, incident response, and resilience.

Mergers & Acquisitions (Technology & Innovation)

Advising on M&A transactions involving technology companies, digital assets, and innovation-driven businesses, including legal due diligence and structuring.

Professional Memberships

Member of the NATO DIANA Pull of Experts and Mentors in Defence Technology (Dual - Use technologies)

Member of the Virtual Advisory Board

Memeber of the Thought Leaders Club (Greece)

Member of Science 2 Business NPO

Member of the Athens Bar Association

Member of International Association of Privacy Professionals (IAPP)

Member of Greek E-commerce Association (GRECA)

Member of Hellenic Women in Data and Technology

Career

Université catholique de Lille (2025 - today)

-Lecturer in e-Commerce Law @ LLM in Business Law & Diploma in Legal Practice and Management

Science 2 Business (2022 - today)

- Co- Founder Partner, Member of the BoD, Head of Regulation & Legal Affairs

National Center for Scientific Research "Demokritos"​ (2023 - today)

- Advisory Board Member, Technology Transfer & Innovations Office NCSR "Demokritos"

Work Highlights

1. Advised ELINOIL, one of Greece’s leading energy and oil distribution companies, on a Group-wide NIS2 Directive compliance program covering IT and OT systems across four affiliated companies. I led the legal design and phased implementation, delivering cross-functional support including: entity classification and strategy, filings with the National Cybersecurity Authority, supply chain governance and contract updates, gap analysis and roadmap development, regulatory alignment with GDPR, AI Act and IoT rules, workshops and training for legal, IT and business teams, and establishment of a Group-wide CISO function.

2. Acted as lead external counsel to Public Group S.A., one of Greece’s leading e-commerce and marketplace operators, on a full-spectrum Digital Services Act (DSA) compliance project across its hybrid platform ecosystem (B2C shop, marketplace, influencer campaigns, user-generated content, and adtech marketing). I led legal scoping, service classification, and article-by-article gap analysis, developing a compliance roadmap, policy templates, merchant/content creator contracts, and recommender system guidelines, and delivered cross-functional workshops. This engagement established one of Greece’s first unified DSA governance frameworks, aligned with GDPR, P2B, and consumer law.

3. Advised NCSR Demokritos, Greece’s largest public research center, on innovation and technology transfer frameworks for its Lefkippos Technology Park, home to 40+ deep-tech startups. I led the design of legal structures for compliant, investor-ready commercialization, covering IP structuring, spin-off creation, licensing, and R&I agreements (NDAs, MTAs, Joint IP Development). I drafted spin-off templates, standardized shareholding and license-back models, and supported multi-institutional ventures with IP co-ownership and royalty frameworks, establishing a robust, scalable commercialization model that secured transparent rights and investor confidence.

4. Advised National Technical University of Athens (NTUA) and European partners on the establishment of a deep tech company to commercialize NTUA research in construction technology as part of an EU-funded cross-border innovation project. I led the structuring of the corporate vehicle and governance framework, drafted and negotiated the Articles of Association and Shareholders’ Agreement, delivered legal opinions on NTUA’s participation under Greek public-sector and tech transfer law, ensured multi-jurisdictional compliance, addressed State aid risks, and structured IP co-ownership, revenue-sharing, and royalty models. The framework enabled clear governance and compliant commercialization, securing long-term operational success.

5. Advised on the spin-out of a Microwave Breast Imaging business unit for early detection of breast pathologies across France and Greece. I led legal structuring, corporate formation, and governance design, covering IP transfer/licensing, investment-ready equity and founders’ agreements, and separation milestones. I also advised on IP strategy, royalty and clawback models, GDPR and EU MDR compliance, ensuring a fully compliant, investor-ready NewCo.

Clients

Startups and multinational corporations driving technology and innovation

Energy, shipping, banking & finance, travel & tourism companies

E-commerce platforms, marketplaces, fintech, insurtech ventures

Healthtech

Foodtech and agrotech innovators

IT, cloud, ICT, media, advertising/AdTech, and gaming companies

Spin-offs and research commercialization projects

Scientists, researchers, and academic institutions

Industry Sector Expertise

Technology & Digital Platforms – SaaS, marketplaces, platform governance

Artificial Intelligence & Emerging Technologies – AI, deep tech, IoT, VR/AR, blockchain

Robotics & Automation – industrial automation, smart manufacturing, connected systems

Energy & Utilities – oil, gas, renewables, digital transformation in energy

Banking, Finance & FinTech – digital finance, crypto-assets, insurtech

Media, Advertising & AdTech – online advertising, digital marketing platforms

Travel, Tourism & Hospitality – platforms, marketplaces, digital services

Foodtech & Agrotech – innovation-driven food and agriculture solutions

Shipping & Logistics – maritime, logistics, and operational digitalization

Healthcare & Biotech – healthtech, medtech, and R&D commercialization

Research & Academia / Spin-offs – tech transfer, IP commercialization, innovation ecosystems

Gaming & Digital Entertainment – platforms, interactive media, and digital content

Education