A doctor of public law, Jean-Luc Sauron was legal adviser to the General Secretariat for European Affairs (the current name of this structure in charge of relations between France and the European Union), where he led the French team negotiating Directive 95/46, the "ancestor" of the RGPD.

A member of the Conseil d'Etat, responsible for European law, he teaches at the Université Paris Dauphine, where he created and has directed since 2018 the RGPD DPO University Diploma, as well as the DPO Certificate at Dauphine Tunis. He is also an expert for the Council of Europe's HELP programme on "Data Protection & Privacy Life".

The author of numerous articles on data protection, in 2021 he published a popular work on data protection (Vos données personnelles: Ce qu'il faut savoir et comment faire pour qu'elles le restent!, published by Légitech, with Alice Vitard, journalist at Usine digitale) and in 2022 a work for data professionals (S'y retrouver au sein du droit de la protection des données, Boussole pour DPO et autres usagers de la donnée, published by Légitech, with Maîtres Paravano and Cespedes Arteaga).