The growing Milan-based group at Cappelli Riolo Calderaro Crisostomo Del Din & Partners is headed by Alessandra Feller and focuses on navigating the complexities of cybersecurity and data privacy; Feller joined the firm in 2023.
Data privacy and data protection in Italy
Cappelli Riolo Calderaro Crisostomo Del Din & Partners
Highlight-Mandate
Deloitte Legal Italy -Società tra Avvocati a r.l.
Deloitte Legal Italy -Società tra Avvocati a r.l. is led by Ida Palombella, who specialises in advising fashion and design brands on data matters. Pietro Boccaccini coordinates the data protection team and utilises his background as a data protection officer to manage cybersecurity, AI, and privacy compliance matters.
Highlight-Mandate
PwC TLS Avvocati e Commercialisti
PwC TLS Avvocati e Commercialisti‘s IP, tech, and data practice is led by Paola Furiosi, who provides counsel on European and Italian data protection and compliance. Andrea Lensi Orlandi assists clients with GDPR implementation, DPO counsel, and representation before the Italian Data Protection Authority.
Highlight-Mandate
DLA Piper
DLA Piper‘s Milan-based data privacy and data protection team, part of the IP and tech department, is a leading reference for complex data-driven projects and high-stakes matters concerning major data breach management, investigations initiated by the Italian Data Protection Authority, and ensuring compliance with the NIS2 directive. Giulio Coraggio heads the team, having recently led the legal response to major European cyberattacks. Key members include Giulia Zappaterra, an expert in privacy and cybersecurity, and Cristina Criscuoli, who has expertise in the life sciences and financial sectors.
Praxisleiter:
Giulio Coraggio
Weitere Kernanwälte:
Giulia Zappaterra; Cristina Criscuoli
Referenzen
‚Giulio Coraggio is a fully committed practice leader.‘
‚There is a great level of engagement and proximity to the business.‘
Kernmandanten
UniCredit
Red Bull
TeamSystem
AON
Rai Pubblicità
Disney
BASF
Qualcomm
Luka
Generali
NTT Data
Binance
Amplifon
ENI
Moncler
Boston Consulting Group
Haier
Iliad
Lidl
ENI
Lavazza
Highlight-Mandate
- Advised Qualcomm on the acquisition of an IoT provider for over €500 million, managing all data-related aspects including complex issues under GDPR, cybersecurity, the EU Data Act, and the Digital Services Act linked to M2M and personal data processing.
- Represented CrowdStrike on all legal aspects of its response to the July 2024 global incident caused by a faulty Falcon Sensor software update, which included advising on regulatory engagement, GDPR and NIS2 compliance, contractual risk assessment, and strategic communications.
- Advised Red Bull on the design and implementation of its global AI compliance framework, assisting the company in aligning its use of AI technologies with the EU AI Act, GDPR, and emerging global standards.
Hogan Lovells International LLP
Hogan Lovells International LLP‘s data privacy and cybersecurity team is highly valued for its ability to handle complex matters for Italian and international clients alike. The team advises on compliance with the GDPR, DORA, and NIS2 and provides data breach response services. The group is co-headed by Massimiliano Masnada, who is recognised for his data protection expertise in areas including internet tech, AI, connected cars, and cross-border data transfers, and Giulia Mariuz, who focuses on e-commerce, consumer protection, and generative AI compliance for major tech companies.
Praxisleiter:
Massimiliano Masnada; Giulia Mariuz
Weitere Kernanwälte:
Valerio Natale; Cecilia Canova
Referenzen
‚This practice’s uniqueness is defined by its pioneering longevity in a field often characterised by rapid, recent changes, combined with a deep operational integration few external counsel can achieve. Unlike others, the team possesses an intimate understanding of the company’s specific business models and data flows. This allows them to translate abstract privacy regulations into precise, operationally feasible solutions.‘
‚Their deep knowledge of the specific business allows the team to map privacy regulations directly onto products and services; they excel at providing proactive, „privacy-by-design“ counsel.‘
‚The practice invests in young lawyers – rewarding their loyalty and talent with a brilliant career path. This ensures the practice maintains its specialised authority and can handle the increasingly complex data landscape for decades to come.‘
Kernmandanten
AgoraLabs
Bending Spoons
PagoPA
TeamSystem
Uber
Highlight-Mandate
- Advised Google on privacy and data protection matters, with a focus on „right to be forgotten“ claims, data transfers, cloud computing, mobile services, and cookies activities, including its relationship with the Italian Data Protection Authority.
- Advised PagoPA on various data privacy issues arising from the development of App IO and its role as an access point to the Italian Public Administration, including its use as an IT digital wallet, the privacy role of PagoPA in the NPG platform and PNDN interop, and obligations arising from the Data Governance Act.
- Represented Uber before the Court of Justice of the European Union in support of a preliminary reference seeking a finding of incompatibility between EU law and Italian legislation on Private Hire Vehicles, which requires operators to register trip data with the Ministry of Home Affairs.
ICT Legal Consulting
ICT Legal Consulting is a highly regarded data privacy and cybersecurity boutique firm known for its unified approach in integrating legal, IT, and cybersecurity know-how to support a vast roster of multinational clients across its Milan, Rome, and Bologna offices. The practice advises world-respected brands on GDPR governance, data transfer strategy, and AI and digital regulation compliance. The founding co-heads are Luca Bolognini, recognised for his expertise in AI, e-privacy, big data, and international data transfers, and Paolo Balboni, whose specialisms cover ESG, data sharing, ICT contracts, and cybersecurity law.
Praxisleiter:
Luca Bolognini; Paolo Balboni
Weitere Kernanwälte:
Laura Senatore; Alberto Bettiol; Sara Pecoraro; Ettore Corsini
Referenzen
‚ICTLC stands out for its results-driven approach, where technical expertise, strategic vision, and client focus come together to deliver highly tailored services. Its uniqueness lies in the ability to turn potentially complex tasks into clear, actionable solutions, thanks to a team with solid experience and a strong commitment to client satisfaction.‘
‚ICTLC is a boutique law firm that is characterised by its innovative approach, which makes you feel under intensive care and attention.‘
‚Great collaboration and easy to work with. Also, perhaps most importantly, concrete and practical advice. Paolo Balboni is spot on in his advice and easy to communicate with.‘
Kernmandanten
Prada S.p.A.
Stellantis Europe S.p.A.
Maserati S.p.A. (Stellantis)
A.C. Milan
Barilla International B.V.
Loro Piana S.p.A.
Italia Trasporto Aereo S.p.A. (ITA Airways)
Guess Europe Sagl
Missoni S.p.A.
Virgin Active Italia S.p.A.
MSC Cruises SA
Samsung Electronics UK Limited
Virgin Active Ltd
Banca Nazionale del Lavoro S.p.A. (BNL)
Tod’s S.p.A.
Tiscali Italia S.p.A.
Bending Spoons S.p.A.
Vorwerk Italia S.a.S. di Vorwerk Management S.r.l.
AINDO S.r.l.
Alpitour S.p.A.
Assimoco S.p.A.
Athora Italia S.p.A.
Barilla France SAS
Barilla G. e R. F.lli S.p.A.
BCC Assicurazioni S.p.A.
Bertazzoni S.p.A.
Cellnex Italia S.p.A.
Cloud Security Alliance (CSA)
Cofidis S.p.A.
Consulcesi SA
Crédit Agricole Assicurazioni S.p.A.
Crédit Agricole Italia S.p.A.
Crédit Agricole Vita S.p.A.
Diennea S.r.l.
Elica S.p.A.
Fondazione ENPAIA – Ente Nazionale di Previdenza per gli Addetti e per gli Impiegati in Agricoltura
E.ON Energia S.p.A.
EP Produzione S.p.A.
Fabbri Holding Industriale S.p.A.
FCA Services S.C.P.A. (Stellantis)
Forno D’Asolo S.p.A. (Bindi Group)
Fueguia S.r.l.
Grandi Navi Veloci S.p.A.
Groelandia S.r.l.
Gruppo Fabbri Vignola S.p.A.
Gruppo Informatica e Servizi GIES S.r.l.
Guess Italia S.p.A.
Lago S.p.A.
Lupin Limited
Mediamarket S.p.A. con Socio Unico
Micys Company S.p.A. (Pupa)
Multi-Color Corporation
NEOS S.p.A.
Octo Group S.p.A.
Prima Assicurazioni S.p.A.
Quanture S.p.A.
Register S.p.A.
Roberto Industria Alimentare S.r.l.
R+V Allgemeine Versicherung AG
Schellman & Company LLC
SDA Express Courier S.p.A.
ShopFully GmbH (ShopFully Group)
ShopFully Marketing SLY (ShopFully Group)
Shopfully PTY Ltd (ShopFully Group)
Shopfully S.p.A. (ShopFully Group)
Sport e Salute S.p.A.
Tekneko Sistemi Ecologici S.r.l.
Terna S.p.A.
UNHCR – Alto Commissariato della Nazioni Unite per i Rifugiati
Vaillant Group Italia S.p.A. (Vaillant GmbH)
Highlight-Mandate
- Advised ITA Airways, Italy’s flagship carrier, in its capacity as data protection and privacy consultant, working in close collaboration with the company’s Compliance Office and internal Data Protection Officer.
- Provided the service of Data Protection Office to Maserati S.p.A., a global leader in luxury automotive manufacturing, which included transmitting legal, IT, and cybersecurity competencies to the client’s internal Global Data Protection Officer.
- Acts as the external Data Protection Office for the mother company of MSC Cruises located in Switzerland and a number of other group companies in various jurisdictions, assisting with the applicability of GDPR, managing everyday compliance activities, and revising group data protection framework documents.
Panetta Law Firm
Panetta Law Firm is a leading firm with a dedicated team wholly committed to addressing the tech-related legal needs of its global clients. Head of the firm is Rocco Panetta, who is widely regarded as one of the most experienced lawyers in data protection in Italy, acting as external data protection officer for major groups. Key lawyers include Federico Sartore, who coordinates the firm’s specialised AI practice; Lorenzo Cristofaro, who handles international data transfer, biometrics, and big data issues; and Tommaso Mauro, who focuses on data governance and risk assessment activities for compliance.
Praxisleiter:
Rocco Panetta
Weitere Kernanwälte:
Lorenzo Cristofaro; Tommaso Mauro; Federico Sartore; Marco Laurcella
Kernmandanten
Accyourate
Admiral
Allyfe
Bottega Veneta
Brioni
Conad
Enel
Ferrovie dello Stato
Gi Group Holding AG
Gi Group Recruitment Ltd
Ginori
Glikon
Golden Goose
Gucci
Hera
Hilti
Idealista
IGT
Iliad
Illimity
INPS Servizi
IP Petroli
ITA Airways
I.W.S.
Kering
Mediobanca
Meta
Metlife
Molinari
Open AI
Pomellato
Prysmian
Siemens
Teamsystem
Bytedance
Highlight-Mandate
- Represented Chai Research Corp., an international provider of relational chatbots, in a complex dispute with the Italian, Belgian, and UK Data Protection Authorities regarding the automated collection and processing of consumer data, achieving the full dismissal of the case before the UK ICO in April 2025.
- Represented OpenAI in a legal dispute with the Italian Data Protection Authority concerning alleged privacy violations related to its generative AI service, ChatGPT, crafting the defence strategy that lifted restrictions on Italian user data processing and ensured the swift reopening of the service.
- Represented TikTok in the appeal process against a €3.5 million sanctioning decision issued by the Data Protection Authority of San Marino, while also providing comprehensive consulting services on GDPR and broader European data protection compliance.
Portolano Cavallo
Portolano Cavallo is a leading boutique firm that advises domestic and international clients on all aspects of data protection and cybersecurity. The team's areas of specialisation include biometric data projects, digital health, and high-profile data-intensive projects in leisure and life sciences. The team is led by Laura Liguori in Rome, a veteran figure known for her expertise across digital media, life sciences, AI, and big data. Key lawyers in Milan include Giulio Novellini, noted for his complex regulatory work; Eleonora Curreli, who specialises in consumer law and cloud legislation; and Tabita Costantino, who advises on worker data protection.
Praxisleiter:
Laura Liguori
Weitere Kernanwälte:
Giulio Novellini; Eleonora Curreli; Tabita Costantino
Referenzen
‚What makes Portolano unique is their exceptional client-centricity, availability and flexibility. A key strength is their interdisciplinary team. Portolano expertly covers diverse legal areas, and their ability to seamlessly integrate expertise across practices ensures a holistic solution for complex matters. This collaborative approach and depth of coverage are essential for comprehensive risk management.‘
‚The individuals I work with at Portolano Cavallo consistently stand out due to a potent combination of deep legal expertise and exceptional client-facing skills. In particular, I must highlight Laura Liguori, the partner leading the privacy practice. Beyond her clear status as an expert and highly experienced professional in data protection, what truly differentiates her is her outstanding availability and collaborative nature. The qualities I value most in her are active listening – Ms. Liguori possesses a great capacity for listening and fully absorbing the context of any issue. She doesn’t rush to conclusions but ensures she understands the underlying business drivers and concerns. Also, providing holistic advice – her advice is never limited to a narrow, technical view of privacy law. She is exceptional at providing counsel that considers all the surrounding circumstances of a case, effectively integrating the privacy aspects with the broader operational, commercial, and legal realities of my business.‘
‚They have a strong knowledge of new legislation and its potential impact on our business, helping us understand the integrations we need to implement.‘
Highlight-Mandate
BonelliErede
BonelliErede‘s IP, privacy, and IT law department, based in Milan, is a leading team of data protection and privacy experts with specific strength in regulated sectors, including banking, insurance, and healthcare. The team regularly assists with data exploitation in IoT and AI models, cross-border data transfer projects, and proceedings before the data protection authorities. The head of the team is Tommaso Faelli, who is renowned for his litigation and e-commerce expertise. Key lawyers include the ‘pragmatic’ Giulia Tenaglia, who handles complex, innovative data projects, and Ivan Rotunno, who also serves as a data protection officer at international companies.
Praxisleiter:
Tommaso Faelli
Weitere Kernanwälte:
Ivan Rotunno; Giulia Tenaglia; Anna La Mura; Giulia Rivarola di Roccella
Referenzen
‚What sets this practice apart is its ability to combine deep legal expertise with a forward-thinking, collaborative mindset. The team consistently demonstrates a high level of responsiveness and availability, ensuring that client needs are met with agility and precision. This commitment to being accessible and engaged is a cornerstone of the team’s service ethos and a key differentiator in the market.‘
‚I appreciate working with Giulia Tenaglia, she has a pragmatic approach.‘
‚The data privacy and data protection team at BonelliErede stands out as truly outstanding. What makes the practice unique is the combination of deep legal expertise with remarkable effectiveness and extraordinary execution speed. They have consistently supported our company with a level of competence and precision that goes far beyond standard market practice, enabling us to meet highly challenging timelines without compromising on quality. Compared to other firms, BonelliErede’s team offers a distinctive mix of rigor and pragmatism, matched with an exceptional client-oriented mindset.‘
Highlight-Mandate
Dentons
Dentons has further consolidated its data privacy and cybersecurity practice in Milan by focusing on AI, IoT, and new converging technologies. The team handles significant matters, from strategic data governance and international compliance with the EU AI Act and NIS2 to managing major cross-border cybersecurity and data incidents. Giangiacomo Olivi, co-head of the Europe intellectual property, data and tech group, is a global expert in AI and privacy. Chiara Bocchi is also noted for her deep expertise in AI, e-commerce, and complex outsourcing and data governance issues.
Praxisleiter:
Giangiacomo Olivi
Weitere Kernanwälte:
Chiara Bocchi; Marco Propato
Referenzen
‚Giangiacomo Olivi and Chiara Bocchi are amazing professionals.‘
‚I had the pleasure of working with Dentons for many projects involving data protection, and I couldn’t be more impressed with their expertise and professionalism. From the initial consultation, their team demonstrated a deep understanding of data privacy laws and provided clear, actionable advice tailored to our specific needs. They were incredibly responsive and proactive, ensuring that our compliance measures were not only up-to-date but also robust against potential threats. Their attention to detail and commitment to client service truly set them apart.‘
‚We are very impressed by Giangiacomo Olivi. His knowledge is outstanding. He managed to find solutions we would not have imagined. He is always one step ahead.‘
Kernmandanten
Accenture
Amazon Prime Video
Assicurazioni Generali Group
Brunello Cucinelli
Coima
Audicom
Pirelli
Barilla
Banco BPM
Fedoweb – the federation of the web operators, including the main digital publishers and broadcasters
Intesa Sanpaolo
Angelini Pharma Holding
BBC
Borsa Italiana/Euronext Group
AT&T
Bianchi Bikes Group (F.I.V.E. Bianchi S.p.A.)
Banca Generali
Condé Nast
DeA Capital Real Estate SGR
DuckDuck Go
Deepki
Eicher Motors (Royal Enfield)
Eni
Enpam
European Investment Bank (EIB)
Eutelsat
FIOL
Format Espresso
GEDI Gruppo Editoriale (La Repubblica / HuffingtonPost, etc.)
Hisense
Jackleg Media
Kering
L’Oréal
Luxottica
Mediobanca
Meta
Miroglio
Mondadori Group
NTT Data
OVS
Paramount
PEPCO
Pure IP
QVC
Rai – Radiotelevisione Italiana / Rai Pubblicità
ITT Technologies
UniCredit
UnipolTech
Vodafone
Warner Bros
Skyshowtime Ltd
Highlight-Mandate
- Advised Fedoweb, the association of online publishers and operators, on a number of strategic data protection, technology, media and TMT-related activities, including the implementation of e-privacy rules in Italy.
- Advised OVS, an Italian retailers in the fashion industry, in assessing its data privacy governance and compliance, including a thorough assessment of its data protection practices, policies, and alignment with relevant data privacy laws, as well as the AI Act.
- Advised Audicom on the set up and launch of its new integrated audience measurement services, including online mobile and in-app video and editorial content measurement service.
Gianni & Origoni
Gianni & Origoni provides comprehensive legal support, from compliance and investigations to litigation, on data protection and cybersecurity matters across multiple jurisdictions. The firm assists with drafting privacy frameworks, supports DPO roles, provides legal assistance during regulatory audits and enforcement actions (notably by the Italian DPA), and advises national critical infrastructure entities. The practice is co-headed by Stefano Mele, who is an eminent specialist in cybersecurity and crisis management, alongside Daniele Vecchi, who focuses on privacy and data protection operations, and Melissa Marchese, who advises on day-to-day and project-based data protection management.
Praxisleiter:
Stefano Mele; Daniele Vecchi; Melissa Marchese
Weitere Kernanwälte:
Flavia Bavetta; Laura Camardelli; Francesco Cerciello; Tommaso Chiericati Salvioni
Referenzen
‚An outstanding law firm with deep expertise in cybersecurity, offering top-level legal advice, regulatory compliance, and defense in complex cybercrime and data protection matters.‘
‚I had the privilege to work with lawyers Stefano Mele and Francesco Cerciello, excellent professionals specialised in cybersecurity and data protection law.‘
‚The team provides highly specialised, proactive, and solution-oriented support in data protection and privacy matters. Its strengths lie in a collaborative and detail-oriented approach that safeguards the integrity of each commitment. Compared to other firms, the practice combines legal excellence with human insight and innovation.‘
Kernmandanten
Arqit
Associazione Bancaria Italiana (ABI)
Azimut Investments
BayWa.re
Cysero
Enav S.p.A.
Saipem S.p.A.
Techint S.p.A.
UniCredit S.p.A.
Highlight-Mandate
- Assisted Saipem on the full legal and regulatory architecture behind the design and implementation of a next-generation digital ecosystem for smart event management, community interaction, and real-time data integration, soon to be deployed on vessels operating in international waters.
- Advised Edenred on the drafting of a complex data protection impact assessment regarding B2B fuel cards.
- Advised Techint Compagnia Tecnica Internazionale on the evaluation and updating of its data protection measures to ensure an orderly global data protection structure for the whistleblowing systems.
LCA Studio Legale
LCA Studio Legale‘s specialised data privacy team handles data protection matters from contracts, regulatory, M&A, and capital markets perspectives. The team provides urgent assistance with cybersecurity incidents, AI compliance, and acts as data protection officers for Italian and multinational companies. The team is co-headed by Giulio Vecchi, who supports clients with compliance programs and Authority proceedings, and Gianluca De Cristofaro, who handles data protection litigation and safeguards for international data transfers. Edoardo Raffiotta is also a key member, known for his expertise in public law, AI, and cybersecurity.
Praxisleiter:
Giulio Vecchi; Gianluca De Cristofaro
Weitere Kernanwälte:
Edoardo Raffiotta; Marco Losito
Referenzen
‚The true strength of LCA’s data privacy and data protection team lies in its people: young, skilled professionals who are collaborative and attentive to real business needs.‘
‚What has always impressed me about the professionals I’ve worked with is their practical and concrete approach: they focus on understanding the real situation and offering effective solutions, avoiding legal abstractions that often have little value in a business context.‘
‚We appreciate their responsiveness and ability to manage the matters. In particular, we value Giulio Vecchi for his ability to combine technical expertise with a result-driven approach.‘
Kernmandanten
Alpitour World S.p.A.
Bending Spoons
Business Integration Partners S.p.A.
EdiliziAcrobatica S.p.A.
H-Farm S.p.A.
Il Sole 24 ORE
Infocert
Kryalos SGR
Lutech
Marcegaglia Group
MedEA Telemedicina
MET Energia
Microsoft 4825 Italy S.r.l.
Molteni&C S.p.A.
MSD
Newton S.p.a.
Nintendo
Novomatic Group AG
Quarantadue Srl
Polynt
Refurbed Marketplace GmbH
Register S.p.A. (Team Blue Group)
Shado
Tea
Highlight-Mandate
- Assisted Newton S.p.A.’s data team on the adoption of privacy-by-design and privacy-by-default approaches in an AI system and in negotiating data processing agreements with various customers and suppliers.
- Served as external Data Protection Officer for Lutech.
- Advised Molteni&C on GDPR compliance aspects in the negotiation and drafting of IT contracts.
Orsingher Ortu – Avvocati Associati
Orsingher Ortu – Avvocati Associati‘s TMT team, based in Milan, provides comprehensive expertise across data protection and e-commerce laws, handling both litigation and advisory matters. The practice is well-versed in managing data breaches, cybersecurity issues, and compliance with data protection legislation, including providing legal support to data protection officers. Head of the team is Fabrizio Sanna, who focuses on this spectrum of work. Key lawyers include Domenico Colella, who advises on complex regulatory and cybersecurity matters, including NIS2 compliance, and Marta Minonne, who has long-term experience assisting clients in the internet, e-commerce, and consumer protection sectors.
Praxisleiter:
Fabrizio Sanna
Weitere Kernanwälte:
Marta Minonne; Domenico Colella
Referenzen
‚They are a helpful and highly specialised team, always able to provide customers with the most appropriate expertise. They are flexible and modular in creating offers.‘
‚The people I have worked with at Orsingher are charismatic and competent, and always manage to find a compromise between the law and flexibility for the business.‘
Kernmandanten
Ferrari
The Walt Disney Company
Amazon
Yahoo
TBWA
ITV Global Entertainment Limited
Farfetch
Prysmian
Tagetik
Cirsa
Borsa Italiana (Italian Stock Exchange)
F.C. Internazionale Milano
M-I Stadio
Mercer
Douglas
Egon Zendher
ItaliaOnline
Antares Vision
FT System
INAZ
MHS
Celonis
Biorek
Tootor
HBG Connex
Good Move
IXMedia
Banca Aidexa
Catalina
Fielmann Italia
Ford Trucks
Neo Apotek
Persado
Fondazione Teatro alla Scala
Gefran
Colibrì (ManoMano)
Oleotecnica
Sanrio
Caffè Borbone
Twentieth Century Fox
SKY
Olimpia (gruppo Sinergy Luce e Gas)
Steinway
Profound Medical
Vox Group
Fondazione Giangiacomo Feltrinelli
Nomura
Eero
ARS Group
Highlight-Mandate
- Advised Yahoo in the proceedings before the Tribunal of Milan against the Italian Data Protection Authority on data protection matters.
- Provided ongoing legal assistance to Fielmann Italia, an eyewear distributor, on various aspects of data protection and privacy compliance.
- Advised F. C. Internazionale Milano on a wide number of aspects related to data protection laws.
Osborne Clarke
Osborne Clarke is a prominent firm well known for its defence work in Italian Data Protection Authority proceedings and acting as external data protection officers for multinational companies in sectors including payments, IT services, and life sciences. The team actively structures compliance for AI and algorithm-based services and provides support on complex, cross-border data transfer projects. Head of the practice is Gianluigi Marino, who defends clients in enforcement actions and structures data governance frameworks. Key lawyers include the ‘meticulous’ Marialaura Boni, who specialises in life sciences data protection, and Antonio Racano, who handles compliance for tech platforms and financial services.
Praxisleiter:
Gianluigi Marino
Weitere Kernanwälte:
Marialaura Boni; Antonio Racano
Referenzen
‚Gianluigi Marino is one of the leading professionals in this sector.‘
‚We have been consistently impressed by the firm’s deep expertise in data protection. Their meticulous attention to detail and proactive approach ensure that every aspect of data protection compliance is thoroughly addressed. They are reliable and trustworthy partners and open to discussing different fee arrangements to accommodate the clients‘ needs.‘
‚I have had the pleasure of working on several matters with Gianluigi Marino, who is, in my view, a very talented privacy lawyer. Gianluigi combines a brilliant legal mind with a genuinely practical approach. I appreciate his ability to distill complex regulatory frameworks into strategic advice tailored to the client’s business. Working with Gianluigi has always been intellectually rewarding and operationally smooth.‘
Kernmandanten
McKinsey & Company
ByteDance (UK) / TikTok Pte. Ltd.
Costim S.r.l (Chorus Life S.p.A.) and Elmet S.r.l.
Compagnie Financière Richemont S.A.
Engie Italia S.p.A.
NTT DATA Italia / NTT DATA Italia Gov & Tech
Mowi Italia S.r.l.
Satispay Europe S. A.
Uber Technologies Inc. and Uber B.V
Sony Music Entertainment Italy S.p.A.
Highlight-Mandate
- Advised McKinsey & Company on building Italy’s national ESG-data platform for the Ministry of Economy and Finance.
- Advised Costim, Chorus Life, and Elmet on the Chorus Life smart-city project in Bergamo, focusing on data flows and platform governance.
- Advised Compagnie Financière Richemont S.A. on data protection for multi-jurisdictional marketing and data security issues.
ADVANT Nctm
ADVANT Nctm‘s IT and Data team is uniquely positioned to assist national and international companies in complying with all major EU digital regulations. The practice is led by Paolo Gallarati, who advises on all manner of data protection matters, including defence in authority proceedings and transactions. Key team members include Giulio Uras, who focuses on compliance with the GDPR, NIS 2, and the AI Act, and Marco Cappa, who advises data protection officers and handles privacy, IT, and cybersecurity. Valentina Molinari assists clients in managing complex data breach scenarios, with a specific focus on the insurance sector.
Praxisleiter:
Paolo Gallarati
Weitere Kernanwälte:
Giulio Uras; Marco Cappa; Valentina Molinari
Referenzen
‘Paolo Gallarati and Giulio Uras have both excellent knowledge of the privacy matters and of the pharmaceutical sector.’
‘The entire team that supported us on data privacy matters is very skilled and professional, and not only able to understand laws and regulations but also the dynamics of our company. Time management is a plus when they have to provide support under pressure. Paolo Gallarati is outstanding and our window person for every need. Giulio Uras has great knowledge and is always very supportive in a timely and precise manner. Valentina Molinari is able to manage a great workload whilst being precise and able to understand the specific needs of our company.’
‘ADVANT is one of the leading full-service Italian firms, combining strong technical expertise with a pragmatic and business-oriented approach. We value the partner-led service, responsiveness, and the ability to deliver clear, actionable advice rather than purely theoretical solutions.’
Kernmandanten
Wind Tre
Pirelli
AstraZeneca
Italo and Itabus
Daikin
Sisal (Flutter)
Beazley
Siemens Healthineers
Sony Interactive Italia
Highlight-Mandate
- Provided ongoing legal assistance to WhatsApp Ireland Limited in connection with the management of security incidents falling under the scope of the NIS 2 Directive and the e-Privacy Directive, including notification obligations to the National Cybersecurity Agency and the Italian Data Protection Authority.
- Assisted the Pirelli Group on managing a wide array of legal and compliance matters relating to personal data protection, cybersecurity, artificial intelligence, and data economy.
- Provided comprehensive legal and regulatory support to WINDTRE S.p.A., encompassing the privacy compliance of business operations related to promotional initiatives and network assets, and offering ongoing legal counsel to the Data Protection Officer concerning critical GDPR and telemarketing matters.
Studio Professionale Associato a Baker & McKenzie
Studio Professionale Associato a Baker & McKenzie‘s privacy and data security practice is known for its regional strength and unparalleled ability to support clients with multi-jurisdictional needs, particularly in data breaches and navigating EU data legislation compliance and risk. Head of the team is Francesca Gaudino, a ‘practical’ and ‘accomplished’ lawyer who specialises in legal issues emerging from the use of cutting-edge technologies like AI governance, and who routinely assists clients with cyber-related matters, follow-up litigation, and proceedings before the data protection authority.
Praxisleiter:
Francesca Gaudino
Referenzen
‚The team is led by Francesca Gaudino, one of the most accomplished and recognised privacy & technology law professionals since the early days, able to offer a comprehensive perspective on how tech law applies to all industries, and what the solutions are that work in the real world for each problem, across the marketplace.‘
‚The team has a vertical structure, able to offer services from all levels of seniority to maximise efficiency.‘
‚The team keeps its knowledge proactively and closely updated on all the latest trends in privacy and technology law.‘
Highlight-Mandate
Bird & Bird
Bird & Bird's Italian privacy and data protection team works closely with its international network, offering expertise in advising high-profile clients who collect and transfer large quantities of sensitive data. The group provides full-spectrum assistance, including advisory work, transactions, crisis management, and litigation issues. The team is co-headed by Adriano D’Ottavio in Rome, who manages information assets and security incidents, and Debora Stella in Milan, who supports complex data-driven projects in the fashion, luxury, and health information sectors.
Praxisleiter:
Adriano D’Ottavio; Debora Stella
Weitere Kernanwälte:
Giovanni Galimberti; Massimiliano Mostardini
Referenzen
‘A team of skilled and multidisciplinary professionals in various areas of law, experts in technology matters and up to date with innovations.’
‘Avv. D’Ottavio has an in-depth knowledge of our business and maintains excellent relationships with clients. He provides assistance in privacy matters and is able to involve other professionals from the firm to offer support in different areas of law.’
‘We used Bird & Bird’s services for both contract preparation and data privacy consultancy. They impressed us with their broad expertise. When dealing with issues involving foreign legislation, they connected us with consultants and legal experts abroad, ensuring fast solutions. We’ve also taken part in their training sessions—not only were they insightful for deepening our legal understanding, but they also offered great opportunities for networking.’
Kernmandanten
Lastminute.com
Highlight-Mandate
- Provided ongoing strategic advice to Lastminute.com Group regarding the implementation of marketing activities in several jurisdictions, including dealing with data transfers and data sharing within its complex business.
Chiomenti
Chiomenti‘s data protection and cybersecurity practice, based in Milan, offers clients access to highly experienced practitioners with proven experience across major EU data legislation. The team is known for its competence in integrating data privacy into corporate transactions and M&A deals. The head of the practice is Pierluigi Perri, who structures data governance plans and manages cyber incidents. Marilena Hyeraci advises on new regulations, and Ersilia Lazzara focuses on privacy compliance programmes and proceedings before the data protection authority.
Praxisleiter:
Pierluigi Perri
Weitere Kernanwälte:
Marilena Hyeraci; Ersilia Lazzara
Referenzen
‘Very strong orientation to the client. Excellent execution capabilities.’
‘Marilena Hyeraci has outstanding business and human acumen. Ability to provide timely advice and strategic consultancy. Great resilience and business understanding.’
‘The unique approach of the team is the interconnection between data privacy and M&A activities from the due diligence phase.’
Highlight-Mandate
- Provided comprehensive legal representation to OpenAI OPCO LLC, the American artificial intelligence research organisation, in high-stakes data protection litigation before the Civil Court of Rome.
- Advised BMW Italia S.p.A., the Italian branch of a motor vehicle and motorbike manufacturer, on complex cybersecurity regulatory matters.
- Advised Zambon, an Italian chemical-pharmaceutical multinational, on navigating the complex regulatory landscape introduced by the NIS 2 Directive and its national implementation through the Italian Legislative Decree No. 138 of 4 September 2024.
CMS
CMS‘ data protection and privacy team advises on the full spectrum of matters, from GDPR compliance and complex cross-border data transfers to incident response and litigation management. The team stands out for its trusted external DPO experience and track record advising top-tier multinational clients on major compliance programmes. Leading the team in Rome is Italo de Feo, who advises on IT, telecoms, and data protection. Matia Campo leads national-scale cyber-breach projects, and Mariangela Selvaggiuolo provides strategic insight into embedding privacy-by-design.
Praxisleiter:
Italo De Feo
Weitere Kernanwälte:
Matia Campo; Mariangela Selvaggiuolo; Veronica Mazzaferro; Pasquale Distefano; Annalisa Pistilli
Referenzen
‘Clients would be particularly interested in the team’s strengths in strategic thinking, adaptability, and social intelligence. These capabilities enable the team to navigate complex legal landscapes, anticipate challenges, and deliver tailored solutions that align with business goals. Compared to other firms, this team stands out for its integrated approach to legal and compliance matters, especially in regulated sectors.’
‘I appreciate Matia Campo’s expertise. He is outstanding in providing legal advice, knowing Accenture perfectly well.’
‘Matia Campo has expert knowledge, he is very approachable and provides hands-on advice. Very pleasant to work with.’
Kernmandanten
AIG
Telepass
Arsenale Express
Corriere dello Sport/Tuttosport
Alchimia S.p.A.
Nardò Technical Center
Highlight-Mandate
- Advised AIG as First Response Administrators under its CyberEdge insurance policy, providing rapid legal and regulatory support on complex cybersecurity incidents and data breaches affecting multinational insured clients in Italy.
- Provided comprehensive privacy compliance advisory and served as external Data Protection Officer (DPO) to Arsenale S.p.A. and Arsenale Express S.p.A., supporting the launch and operation of luxury hospitality services, including the Orient Express La Dolce Vita train.
Legance - Avvocati Associati
The Rome-based team at Legance - Avvocati Associati offers a multidisciplinary approach, combining in-depth knowledge of data regulations with expertise in areas like labour, corporate, and antitrust law. The firm’s advice covers all data issues, including the GDPR, Cybersecurity Legislation, AI, Data Act, and Data Governance Act. The practice is headed by Andrea Fedi, who has extensive experience in corporate compliance and privacy. Lucio Scudiero is a significant member of the team, focusing on data law and cybersecurity.
Praxisleiter:
Andrea Fedi
Weitere Kernanwälte:
Lucio Scudiero
Kernmandanten
Bain Capital
Leonardo S.p.A.
Grimaldi Group
Generali Group
Bracco Group
Konecta Italia
Menarini S.r.l.
Iliad Italia S.p.A.
Verisure Italy S.r.l.
Hearst
Italgas S.p.A.
Oakley Capital and Gymondo GmbH
Banca Finint
Tinexta S.p.A.
Riello S.p.A.
Ansett Aviation Italy S.p.A.
LIRH Foundation
Highlight-Mandate
Norton Rose Fulbright
Norton Rose Fulbright‘s Milan team is an integral part of its global data privacy practice, providing strategic defence in privacy disputes before civil courts and the Italian Data Privacy Authority. The practice focuses on the healthcare, pharma, insurance, and financial services sectors. Co-heads are Veronica Pinotti, highly recognised for contentious matters involving the interplay of data privacy, antitrust, and consumer protection, and Salvatore Iannitti, who advises on GDPR compliance and cyber incident response. Patrizia Pedretti has expertise in cybersecurity, cross-border data transfers, and counsels on privacy issues related to the processing of health data.
Praxisleiter:
Veronica Pinotti; Salvatore Iannitti
Weitere Kernanwälte:
Martino Sforza; Francesco Gelmetti; Patrizia Pedretti
Referenzen
‘To combine solid legal expertise in privacy and data protection with a very pragmatic and business-oriented approach. From our experience, the team does not limit itself to providing legal opinions, but consistently offers solutions that are practical, workable, and aligned with our business objectives.’
‘What makes Francesco Gelmetti stand out is his ability to combine deep legal knowledge with a very pragmatic and client-oriented approach. He is always clear, responsive, and approachable, making complex issues easy to understand and manage.’
‘What sets the team apart from competitors is its collaborative culture and commitment to innovation. The practice has introduced flexible billing models, legal tech tools to enhance efficiency, and actively promotes diversity and inclusion across all levels. Patrizia Pedretti is an active promoter of D&I initiatives, enhancing visibility for women and underrepresented minorities.’
Kernmandanten
Acrisure
CNP Santander
Compass
elipsLife
Great Lakes Insurance
Japan Tobacco International
Kiwi.com
Lyondell Basell
Panasonic
Pfizer
Highlight-Mandate
- Advised Pfizer on privacy and data protection in connection with its daily activities and special projects, such as consultations with the Italian Data Protection Authority and risk assessments for strategic projects involving the processing of health data in the context of clinical trials.
- Advised Kiwi.com, an international online travel agency platform, on privacy and data protection in connection with its daily activities and special projects, including interactions with the Italian Data Protection Authority and risk assessments for strategic projects involving the processing of customers‘ data.
- Advised Great Lakes Insurance in connection with the execution of a service agreement with the supplier of a Credit Information System (SIC), assisting with the negotiation and detailed analysis of the personal data processing involved, including the data protection roles of the parties.
Ughi E Nunziante
Ughi E Nunziante‘s data, privacy, and cybersecurity team is known for its expertise, advising Italian and multinational companies on GDPR compliance, audits, and proceedings before the Italian Data Protection Authority. The team assists large multinational companies, often as external DPOs, in sectors including fashion and telecoms, and has strong experience in complex multi-jurisdictional CRM projects. The team is co-headed by Massimiliano Pappalardo, a ‘standout partner’ who advises on adapting business processes and protecting clients’ data assets, and Agostino Clemente, ‘a leader in his field’ with extensive data protection experience.
Praxisleiter:
Massimiliano Pappalardo; Agostino Clemente
Weitere Kernanwälte:
Timoteo Bucci; Pietro Pastorello
Referenzen
‘Agostino Clemente is a leader in his field. I admire his seriousness and competence. He is a reliable and professional lawyer.’
‘The team is very responsive, commercial and user-friendly.’
‘Massimiliano „Max“ Pappalardo is my main contact, and he is a standout partner. He is tremendously knowledgeable and is adept at thinking laterally, especially on more knotty data privacy issues where there is often no single, clear-cut answer.’
Highlight-Mandate
Clifford Chance
Clifford Chance‘s tech team, led by Andrea Tuninetti Ferrari, maintains a stable workflow of data protection matters, covering compliance, data-intensive projects, and data sharing agreements, and is known for its experience with complex Italian Data Protection Authority disputes and critical cybersecurity incidents.
Praxisleiter:
Andrea Tuninetti Ferrari
Kernmandanten
SYNLAB
Trinseo
Santander Consumer Bank
Sigue
BayView
Liquigas
EQT
Permira
BusItalia
TIMFIN
Highlight-Mandate
- Advised SYNLAB on the response to a major data breach.
- Advised Sigue on the appeal of an €11m fine from the Italian Data Protection Authority.
Eversheds Sutherland Associazione Professionale
Eversheds Sutherland Associazione Professionale‘s data protection and cybersecurity team coordinates multi-jurisdictional projects and assists ICT and e-commerce companies with international needs. The head of the team is Massimo Maioletti, who provides DPO services and advises on privacy, cybersecurity, and AI issues. Andrea Zincone assists with regulatory issues relating to software and cybersecurity.
Praxisleiter:
Massimo Maioletti
Weitere Kernanwälte:
Andrea Zincone; Edoardo Coia; Valentina Palmisano
Kernmandanten
ESET Italia S.r.l.
Presidenza del Consiglio dei Ministri – Dipartimento per la Trasformazione Digitale
Highlight-Mandate
Gatti Pavesi Bianchi Ludovici
The team at Gatti Pavesi Bianchi Ludovici provides comprehensive legal assistance in data protection. The team supports clients with compliance, data governance, and cybersecurity, including NIS2 and DORA. Head of the team is Gilberto Nava, who splits his time between Milan and Rome and advises international web operators on contractual and regulatory issues. Elisabetta Nunziante assists clients with big data projects, AI, and compliance design of digital platforms.
Praxisleiter:
Gilberto Nava
Weitere Kernanwälte:
Elisabetta Nunziante
Referenzen
‚They possess deep legal knowledge and sharp analytical skills, enabling them to navigate complex cases with precision and confidence. But what truly sets them apart is their unwavering commitment to professionalism and ethical conduct—always advocating fiercely for their clients while maintaining honesty and respect.’
‘They demonstrate resilience under pressure, adaptability in changing circumstances, and a passion for justice that drives them to go the extra mile.’
‘You can always rely on the team to be on top of the case. The lawyers have a very helpful attitude and concentrate on the main issue at hand.’
Kernmandanten
Agile Telecom/Growens
Infordata S.p.A.
Digital Value S.p.A.
Exacta S.p.A.
Highlight-Mandate
- Assisted a company on data protection issues concerning an experimentation of digital wallet.
- Assisted a multinational food and beverage company on the management of a data breach and data subjects‘ requests.
- Assisted a manufacturing company as DPO on GDPR compliance and NIS 2 Directive.
LEXIA
LEXIA‘s data and tech innovation team advises clients on GDPR compliance, cross-border data transfers, and regulatory interactions. The team provides advice on compliance, data breaches, and M&A transactions, serving clients including fintech platforms and IT service providers. Head of the team is Aurora Agostini, who advises on big data projects, international data transfers, and AI, while Giulietta Minucci specialises in data protection and blockchain tech.
Praxisleiter:
Aurora Agostini
Weitere Kernanwälte:
Giulietta Minucci
Referenzen
‘The data privacy and data protection practice at LEXIA is truly outstanding, setting a benchmark for quality and innovation in this increasingly critical area of law.’
‘The professionals at LEXIA are exceptional not only for their outstanding legal expertise, but also for their personal dedication and accessibility.’
‘LEXIA’s data privacy and data protection practice is highly regarded for its ability to combine rigorous legal expertise with a pragmatic, business-oriented approach.’
Kernmandanten
TPPay S.r.l.
DSTech S.r.l.
BeMedia S.r.l.
247 Growth S.r.l.
Nuove Iniziative S.p.A.
Cryptosmart S.r.l.
Siligon S.r.l.
SIFA S.r.l.
Highlight-Mandate
- Assisted TPPay S.r.l., a fintech company operating as an Electronic Money Institution (IMEL), on the design and implementation of its data governance framework, with a particular focus on GDPR compliance and the strategic use of transactional data.
PedersoliGattai
PedersoliGattai‘s data protection and data governance practice addresses cutting-edge issues in AI, cybersecurity, and digital transformation. Known for its dual expertise in tech and labour matters, the firm advises on employee data, automated decision-making, and compliance with NIS2 and DORA. Marco Galli heads the practice, managing complex projects related to the protection and exploitation of both personal and non-personal data in the banking and finance, utilities, and healthcare sectors.
Praxisleiter:
Marco Galli
Weitere Kernanwälte:
Massimiliano Cucè; Giorgia Valsecchi; Francesca Pistol
Referenzen
‘They have been very clever in understanding our exact position in the market. They had a fascinating approach to the matter we asked advice on, and they kept training us on the key concepts. Their support was effective and constructive.’
‘The person who stood out was definitely Marco Galli. His approach is pragmatic and effective, his knowledge is huge, and his capability to make us understand is outstanding.’
‘The practice stands out for its deep specialisation, strategic foresight, and client-centric approach. What makes this team unique is its ability to combine technical legal expertise with a nuanced understanding of evolving regulatory landscapes, particularly in the EU and global contexts.’
Kernmandanten
Illumia S.p.A.
ABI Lab
Fiera Milano S.p.A.
SeaCorridor S.r.l.
Bravonext SA (Lastminutes.com)
WIIT S.p.A.
TeamSystem S.p.A.
RGI S.p.A.
TAS S.p.A.
7Pixel S.r.l.
DGS S.p.A.
Enthera S.r.l.
Highlight-Mandate
- Advised AbiLab, a consortium of the Italian banking system, in managing all data protection and IT aspects related to ABILabChain, the first distributed blockchain system adopted by Italian banks to manage interbank services, ensuring compliance with the GDPR and relevant sector-specific regulations.
- Assisted Bravonext SA (Lastminutes.com), an online travel price comparison platform, on its compliance and risk management strategy in light of the EU Artificial Intelligence Act (AI Act).
- Played a central and strategic role in the acquisition of DGS S.p.A., a corporate group active in providing services and application solutions based on the development of Artificial Intelligence systems, including carrying out a detailed analysis of data processing flows with a specific focus on datasets used for training the AI systems.
Pirola Pennuto Zei & Associati
Pirola Pennuto Zei & Associati‘s data protection practice is known for its multidisciplinary expertise and integrated compliance projects. The team provides support in implementing data protection safeguards and managing complex data breaches. Leading the team is Roberta Di Vieto, who has extensive experience handling matters across the regulatory, compliance, and data protection spaces. Mattia Salerno assists with compliance implementation and has been appointed as a DPO for financial sector companies.
Praxisleiter:
Roberta Di Vieto
Weitere Kernanwälte:
Mattia Salerno
Referenzen
‘The Studio Pirola’s team is very professional and has a complete knowledge of our sector and of all privacy themes.’
Kernmandanten
Clariant Group – Italian Subsidiaries
La Piadineria S.p.A.
Burger King Restaurants Italia S.p.A.
Stellantis Financial Services Italia S.p.A.
Toshiba Companies
DM – Drogerie Markt S.r.l.
QSRP Group
DXC Group – Italian Companies
Intellera Consulting S.p.A.
Idealista (Italian Companies)
PESI S.r.l.
ICONTO S.r.l.
Highlight-Mandate
- Provided comprehensive legal support to Burger King Restaurants Italia S.p.A. for GDPR compliance, including the design and implementation of data protection models, privacy governance, risk assessment, and digital platform compliance.
- Provided full legal support to a company specialised in integrated security and smart surveillance solutions in handling data protection proceedings before the Italian Data Protection Authority, including defence strategy, representation, and assistance with potential sanctions following an alleged personal data breach.
- Advised Idealista (Italy) on cybersecurity compliance, including assessment of the NIS 2 Directive’s applicability, focusing on sector obligations, risk management, and EU regulatory requirements.
SZA Studio Legale
SZA Studio Legale‘s data privacy and data protection team advises national and international clients, with a focus on the education and start-up sectors. The team handles evolving regulations, cybersecurity, and managing complex data breaches, and represents clients before the Italian Data Protection Authority. The practice is co-led by Marcello Trabucchi, an experienced DPO, and Giuseppe Di Masi, who advises on regulation compliance. Paola Spinzi is experienced in complex data protection assessment projects, and Iris Claudia Giaggiolo specialises in compliance and cybersecurity.
Praxisleiter:
Marcello Trabucchi; Giuseppe Di Masi
Weitere Kernanwälte:
Paola Spinzi; Iris Claudia Giaggiolo
Referenzen
‘What sets SZA Studio Legale apart is the team’s ability to balance deep regulatory expertise with highly practical, business-oriented solutions. The practice demonstrates a remarkable depth of understanding in both EU-wide and Italian-specific data protection frameworks, making it uniquely equipped to guide clients through complex, multi-jurisdictional issues.’
‘Working with Marcello Trabucchi and Paola Spinzi has been consistently exceptional. What sets them apart is their rare combination of technical excellence, commercial awareness, and a deeply collaborative approach. They are not only experts in data privacy and protection law but are also genuinely invested in understanding our business, our risk appetite, and our operational realities.‘
‚Marcello Trabucchi brings sharp strategic thinking and an impressive command of complex regulatory issues, particularly in highly regulated sectors. He is exceptionally responsive, thoughtful in his advice, and confident in navigating both domestic and cross-border data matters. Marcello is also adept at anticipating regulatory developments and helping us take a proactive stance—something we have found invaluable.‘
Kernmandanten
UCI Italia S.p.A.
Ridemovi S.p.A.
Number 1 S.p.A.
SEC Newgate S.p.A.
Nuove Acque S.p.A.
G.E.A.L. S.p.A.
Sicuritalia S.p.A.
Fondazione Lombardia per l’Ambiente
King&Spalding
La Zolla Soc. Coop. Sociale Onlus
SEC Newgate UK Ltd
Franklin University Switzerland
Giardineria S.r.l.
Federazione Lombarda delle Banche di Credito Cooperativo
PerLa Donna S.r.l.
Sintexcal S.p.A.
Crea Welfare S.r.l.
HAT Music Inc.
MOBILITÀ ITS Academy
ASLAM
Highlight-Mandate
- Assisting UCI Italia S.p.A. with full-spectrum data protection support, including the review of governance frameworks, vendor contract negotiations, cookie audits, marketing compliance, and handling of data breaches.
- Acted as Data Protection Counsel to Ridemovi S.p.A., advising on regulatory compliance, user rights, platform features, and cross-border data issues, including supporting a mobile app overhaul, reviewing cookie practices, and managing ex-employee email access.
- Served as Data Protection Officer (DPO) for SEC Newgate S.p.A. in Italy, advising on cross-border data governance, marketing compliance, and whistleblowing systems, including managing data subject requests and reviewing email marketing practices.
WST
WST‘s data protection and new tech team provides integrated, multidisciplinary assistance, combining data protection know-how with compliance, M&A, and tech expertise. The firm is actively engaged with emerging EU tech regulation, including the AI Act, NIS2, and DORA. The team is headed by Francesca Gravili, who serves as a DPO for major Italian, multinational, and public sector companies, and has significant expertise in AI matters.
Praxisleiter:
Francesca Gravili
Weitere Kernanwälte:
Katia Vecchiato; Raffaele Romano; Adebowale Adediwura; Edoardo Lombardo