Hall Of Fame

Firms To Watch: Data privacy and data protection

Led by Italo de Feo in Rome, CMS advises on the full spectrum of data privacy work, from compliance and cyber breach responses to defence matters involving regulators and class actions.
Eversheds Sutherland Associazione Professionale's data protection department in Italy is led by Rome-based Massimo Maioletti, whose track record includes assisting major domestic and multinational companies with the implementation of data protection compliance programmes (including at multi-jurisdictional levels).
Acting for major companies and private equity funds, Grimaldi Alliance's privacy and data protection department is led by cybersecurity, privacy and data protection specialist Francesco Conti, who is supported by privacy expert Laura Bellicini.
Withers Studio Legale's data privacy and data protection team in Italy (Milan and Padua) is headed by Jacopo Liguori, who advises on GDPR compliance programmes, data breach issues and international transfer of data.

Firms in the Spotlight Data privacy and data protection

ICT Legal Consulting

ICT Legal Consulting logo

Whether through synergies, strategic partnerships or the opening of new subsidiaries, ICTLC – ICT Legal Consulting (ICTLC) continues to consolidate its role as a strategic partner for its clients, going beyond the role of legal advisor.

View Profile...

Data privacy and data protection in Italy

DLA Piper

DLA Piper’s data privacy and protection practice in Italy covers complex data-driven projects, cyberattacks and privacy-related disputes. Clients further benefit from the group’s sector specialisms in finance, insurance, TMT, life sciences, fashion and retail. Italy IP and technology department head Giulio Coraggio is a renowned tech, privacy, cybersecurity and gaming lawyer, whose track record includes managing some of Europe’s largest cyberattacks. Providing key support, Giulia Zappaterra specialises in privacy, data protection and cybersecurity projects, while Cristina Criscuoli advises on life sciences and financial sector-related privacy and data protection issues.

Practice head(s):

Giulio Coraggio

Other key lawyers:

Giulia Zappaterra; Cristina Criscuoli

Key clients







Philip Morris




NTT Data



Banca PSA


Boston Consulting Group


Work highlights

  • Assisted the renowned Moncler group with navigating a large cyberattack.
  • Assisted BCG with the development of a groundbreaking artificial intelligence system, which involved ensuring data protection compliance.
  • Advised Bending Spoons on the privacy aspects surrounding an avant-garde, generative artificial intelligence system that it developed.

Hogan Lovells International LLP

Hogan Lovells International LLP‘s Milan group routinely assists companies with GDPR-related privacy compliance matters. The team also assists company data protection officers with privacy impact assessments and privacy documentation reviews, as well as organisational and security measures. The practice is headed by privacy and data protection expert Massimiliano Masnada, who represents clients before the Italian Data Protection Authority alongside Giulia Mariuz, a specialist in e-commerce matters.

Practice head(s):

Massimiliano Masnada

Other key lawyers:

Giulia Mariuz; Valerio Natale; Elisabetta Nunziante

Key clients



Bending Spoons



Pago PA


Hype S.p.A.

Work highlights

  • Assisted OpenAI with proceedings opened by the Italian Data Protection Authority, in relation to the blocking of the ChatGPT service to Italian users.
  • Assisting GlovoApp23 (and the Italian company of the Glovo group, Foodinho) with the appeal against a Data Protection Authority order that imposed a sanction for alleged violations of GDPR provisions (arising from the processing of riders’ data).
  • Assisted PagoPA with developing a privacy compliance model under the GDPR for the app IO and related functioning and services.

ICT Legal Consulting

With one of the largest privacy and data protection practices in the EU, ICT Legal Consulting advises global brands across the fashion, automotive, and banking and finance sectors. The practice is headed by Paolo Balboni, who routinely serves as a data protection officer for multinationals; practice area authority Luca Bolognini; and Floriana Francesconi, a specialist in matters involving engineering, services and pharmaceuticals. Other key names include Nicola Franchetto, who advises on IT contracts, cloud computing and e-marketing; Vito Michele Pavese, who assists clients with European and national data protection compliance; and Francesca Tugnoli, who draws on a background in administrative crime liability.

Practice head(s):

Paolo Balboni; Luca Bolognini; Floriana Francesconi

Other key lawyers:

Nicola Franchetto; Vito Michele Pavese; Francesca Tugnoli; Sara Pecoraro


‘The team is always available to support clients in the challenges they face. Competent and highly qualified in the field of data privacy.’

‘ICT is probably the best EU firm for GDPR/cyber security/TMT issues. They have deep knowledge of data security in most EU jurisdictions and can anticipate regulatory trends.’

‘Good team work and easy to work with. The people are excellent!’

‘Paolo Balboni is always in a position to put his clients’ needs in a broader context, so as to provide strategic assistance with IT/data protection decisions.’

‘Highly efficient and professional, especially Paolo Balboni.’

‘Luca Bolognini’s great collaborative spirit, utmost empathy and over-the-top creative skills, in addition to his strong human qualities, mean that a relationship of deep trust is established with him and his collaborators – the best data protection lawyer in Italy.’

‘Nicola Franchetto combines different industries’ knowledge with regulatory wisdom, and is always available when the client needs an answer.’

Francesca Tugnoli, as are all the other members of the team, is an excellent lawyer with strong legal competence, and great business acumen and leadership skills.

Key clients

Banca Nazionale del Lavoro S.p.A. (BNL)

Bending Spoons S.p.A.

Bertazzoni S.p.A.

Brunello Cucinelli S.p.A.

Caffeina S.p.A. Società Benefit

Cassa di Risparmio di Bra S.p.A. (Bper Banca)

Cedacri S.p.A.

Centro Stampa Poligrafici S.r.l. (Monrif Group)

Cloud Security Alliance (CSA)

Cofidis S.p.A.

Consulcesi SA

Crédit Agricole Assicurazioni S.p.A.

Crédit Agricole Italia S.p.A.

Crédit Agricole Vita S.p.A.

FCA Services S.C.P.A. (Stellantis)

Guess Italia S.r.l.

Guess Europe Sagl

Maserati S.p.A. (Stellantis)

Salvatore Ferragamo S.p.A.

Samsung Electronics Italia S.p.A.

Work highlights

  • Assists Stellantis, acting as its external data protection office.
  • Assists Guess Europe Sagl, as its European data protection officer for outsourcing.
  • Provides continuous legal assistance in privacy, data protection and data security to Samsung Electronics Italia.

PANETTA Studio Legale | PANETTA Law Firm

PANETTA Studio Legale | PANETTA Law Firm utilises its ‘great data, privacy and cyber team‘ to maintain an enviable market reputation for data economy work. Comprised of specialists in privacy and the protection of personal data and cybersecurity, the practice is a go-to for AI matters that come before the Data Protection Authority. Founding partner Rocco Panetta is ‘an outstanding lawyer, whose knowledge of privacy matters is deep and broad’, while Lorenzo Cristofaro brings expertise to research projects funded by the European Union under the Horizon 2020 framework. Other key figures include Marco LauricellaTommaso Mauro and Federico Sartore.

Practice head(s):

Rocco Panetta

Other key lawyers:

Lorenzo Cristofaro; Marco Lauricella;Tommaso Mauro; Federico Sartore


‘Strengths and key capabilities include depth of knowledge in privacy and technology law, giving strategic advice in relation to communications with regulators and understanding new or innovative technologies, so as to give considered legal advice.’

A great data, privacy and cyber team in Italy.

‘Their availability, sectorial knowledge, expertise and dedication to excellent and efficient work is really amazing, and makes this law firm a real exception in the privacy legal community in Italy.’

Key clients







Bottega Veneta

ITA Airlines






Kering Eyewear

Kering Italia


Procter & Gamble



Work highlights

  • Advised TikTok, and its parent company ByteDance, on crucial aspects regarding the protection of its users.
  • Advises Conad on personal data issues.
  • Acts as data protection officer for several of the Kering Group brands.

Portolano Cavallo

The specialist lawyers at Portolano Cavallo‘s market-leading privacy and data protection practice bring extensive experience to handling a wide range of data law issues. Examples includes high-profile disputes and breaches, launches of new initiatives to exploit data, and M&A and employment-related data protection work. With a longstanding focus on internet and data protection matters, Laura Liguori‘s sector expertise covers advertising, marketing, life sciences, fashion and luxury goods. Giulio Novellini‘s wide-ranging practice covers all aspects of EU data protection. Eleonora Curreli is an expert in privacy and cybersecurity.

Practice head(s):

Laura Liguori

Other key lawyers:

Giulio Novellini; Eleonora Curreli


‘They are very competent and very attentive to clients’ needs.’

‘Willing to listen and identify innovative solutions by appropriately assessing the risks.’

‘Best privacy and data protection practice in town.’

‘They are very efficient, practical and pragmatic, with strong legal knowledge! An excellent combination.’

‘The practice is very much on the front edge of innovation – it is always up to date on new technology and how innovation is changing the data privacy rules.’

‘The firm stands out as an example in relation to diversity.’

‘Laura Liguori is an outstanding lawyer who is always available and hugely competent.’

‘Laura Liguori and her team are really capable- highly knowledgeable, very flexible.’


BonelliErede‘s data protection and privacy practice in Milan sits within the firm’s wider IP team. The practice regularly assists with interactions with data protection authorities, challenging authorities’ decisions before the courts, and providing guidance throughout inspections and investigations. The group also advises on the data and privacy protection side of outsourcing agreements and commercial and technological joint ventures, and on aspects of such matters related to IoT and AI. Tommaso Faelli heads up the digital innovation focus team. Anna La Mura specialises in privacy and data protection. Giulia Tenaglia advises on the usage of new tech in regulated and non-regulated sectors. The arrival of Ivan Rotunno, Alessandro De Nicola and Giulia Rivarola di Roccella from Orrick, Herrington & Sutcliffe in February 2024 further boosted the practice.

Practice head(s):

Tommaso Faelli

Other key lawyers:

Anna La Mura; Giulia Tenaglia; Ivan Rotunno; Alessandro De Nicola; Giulia Rivarola di Roccella


‘Excellent approach to the issues addressed, with deep awareness of business dynamics, due to its in-depth knowledge of the industry and relevant issues.’

‘The whole team is empathetic, efficient, always present, and takes care of the client’s needs.’

‘Diversity and inclusion are features that are naturally integrated into the baseline of each relationship of the Bonelli team.’

‘The Bonelli team has a distinct expertise in the data protection sector.’

‘Tommaso Faelli is a high-quality lawyer, probably one of the few to integrate both competence and empathy.’

‘Giulia Tenaglia is very attentive to clients’ needs, and is always very helpful when an efficient and timely solution is required.’

Key clients

Enel Energia S.p.A.

Work highlights

  • Assisted Enel Energia with challenging a decision by the Italian Data Protection Authority, which imposed one of the largest fines ever in Italy (€27m) and ordered the introduction of several telemarketing chain governance changes.


Chiomenti‘s privacy and cybersecurity practice advises on GDPR, the Italian Data Privacy Code, and data-related breaches, transfers and privacy issues. The team is also experienced in tech, communications, compliance, investigations and litigation. The group additionally advises companies that are undergoing digital transformation, and assists with the data protection aspects of the Metaverse, blockchain and machine learning systems. Pierluigi Perri, a specialist in the structuring of data governance plans, heads up the department, which includes experienced data protection practitioners Marilena Hyeraci and Ersilia Lazzara. Former practice leader Gilberto Nava left the firm in October 2023.

Practice head(s):

Pierluigi Perri

Other key lawyers:

Marilena Hyeraci; Ersilia Lazzara


Extreme availability and ability to really get into the merits of situations so as to choose the best solution for clients. This is not something to be taken for granted.’

‘Pierluigi Perri is a person of undoubted competence, but who is also very humble, human and available. These qualities make for a wonderful working relationship.’

Key clients

Ita Airways




Aviation & Tourism International

Carel Industries S.p.A.

Duferco Holding

Fondazione Milano Cortina

Global Federal Credit Union

Investindustrial Investment Holding

JT International Italia

Meta Platforms Ireland Limited


Royal Trust

SPV Linea M4

Vertiv Group Corp.

Whistleblowing Solutions

ION Investment/Cerved

Castello SGR

Enel X

Work highlights

  • Advising a new company of Alfonsino on the implementation of all relevant privacy documentation for the development of a project for Italy involving the launch of a food delivery platform.
  • Advising Investindustrial Investment Holding in relation to the acquisition of the entire share capital of Viasat Group, which has involved data protection and cybersecurity issues.
  • Advising Vertiv Group Corp on the verification of compliance with EU data protection laws and regulations.


Privacy is a notable growth area for Dentons‘ Italy practice, which focuses on AI, IoT, cybersecurity and digital media. The Milan-based team is headed up by AI expert Giangiacomo Olivi, who handles major data protection, data privacy and GDPR compliance work, including significant projects involving multiple jurisdictions. Key support is provided by Chiara Bocchi, who coordinates large outsourcing and e-commerce transactions involving data governance issues. Since research concluded, Fabia Cairoli has left the practice.

Practice head(s):

Giangiacomo Olivi

Other key lawyers:

Chiara Bocchi


‘A flexible team that is always available and replies in real time.’

‘The team is highly competent, innovative, and deeply committed to the best interests of their clients.’

‘Their reputation is well deserved and clients are proud to partner with them.’

‘In the ever-changing environment of law, Dentons has adopted the latest technology to ensure that case management is efficient and transparent to clients.’

‘Giangiacomo Olivi is a real star with huge subject knowledge.’

Chiara Bocchi has great in-depth knowledge, clear and forward thinking, and understands clients’ requirements.

Key clients


Coca Cola


Intesa Sanpaolo

Istituto per le Opere di Religione

Jackleg Media






Pepco Poland SP. Z.O.O







Warner Bros


Work highlights

  • Assisting Whirlpool with various matters concerning data management and innovative technology solutions, including global strategic governance.
  • Assisting QVC with its strategic data privacy matters, including several multi-jurisdictional issues.

Gianni & Origoni

Gianni & Origoni's multidisciplinary team handles data protection and cybersecurity issues across multiple jurisdictions. The group’s expertise covers data protection and privacy agreements, data-related compliance systems and assists companies during data protection audits. It also acts for clients facing enforcement sanctions from the Italian Data Protection Authority. The principal figures are data protection specialist Daniele VecchiStefano Mele, who handles privacy and cybersecurity matters; and Melissa Marchese, who advises Italian and multinational companies on data protection management.

Practice head(s):

Daniele Vecchi; Melissa Marchese; Stefano Mele

Other key lawyers:

Francesco Cerciello; Flavia Bavetta; Tommaso Chiericati Salvioni


‘Gianni & Origoni’s cybersecurity and privacy team has the uniqueness of offering advice that covers both legal and technical aspects. It understands the technical specifics of the issues presented, and finds innovative solutions that manage to combine legal and technical features.

The team differs from any other in the market because of its multidisciplinary approach, speed and expertise.

A great peculiarity of the team is its ability to provide legally valid solutions that are, at the same time, business oriented.

The legal solutions provided by the team result in the highest strategic value achieved.

Clients greatly appreciate the punctuality, speed and competence of each of the team’s professionals.

‘When clients need all-encompassing advice on data protection matters, Gianni & Origoni is the place to go.

‘Stefano Mele is probably one of the few leading lawyers who can rightfully say to have been assisting clients with data protection for the past 20 years.

Key clients

Associazione Bancaria Italiana (ABI)

Arqit Quantum Inc

InfoCert S.p.A.

Open Fiber S.p.A.

Lindt & Sprüngli SpA

Lindt & Sprüngli SA

Porsche Italia SpA

Eni SpA

Agos SpA

Costa Crociere SpA (Carnival Group)

Takeda Italia SpA

Techint SpA

Steelco SpA


Alitalia – Società Aerea Italiana SpA

Memento Labs Srl

Missoni SpA

Accelleron Industries

Work highlights

  • Assisted Porsche Italy with the implementation of an innovative project aimed at focusing on consumer experiences.
  • Assisted Associazione Bancaria Italiana with developing a new strategic approach to the protection and processing of personal data.
  • Assisted the Comunità di Sant’Egidio with negotiating and finalising a data protection agreement for the implementation of a programme to help elderly and vulnerable people.

Orsingher Ortu – Avvocati Associati

Orsingher Ortu – Avvocati Associati‘s wide-ranging practice covers data processing agreements, legal assistance to data protection officers, cybersecurity issues and the management of data breaches. In addition, the team acts in proceedings before the Italian Data Protection Authority, manages the data protection aspects of outsourcing deals and advises on compliance with data protection legislation. The team is led by data protection specialist Fabrizio SannaMarta Minonne is the Italian referral contact for the association AndCo Law Alliance, which represents lawyers across France, Italy, Spain, Germany and the UK. Domenico Colella provides additional support.

Practice head(s):

Fabrizio Sanna

Other key lawyers:

Marta Minonne; Domenico Colella


‘Provides proposals that are tailored to clients’ needs.’

‘The people, their skills and their flexibility in managing requests are their main strengths.’

‘Marta Minonne deserves special praise for the splendid work carried out. Not only did Marta provide great legal experience, she was able to balance the legal point of view with the technical one, fully understanding the context and peculiarities of the various cases.’

Key clients


The Walt Disney Company



Verizon Media


ITV Global Entertainment Limited

F.C. Internazionale Milano


Antares Vision

Good Move


Banca Aidexa



Ford Trucks

Neo Apotek


Twentieth Century Fox


Work highlights

  • Successfully assisted Yahoo! and Verizon Media before the Italian Supreme Court in a case against the Italian Data Protection Authority concerning data protection law and de-indexing obligations involving search engines.
  • Acted for Douglas in proceedings commenced by the Italian Data Protection Authority to assess its compliance with the data protection legislation.
  • Advised F. C. Internazionale Milano on data protection matters.

Osborne Clarke

Osborne Clarke's Italy practice acts for some of the world’s leading tech companies on privacy and security matters across the fintech, eMobility, advertising, music and real estate sectors. The group is particularly focused on advising clients on digital transformations and the development of data-driven business models. Gianluigi Marino heads up the firm’s data protection team in Milan, advising on data breaches, cybersecurity, GDPR implementation, big data, outsourcing and compliance. Other key figures include senior associate Marialaura Boni, a media and advertising specialist, and senior lawyer Antonio Racano, whose wide-ranging workload includes the implementation of data compliance programs.

Practice head(s):

Gianluigi Marino

Other key lawyers:

Marialaura Boni; Antonio Racano


‘The team is composed of lawyers with strong experience in data protection laws (and in general, the laws applicable in the digital environment) and an outstanding problem-solving approach.’

‘The team is highly skilled in data protection issues. Without any doubt, it sets the bar high in the data protection law field in Italy.’

‘This practice’s uniqueness stems from an unwavering client focus and innovative approach. The team’s strengths lie in its deep industry knowledge, efficient problem solving and its commitment to exceeding client expectations.’

‘Osborne Clarke’s practice is really top-notch for its client-oriented and proactive approach.’

‘Gianluigi Marino is the kind of lawyer that every client needs – responsive, extremely focused on the practical aspects of the requested assistance and, moreover, he maintains an honest and fair approach, even in complex situations. Clients trust him and this is shown by their strong and ongoing relationships.’

‘The team, which includes Antonio Racano, has an excellent understanding of clients’ needs, and delivers its opinions promptly, with an effective and clear approach, providing concrete support for business activities.’

‘Marialaura Boni: the way she drives the client through action-planning is really outstanding.’

Key clients

Chemviron SA

Costim S.r.l. (Chorus Life S.p.A.)

Engie Italia S.p.A.

Essity AB

GB Foods SA

Havas Group


Italian Valley S.r.l.

Mail Boxes Etc. (MBE Wordlwide S.p.A.)

Mowi Italia S.r.l.

Novamont S.p.A.

NTT DATA Italia S.p.A.

Prysmian S.p.A.

Renantis S.p.A.

Satispay S.p.A.

Sony Music Entertainment Italy S.p.A.

Uber Technologies Inc.

Uber B.V

Warner Bros. Entertainment Inc.

Work highlights

  • Advising client (of over three decades) Sony Music Italy on privacy and data protection issues, and currently navigating its digital transformation, ensuring compliance with GDPR in Italy.
  • Advising global energy company Engie on numerous data protection issues and special data-related projects, including business functions such as joint controllerships, marketing, telesales and big data management.
  • Advising Costim and Elmet on data privacy and data protection issues arising from their pioneering data-driven smart city initiative in Bergamo.


ADVANT Nctm‘s privacy and IT compliance practice advises domestic and multinational companies on privacy-related compliance, along with the adoption and implementation of organisation, management and control models. The workload of group head Paolo Gallarati includes GDPR implementation. Giammarco Navarra‘s practice covers personal and sensitive data protection issues. Elsa Gentile advises on compliance with GDPR and national privacy law. Senior associate Marco Cappa is another key figure.

Practice head(s):

Paolo Gallarati

Other key lawyers:

Giammarco Navarra; Elsa Gentile; Marco Cappa; Giulio Uras


‘Great team with great knowledge, flexibility and high delivery standards.’

‘Good and timely updates represent a plus.’

‘Friendly and easy relationships. No complicated or long procedures in order to be in contact with lawyers or to solve problems when they happen.’

‘Great people and approach. They always proactively work in identifying solutions, so as to achieve the client’s objective.’

Key clients

Italo – Nuovo Trasporto Viaggiatori S.p.A.

Vaillant Group Italia S.p.A.

Prometeon Tyre Group S.r.l.

Business Integration Partners S.p.A.

Wind Tre S.p.A.


SEIF– Società Editoriale Il Fatto S.p.A.


Astrazeneca S.p.A.

TEA S.p.A.

Work highlights

  • Providing legal assistance to Corcym, in relation to a complex personal data protection compliance project.
  • Providing legal assistance to Subaru Italia in relation to its data processing activities.
  • Providing legal assistance to Italo – Nuovo Trasporti Viaggiatori, in relation to the analysis of a previous customer privacy model.

Studio Professionale Associato a Baker & McKenzie

The privacy and data security practice group of Studio Professionale Associato a Baker & McKenzie acts for clients across industries on their privacy and data protection requirements. Its expertise covers crises, transactions, daily operations and preparing organisations for new legislation. Practice head Francesca Gaudino in Milan advises clients from data-driven sectors, such as retail, healthcare, life sciences and financial services.

Practice head(s):

Francesca Gaudino

Other key lawyers:

Valeria Benedetti del Rio


High levels of expertise in the subject matter.’

‘Great accessibility and availability.’

‘The firm is a huge help in terms of the management of multi-jurisdictional projects and project portfolio management.’

Key clients

Moncler Group

Work highlights

  • Assists Industries SpA with in-sourcing its e-commerce and m-commerce activities worldwide, advising on data protection and data security issues.

Bird & Bird

Bird & Bird's dedicated team advises on a wide range of cybersecurity and data protection matters, from transactions, crisis management, data breaches and regulatory and internal investigations to disputes and incident-related preventions and responses. The department is co-led by privacy, data protection and security specialist Adriano D’Ottavio and Debora Stella, who brings extensive experience in data protection and IT issues.

Practice head(s):

Adriano D’Ottavio; Debora Stella


‘Bird & Bird’s data protection team constantly informs its client about any relevant legal news.’

‘Adriano D’Ottavio is always able to assist clients with all data protection issues.’

Key clients


FlixBus Italia


Work highlights

  • Advising Datafalls on an ongoing basis with regards to privacy and data protection matters.
  • Advising FlixBus Italia on an ongoing basis on privacy and data protection matters.
  • Regularly advises Lastminute.com Group on the implementation of marketing activities in several jurisdictions, including handling data transfers and data sharing within the group.


EY TAX & LAW ITALY‘s team comprises 18 IT and data protection law specialists, who act for government entities, public administrations and domestic and international corporations. The group also advises businesses across the banking and finance, insurance, transportation, automotive and web-based services sectors. The practice’s principal figures are IT and data protection expert Alessandra Pietroletti in Rome, and Milan-based Luigi Neirotti, whose focus encompasses IT law and data security and protection.


Great support for companies and solid organisational skills.’

‘The support provided makes it possible to promote the coordination and common development of privacy issues of interest to various companies, and to stay up to date with regulatory developments and guidelines provided by national and European supervisory authorities.’

‘Alessandra Pietroletti and Luigi Neirotti have demonstrated on several occasions their willingness to  provide different possible solutions in order to meet the client’s expectations as much as possible.’

Work highlights

  • Assisted a multi-services Italian company with setting up all of its internal and external procedures and services on a privacy compliance basis.
  • Successfully conducted a GDPR compliance assessment and remediation project involving a multi-utilities company.

LCA Studio Legale

LCA Studio Legale's Milan office bolstered its data protection team through the July 2023 recruitment of tech, data protection and cybersecurity expert Giulio Vecchi (as team co-head) from Chiomenti. The 11-lawyer practice routinely assists domestic and international companies with both day-to-day and strategic data protection issues. The practice is co-led by IP specialist Gianluca De Cristofaro, whose work covers data protection and cybersecurity, as well as IT and internet law.

Practice head(s):

Gianluca De Cristofaro; Giulio Vecchi


‘The practice is very responsive and well prepared on data protection matters.’

‘The group is structured with professionals of different seniority, and is able to satisfy the requests of companies promptly.’

‘The team always complies with deadlines and proposes innovative solutions and responses.’

Gianluca De Cristofaro and the people in his team really help clients to achieve their goals.

‘Giulio Vecchi is always available and ready to find practical solutions to complex issues concerning different jurisdictions.’

Key clients




DB Schenker

Doc Generici

Exa Infrastructure



La Rinascente S.p.a.




Vyiare Medical

Work highlights

  • Advising Coccinelle on the privacy issues surrounding the management of new data sharing processes within its distribution channel (throughout Europe and globally).
  • Assisting Furla with managing intra-group data processing and related data processing agreements.
  • Representing La Rinascente in a proceeding before the Italian Data Protection Authority concerning a new loyalty programme.

Legance - Avvocati Associati

Legance - Avvocati Associati's Rome-based multidisciplinary data protection department consistently advises clients on GDPR and data protection laws, along with the management and implementation of data protection models. The team further assists with data protection-related litigation, internal audits’ compliance with privacy requirements and database transfers.  Andrea Fedi heads up the team, bringing extensive experience in compliance, privacy and anti-bribery matters. Counsel Lucio Scudiero specialises in data law and cybersecurity.

Practice head(s):

Andrea Fedi

Other key lawyers:

Lucio Scudiero


‘Lucio Scudiero is a true 360° data protection expert.’

Key clients

Leonardo S.p.A.

Bracco S.p.A.

Enav S.p.A.

Grimaldi Group



Gruppo Metinvest Trametal

Ital Gas Storage

Aero Sekur

BPER Banca

Fondazione LIRH

Gruppo Hausmann & Co.

Arpinge S.p.A.

Lexia Avvocati

Lexia Avvocati advises tech and fintech platforms, IT service providers, software houses and marketing and digital growth advisors on day-to-day GDPR compliance activities. The team also assists with data breach cases, big data projects, international data transfers, data processing agreements and M&A deals involving data protection. Data protection and privacy specialist Aurora Agostini advises on all aspects of IT, IP and new technology law.

Practice head(s):

Aurora Agostini

Other key lawyers:

Giulietta Minucci; Jessica Giussani


The team can cover multiple legal aspects, with an international approach, for fintech/data-focused companies.

The individuals are very skilled and professional, and fluent in both Italian and English.

Key clients

Cryptosmart S.r.l.

Persia International Bank PLC

Ethicdata S.r.l.

Switcho S.r.l.

BG Italy S.r.l. (Bitget)

Trading 212 Crypto Ltd

Shares Digital Assets S.r.l.

Pirola Pennuto Zei & Associati

Advising both major domestic companies and multinational groups, Pirola Pennuto Zei & Associati's multidisciplinary regulatory, compliance and data protection practice covers GDPR issues, data breach procedures, DPO services, data sharing agreements and employee data processing. The group is headed by Roberta Di Vieto, who became (in 2021) the first woman to be appointed to the firm’s board of directors. Flanking Di Vieto, Mattia Salerno assists with data protection legislation-related compliance issues.

Practice head(s):

Roberta Di Vieto

Other key lawyers:

Mattia Salerno

Key clients

Clariant Group – Italian subsidiaries

SIAS S.p.A. Società Benefit

Qsrp Platform

La Piadineria S.p.A.

Burger King Restaurants S.p.A.

Stellantis Financial Services Italia SpA

Toshiba Italian Companies

DM Drogerie Markt Srl

Ursapharm Srl

Giovenale Srl

Easylivery Srl

Hines RE Italy S.r.l.

Intellera SpA

DXC Group – Italian Companies

Attijariwafa Bank

Ughi E Nunziante

Well known for its privacy and data protection expertise, Ughi E Nunziante's privacy and data protection team routinely advises Italian and multinational companies on GDPR issues. Its expertise covers data protection audits and compliance, assistance during inspections and representation in proceedings brought by the Authority for the Protection of Personal Data. The practice is co-led by data protection specialist Massimiliano Pappalardo and Agostino Clemente, who brings extensive experience in privacy matters.

Practice head(s):

Agostino Clemente; Massimiliano Pappalardo


‘Ughi e Nunziante’s data protection and privacy practice is unique due to its level of specialisation and focus on the pragmatic interpretation of data protection and privacy laws.

An expert team with experienced lawyers who have in-depth knowledge of regulations.

It has a client-centric approach with tailored strategies for individual needs.

Great technology integration that ensures efficient and secure data management.

It has a collaborative culture that emphasises teamwork to achieve innovative solutions.

A top choice for data protection and privacy legal needs.

‘Massimiliano Pappalardo’s in-depth knowledge of data protection and privacy laws, at both the European and national levels, sets him apart.’

‘Massimiliano Pappalardo’s dedication to understanding clients’ unique needs ensures tailored legal strategies.’