Hall Of Fame

Firms To Watch: Data privacy and data protection

Led by Italo de Feo in Rome, CMS advises on the full spectrum of data privacy work, from compliance and cyber breach responses to defence matters involving regulators and class actions.
Eversheds Sutherland Associazione Professionale's data protection department in Italy is led by Rome-based Massimo Maioletti, whose track record includes assisting major domestic and multinational companies with the implementation of data protection compliance programmes (including at multi-jurisdictional levels).
Acting for major companies and private equity funds, Grimaldi Alliance's privacy and data protection department is led by cybersecurity, privacy and data protection specialist Francesco Conti, who is supported by privacy expert Laura Bellicini.
Withers Studio Legale's data privacy and data protection team in Italy (Milan and Padua) is headed by Jacopo Liguori, who advises on GDPR compliance programmes, data breach issues and international transfer of data.

Firms in the Spotlight Data privacy and data protection

ICT Legal Consulting

ICT Legal Consulting logo

Whether through synergies, strategic partnerships or the opening of new subsidiaries, ICTLC – ICT Legal Consulting (ICTLC) continues to consolidate its role as a strategic partner for its clients, going beyond the role of legal advisor.

View Profile...

Data privacy and data protection in Italy

DLA Piper

DLA Piper’s data privacy and protection practice in Italy covers complex data-driven projects, cyberattacks and privacy-related disputes. Clients further benefit from the group’s sector specialisms in finance, insurance, TMT, life sciences, fashion and retail. Italy IP and technology department head Giulio Coraggio is a renowned tech, privacy, cybersecurity and gaming lawyer, whose track record includes managing some of Europe’s largest cyberattacks. Providing key support, Giulia Zappaterra specialises in privacy, data protection and cybersecurity projects, while Cristina Criscuoli advises on life sciences and financial sector-related privacy and data protection issues.

Practice head(s):

Giulio Coraggio


Other key lawyers:

Giulia Zappaterra; Cristina Criscuoli


Key clients

UniCredit


Luxottica


TeamSystem


AON


Menarini


Disney


Philip Morris


L’Oréal


Pfizer


Generali


NTT Data


Sisal


Amplifon


Banca PSA


Moncler


Boston Consulting Group


Haier


Work highlights


  • Assisted the renowned Moncler group with navigating a large cyberattack.
  • Assisted BCG with the development of a groundbreaking artificial intelligence system, which involved ensuring data protection compliance.
  • Advised Bending Spoons on the privacy aspects surrounding an avant-garde, generative artificial intelligence system that it developed.

Hogan Lovells International LLP

Hogan Lovells International LLP‘s Milan group routinely assists companies with GDPR-related privacy compliance matters. The team also assists company data protection officers with privacy impact assessments and privacy documentation reviews, as well as organisational and security measures. The practice is headed by privacy and data protection expert Massimiliano Masnada, who represents clients before the Italian Data Protection Authority alongside Giulia Mariuz, a specialist in e-commerce matters.

Practice head(s):

Massimiliano Masnada


Other key lawyers:

Giulia Mariuz; Valerio Natale; Elisabetta Nunziante


Key clients

OpenAI


GlovoApp23/Foodinho


Bending Spoons


Google


Orthofix


Pago PA


TeamSystem


Hype S.p.A.


Work highlights


  • Assisted OpenAI with proceedings opened by the Italian Data Protection Authority, in relation to the blocking of the ChatGPT service to Italian users.
  • Assisting GlovoApp23 (and the Italian company of the Glovo group, Foodinho) with the appeal against a Data Protection Authority order that imposed a sanction for alleged violations of GDPR provisions (arising from the processing of riders’ data).
  • Assisted PagoPA with developing a privacy compliance model under the GDPR for the app IO and related functioning and services.

ICT Legal Consulting

With one of the largest privacy and data protection practices in the EU, ICT Legal Consulting advises global brands across the fashion, automotive, and banking and finance sectors. The practice is headed by Paolo Balboni, who routinely serves as a data protection officer for multinationals; practice area authority Luca Bolognini; and Floriana Francesconi, a specialist in matters involving engineering, services and pharmaceuticals. Other key names include Nicola Franchetto, who advises on IT contracts, cloud computing and e-marketing; Vito Michele Pavese, who assists clients with European and national data protection compliance; and Francesca Tugnoli, who draws on a background in administrative crime liability.

Practice head(s):

Paolo Balboni; Luca Bolognini; Floriana Francesconi


Other key lawyers:

Nicola Franchetto; Vito Michele Pavese; Francesca Tugnoli; Sara Pecoraro


Testimonials

‘The team is always available to support clients in the challenges they face. Competent and highly qualified in the field of data privacy.’

‘ICT is probably the best EU firm for GDPR/cyber security/TMT issues. They have deep knowledge of data security in most EU jurisdictions and can anticipate regulatory trends.’

‘Good team work and easy to work with. The people are excellent!’

‘Paolo Balboni is always in a position to put his clients’ needs in a broader context, so as to provide strategic assistance with IT/data protection decisions.’

‘Highly efficient and professional, especially Paolo Balboni.’

‘Luca Bolognini’s great collaborative spirit, utmost empathy and over-the-top creative skills, in addition to his strong human qualities, mean that a relationship of deep trust is established with him and his collaborators – the best data protection lawyer in Italy.’

‘Nicola Franchetto combines different industries’ knowledge with regulatory wisdom, and is always available when the client needs an answer.’

Francesca Tugnoli, as are all the other members of the team, is an excellent lawyer with strong legal competence, and great business acumen and leadership skills.

Key clients

Banca Nazionale del Lavoro S.p.A. (BNL)


Bending Spoons S.p.A.


Bertazzoni S.p.A.


Brunello Cucinelli S.p.A.


Caffeina S.p.A. Società Benefit


Cassa di Risparmio di Bra S.p.A. (Bper Banca)


Cedacri S.p.A.


Centro Stampa Poligrafici S.r.l. (Monrif Group)


Cloud Security Alliance (CSA)


Cofidis S.p.A.


Consulcesi SA


Crédit Agricole Assicurazioni S.p.A.


Crédit Agricole Italia S.p.A.


Crédit Agricole Vita S.p.A.


FCA Services S.C.P.A. (Stellantis)


Guess Italia S.r.l.


Guess Europe Sagl


Maserati S.p.A. (Stellantis)


Salvatore Ferragamo S.p.A.


Samsung Electronics Italia S.p.A.


Work highlights


  • Assists Stellantis, acting as its external data protection office.
  • Assists Guess Europe Sagl, as its European data protection officer for outsourcing.
  • Provides continuous legal assistance in privacy, data protection and data security to Samsung Electronics Italia.

PANETTA Studio Legale | PANETTA Law Firm

PANETTA Studio Legale | PANETTA Law Firm utilises its ‘great data, privacy and cyber team‘ to maintain an enviable market reputation for data economy work. Comprised of specialists in privacy and the protection of personal data and cybersecurity, the practice is a go-to for AI matters that come before the Data Protection Authority. Founding partner Rocco Panetta is ‘an outstanding lawyer, whose knowledge of privacy matters is deep and broad’, while Lorenzo Cristofaro brings expertise to research projects funded by the European Union under the Horizon 2020 framework. Other key figures include Marco LauricellaTommaso Mauro and Federico Sartore.

Practice head(s):

Rocco Panetta


Other key lawyers:

Lorenzo Cristofaro; Marco Lauricella;Tommaso Mauro; Federico Sartore


Testimonials

‘Strengths and key capabilities include depth of knowledge in privacy and technology law, giving strategic advice in relation to communications with regulators and understanding new or innovative technologies, so as to give considered legal advice.’

A great data, privacy and cyber team in Italy.

‘Their availability, sectorial knowledge, expertise and dedication to excellent and efficient work is really amazing, and makes this law firm a real exception in the privacy legal community in Italy.’

Key clients

Accyourate


ACEA ATO 2


Allyfe


OpenAI


ANCIC


Areti


Bottega Veneta


ITA Airlines


Christie’s


Conad


Deliveroo


Enel


Gucci


Kering Eyewear


Kering Italia


ByteDance


Procter & Gamble


Santander


TikTok


Work highlights


  • Advised TikTok, and its parent company ByteDance, on crucial aspects regarding the protection of its users.
  • Advises Conad on personal data issues.
  • Acts as data protection officer for several of the Kering Group brands.

Portolano Cavallo

The specialist lawyers at Portolano Cavallo‘s market-leading privacy and data protection practice bring extensive experience to handling a wide range of data law issues. Examples includes high-profile disputes and breaches, launches of new initiatives to exploit data, and M&A and employment-related data protection work. With a longstanding focus on internet and data protection matters, Laura Liguori‘s sector expertise covers advertising, marketing, life sciences, fashion and luxury goods. Giulio Novellini‘s wide-ranging practice covers all aspects of EU data protection. Eleonora Curreli is an expert in privacy and cybersecurity.

Practice head(s):

Laura Liguori


Other key lawyers:

Giulio Novellini; Eleonora Curreli


Testimonials

‘They are very competent and very attentive to clients’ needs.’

‘Willing to listen and identify innovative solutions by appropriately assessing the risks.’

‘Best privacy and data protection practice in town.’

‘They are very efficient, practical and pragmatic, with strong legal knowledge! An excellent combination.’

‘The practice is very much on the front edge of innovation – it is always up to date on new technology and how innovation is changing the data privacy rules.’

‘The firm stands out as an example in relation to diversity.’

‘Laura Liguori is an outstanding lawyer who is always available and hugely competent.’

‘Laura Liguori and her team are really capable- highly knowledgeable, very flexible.’

BonelliErede

BonelliErede‘s data protection and privacy practice in Milan sits within the firm’s wider IP team. The practice regularly assists with interactions with data protection authorities, challenging authorities’ decisions before the courts, and providing guidance throughout inspections and investigations. The group also advises on the data and privacy protection side of outsourcing agreements and commercial and technological joint ventures, and on aspects of such matters related to IoT and AI. Tommaso Faelli heads up the digital innovation focus team. Anna La Mura specialises in privacy and data protection. Giulia Tenaglia advises on the usage of new tech in regulated and non-regulated sectors. The arrival of Ivan Rotunno, Alessandro De Nicola and Giulia Rivarola di Roccella from Orrick, Herrington & Sutcliffe in February 2024 further boosted the practice.

Practice head(s):

Tommaso Faelli


Other key lawyers:

Anna La Mura; Giulia Tenaglia; Ivan Rotunno; Alessandro De Nicola; Giulia Rivarola di Roccella


Testimonials

‘Excellent approach to the issues addressed, with deep awareness of business dynamics, due to its in-depth knowledge of the industry and relevant issues.’

‘The whole team is empathetic, efficient, always present, and takes care of the client’s needs.’

‘Diversity and inclusion are features that are naturally integrated into the baseline of each relationship of the Bonelli team.’

‘The Bonelli team has a distinct expertise in the data protection sector.’

‘Tommaso Faelli is a high-quality lawyer, probably one of the few to integrate both competence and empathy.’

‘Giulia Tenaglia is very attentive to clients’ needs, and is always very helpful when an efficient and timely solution is required.’

Key clients

Enel Energia S.p.A.


Work highlights


  • Assisted Enel Energia with challenging a decision by the Italian Data Protection Authority, which imposed one of the largest fines ever in Italy (€27m) and ordered the introduction of several telemarketing chain governance changes.

Chiomenti

Chiomenti‘s privacy and cybersecurity practice advises on GDPR, the Italian Data Privacy Code, and data-related breaches, transfers and privacy issues. The team is also experienced in tech, communications, compliance, investigations and litigation. The group additionally advises companies that are undergoing digital transformation, and assists with the data protection aspects of the Metaverse, blockchain and machine learning systems. Pierluigi Perri, a specialist in the structuring of data governance plans, heads up the department, which includes experienced data protection practitioners Marilena Hyeraci and Ersilia Lazzara. Former practice leader Gilberto Nava left the firm in October 2023.

Practice head(s):

Pierluigi Perri


Other key lawyers:

Marilena Hyeraci; Ersilia Lazzara


Testimonials

Extreme availability and ability to really get into the merits of situations so as to choose the best solution for clients. This is not something to be taken for granted.’

‘Pierluigi Perri is a person of undoubted competence, but who is also very humble, human and available. These qualities make for a wonderful working relationship.’

Key clients

Ita Airways


Airbnb


Alfonsino


Ania


Aviation & Tourism International


Carel Industries S.p.A.


Duferco Holding


Fondazione Milano Cortina


Global Federal Credit Union


Investindustrial Investment Holding


JT International Italia


Meta Platforms Ireland Limited


Prometeia


Royal Trust


SPV Linea M4


Vertiv Group Corp.


Whistleblowing Solutions


ION Investment/Cerved


Castello SGR


Enel X


Work highlights


  • Advising a new company of Alfonsino on the implementation of all relevant privacy documentation for the development of a project for Italy involving the launch of a food delivery platform.
  • Advising Investindustrial Investment Holding in relation to the acquisition of the entire share capital of Viasat Group, which has involved data protection and cybersecurity issues.
  • Advising Vertiv Group Corp on the verification of compliance with EU data protection laws and regulations.

Dentons

Privacy is a notable growth area for Dentons‘ Italy practice, which focuses on AI, IoT, cybersecurity and digital media. The Milan-based team is headed up by AI expert Giangiacomo Olivi, who handles major data protection, data privacy and GDPR compliance work, including significant projects involving multiple jurisdictions. Key support is provided by Chiara Bocchi, who coordinates large outsourcing and e-commerce transactions involving data governance issues. Since research concluded, Fabia Cairoli has left the practice.

Practice head(s):

Giangiacomo Olivi


Other key lawyers:

Chiara Bocchi


Testimonials

‘A flexible team that is always available and replies in real time.’

‘The team is highly competent, innovative, and deeply committed to the best interests of their clients.’

‘Their reputation is well deserved and clients are proud to partner with them.’

‘In the ever-changing environment of law, Dentons has adopted the latest technology to ensure that case management is efficient and transparent to clients.’

‘Giangiacomo Olivi is a real star with huge subject knowledge.’

Chiara Bocchi has great in-depth knowledge, clear and forward thinking, and understands clients’ requirements.

Key clients

Accenture


Coca Cola


Hisense


Intesa Sanpaolo


Istituto per le Opere di Religione


Jackleg Media


L’Oréal


Luxottica


Mediobanca


Miroglio


Mondadori


Pepco Poland SP. Z.O.O


Publiacqua


QVC


UniCredit


UnipolTech


Verizon


Vodafone


Warner Bros


Whirlpool


Work highlights


  • Assisting Whirlpool with various matters concerning data management and innovative technology solutions, including global strategic governance.
  • Assisting QVC with its strategic data privacy matters, including several multi-jurisdictional issues.

Gianni & Origoni

Gianni & Origoni's multidisciplinary team handles data protection and cybersecurity issues across multiple jurisdictions. The group’s expertise covers data protection and privacy agreements, data-related compliance systems and assists companies during data protection audits. It also acts for clients facing enforcement sanctions from the Italian Data Protection Authority. The principal figures are data protection specialist Daniele VecchiStefano Mele, who handles privacy and cybersecurity matters; and Melissa Marchese, who advises Italian and multinational companies on data protection management.

Practice head(s):

Daniele Vecchi; Melissa Marchese; Stefano Mele


Other key lawyers:

Francesco Cerciello; Flavia Bavetta; Tommaso Chiericati Salvioni


Testimonials

‘Gianni & Origoni’s cybersecurity and privacy team has the uniqueness of offering advice that covers both legal and technical aspects. It understands the technical specifics of the issues presented, and finds innovative solutions that manage to combine legal and technical features.

The team differs from any other in the market because of its multidisciplinary approach, speed and expertise.

A great peculiarity of the team is its ability to provide legally valid solutions that are, at the same time, business oriented.

The legal solutions provided by the team result in the highest strategic value achieved.

Clients greatly appreciate the punctuality, speed and competence of each of the team’s professionals.

‘When clients need all-encompassing advice on data protection matters, Gianni & Origoni is the place to go.

‘Stefano Mele is probably one of the few leading lawyers who can rightfully say to have been assisting clients with data protection for the past 20 years.

Key clients

Associazione Bancaria Italiana (ABI)


Arqit Quantum Inc


InfoCert S.p.A.


Open Fiber S.p.A.


Lindt & Sprüngli SpA


Lindt & Sprüngli SA


Porsche Italia SpA


Eni SpA


Agos SpA


Costa Crociere SpA (Carnival Group)


Takeda Italia SpA


Techint SpA


Steelco SpA


GLS SpA


Alitalia – Società Aerea Italiana SpA


Memento Labs Srl


Missoni SpA


Accelleron Industries


Work highlights


  • Assisted Porsche Italy with the implementation of an innovative project aimed at focusing on consumer experiences.
  • Assisted Associazione Bancaria Italiana with developing a new strategic approach to the protection and processing of personal data.
  • Assisted the Comunità di Sant’Egidio with negotiating and finalising a data protection agreement for the implementation of a programme to help elderly and vulnerable people.

Orsingher Ortu – Avvocati Associati

Orsingher Ortu – Avvocati Associati‘s wide-ranging practice covers data processing agreements, legal assistance to data protection officers, cybersecurity issues and the management of data breaches. In addition, the team acts in proceedings before the Italian Data Protection Authority, manages the data protection aspects of outsourcing deals and advises on compliance with data protection legislation. The team is led by data protection specialist Fabrizio SannaMarta Minonne is the Italian referral contact for the association AndCo Law Alliance, which represents lawyers across France, Italy, Spain, Germany and the UK. Domenico Colella provides additional support.

Practice head(s):

Fabrizio Sanna


Other key lawyers:

Marta Minonne; Domenico Colella


Testimonials

‘Provides proposals that are tailored to clients’ needs.’

‘The people, their skills and their flexibility in managing requests are their main strengths.’

‘Marta Minonne deserves special praise for the splendid work carried out. Not only did Marta provide great legal experience, she was able to balance the legal point of view with the technical one, fully understanding the context and peculiarities of the various cases.’

Key clients

Ferrari


The Walt Disney Company


Amazon


Yahoo!


Verizon Media


TBWA


ITV Global Entertainment Limited


F.C. Internazionale Milano


Douglas


Antares Vision


Good Move


IXMedia


Banca Aidexa


Catalina


Fielmann


Ford Trucks


Neo Apotek


Persado


Twentieth Century Fox


SKY


Work highlights


  • Successfully assisted Yahoo! and Verizon Media before the Italian Supreme Court in a case against the Italian Data Protection Authority concerning data protection law and de-indexing obligations involving search engines.
  • Acted for Douglas in proceedings commenced by the Italian Data Protection Authority to assess its compliance with the data protection legislation.
  • Advised F. C. Internazionale Milano on data protection matters.

Osborne Clarke

Osborne Clarke's Italy practice acts for some of the world’s leading tech companies on privacy and security matters across the fintech, eMobility, advertising, music and real estate sectors. The group is particularly focused on advising clients on digital transformations and the development of data-driven business models. Gianluigi Marino heads up the firm’s data protection team in Milan, advising on data breaches, cybersecurity, GDPR implementation, big data, outsourcing and compliance. Other key figures include senior associate Marialaura Boni, a media and advertising specialist, and senior lawyer Antonio Racano, whose wide-ranging workload includes the implementation of data compliance programs.

Practice head(s):

Gianluigi Marino


Other key lawyers:

Marialaura Boni; Antonio Racano


Testimonials

‘The team is composed of lawyers with strong experience in data protection laws (and in general, the laws applicable in the digital environment) and an outstanding problem-solving approach.’

‘The team is highly skilled in data protection issues. Without any doubt, it sets the bar high in the data protection law field in Italy.’

‘This practice’s uniqueness stems from an unwavering client focus and innovative approach. The team’s strengths lie in its deep industry knowledge, efficient problem solving and its commitment to exceeding client expectations.’

‘Osborne Clarke’s practice is really top-notch for its client-oriented and proactive approach.’

‘Gianluigi Marino is the kind of lawyer that every client needs – responsive, extremely focused on the practical aspects of the requested assistance and, moreover, he maintains an honest and fair approach, even in complex situations. Clients trust him and this is shown by their strong and ongoing relationships.’

‘The team, which includes Antonio Racano, has an excellent understanding of clients’ needs, and delivers its opinions promptly, with an effective and clear approach, providing concrete support for business activities.’

‘Marialaura Boni: the way she drives the client through action-planning is really outstanding.’

Key clients

Chemviron SA


Costim S.r.l. (Chorus Life S.p.A.)


Engie Italia S.p.A.


Essity AB


GB Foods SA


Havas Group


Immobiliare.it


Italian Valley S.r.l.


Mail Boxes Etc. (MBE Wordlwide S.p.A.)


Mowi Italia S.r.l.


Novamont S.p.A.


NTT DATA Italia S.p.A.


Prysmian S.p.A.


Renantis S.p.A.


Satispay S.p.A.


Sony Music Entertainment Italy S.p.A.


Uber Technologies Inc.


Uber B.V


Warner Bros. Entertainment Inc.


Work highlights


  • Advising client (of over three decades) Sony Music Italy on privacy and data protection issues, and currently navigating its digital transformation, ensuring compliance with GDPR in Italy.
  • Advising global energy company Engie on numerous data protection issues and special data-related projects, including business functions such as joint controllerships, marketing, telesales and big data management.
  • Advising Costim and Elmet on data privacy and data protection issues arising from their pioneering data-driven smart city initiative in Bergamo.

ADVANT Nctm

ADVANT Nctm‘s privacy and IT compliance practice advises domestic and multinational companies on privacy-related compliance, along with the adoption and implementation of organisation, management and control models. The workload of group head Paolo Gallarati includes GDPR implementation. Giammarco Navarra‘s practice covers personal and sensitive data protection issues. Elsa Gentile advises on compliance with GDPR and national privacy law. Senior associate Marco Cappa is another key figure.

Practice head(s):

Paolo Gallarati


Other key lawyers:

Giammarco Navarra; Elsa Gentile; Marco Cappa; Giulio Uras


Testimonials

‘Great team with great knowledge, flexibility and high delivery standards.’

‘Good and timely updates represent a plus.’

‘Friendly and easy relationships. No complicated or long procedures in order to be in contact with lawyers or to solve problems when they happen.’

‘Great people and approach. They always proactively work in identifying solutions, so as to achieve the client’s objective.’

Key clients

Italo – Nuovo Trasporto Viaggiatori S.p.A.


Vaillant Group Italia S.p.A.


Prometeon Tyre Group S.r.l.


Business Integration Partners S.p.A.


Wind Tre S.p.A.


Beazley


SEIF– Società Editoriale Il Fatto S.p.A.


ENAV S.p.A.


Astrazeneca S.p.A.


TEA S.p.A.


Work highlights


  • Providing legal assistance to Corcym, in relation to a complex personal data protection compliance project.
  • Providing legal assistance to Subaru Italia in relation to its data processing activities.
  • Providing legal assistance to Italo – Nuovo Trasporti Viaggiatori, in relation to the analysis of a previous customer privacy model.

Studio Professionale Associato a Baker & McKenzie

The privacy and data security practice group of Studio Professionale Associato a Baker & McKenzie acts for clients across industries on their privacy and data protection requirements. Its expertise covers crises, transactions, daily operations and preparing organisations for new legislation. Practice head Francesca Gaudino in Milan advises clients from data-driven sectors, such as retail, healthcare, life sciences and financial services.

Practice head(s):

Francesca Gaudino


Other key lawyers:

Valeria Benedetti del Rio


Testimonials

High levels of expertise in the subject matter.’

‘Great accessibility and availability.’

‘The firm is a huge help in terms of the management of multi-jurisdictional projects and project portfolio management.’

Key clients

Moncler Group


Work highlights


  • Assists Industries SpA with in-sourcing its e-commerce and m-commerce activities worldwide, advising on data protection and data security issues.

Bird & Bird

Bird & Bird's dedicated team advises on a wide range of cybersecurity and data protection matters, from transactions, crisis management, data breaches and regulatory and internal investigations to disputes and incident-related preventions and responses. The department is co-led by privacy, data protection and security specialist Adriano D’Ottavio and Debora Stella, who brings extensive experience in data protection and IT issues.

Practice head(s):

Adriano D’Ottavio; Debora Stella


Testimonials

‘Bird & Bird’s data protection team constantly informs its client about any relevant legal news.’

‘Adriano D’Ottavio is always able to assist clients with all data protection issues.’

Key clients

Datafalls


FlixBus Italia


Lastminute.com


Work highlights


  • Advising Datafalls on an ongoing basis with regards to privacy and data protection matters.
  • Advising FlixBus Italia on an ongoing basis on privacy and data protection matters.
  • Regularly advises Lastminute.com Group on the implementation of marketing activities in several jurisdictions, including handling data transfers and data sharing within the group.

EY TAX & LAW ITALY

EY TAX & LAW ITALY‘s team comprises 18 IT and data protection law specialists, who act for government entities, public administrations and domestic and international corporations. The group also advises businesses across the banking and finance, insurance, transportation, automotive and web-based services sectors. The practice’s principal figures are IT and data protection expert Alessandra Pietroletti in Rome, and Milan-based Luigi Neirotti, whose focus encompasses IT law and data security and protection.

Testimonials

Great support for companies and solid organisational skills.’

‘The support provided makes it possible to promote the coordination and common development of privacy issues of interest to various companies, and to stay up to date with regulatory developments and guidelines provided by national and European supervisory authorities.’

‘Alessandra Pietroletti and Luigi Neirotti have demonstrated on several occasions their willingness to  provide different possible solutions in order to meet the client’s expectations as much as possible.’

Work highlights


  • Assisted a multi-services Italian company with setting up all of its internal and external procedures and services on a privacy compliance basis.
  • Successfully conducted a GDPR compliance assessment and remediation project involving a multi-utilities company.

LCA Studio Legale

LCA Studio Legale's Milan office bolstered its data protection team through the July 2023 recruitment of tech, data protection and cybersecurity expert Giulio Vecchi (as team co-head) from Chiomenti. The 11-lawyer practice routinely assists domestic and international companies with both day-to-day and strategic data protection issues. The practice is co-led by IP specialist Gianluca De Cristofaro, whose work covers data protection and cybersecurity, as well as IT and internet law.

Practice head(s):

Gianluca De Cristofaro; Giulio Vecchi


Testimonials

‘The practice is very responsive and well prepared on data protection matters.’

‘The group is structured with professionals of different seniority, and is able to satisfy the requests of companies promptly.’

‘The team always complies with deadlines and proposes innovative solutions and responses.’

Gianluca De Cristofaro and the people in his team really help clients to achieve their goals.

‘Giulio Vecchi is always available and ready to find practical solutions to complex issues concerning different jurisdictions.’

Key clients

BBVA


Coccinelle


Continental


DB Schenker


Doc Generici


Exa Infrastructure


Furla


Janssen


La Rinascente S.p.a.


Microsoft


Newton


Nintendo


Vyiare Medical


Work highlights


  • Advising Coccinelle on the privacy issues surrounding the management of new data sharing processes within its distribution channel (throughout Europe and globally).
  • Assisting Furla with managing intra-group data processing and related data processing agreements.
  • Representing La Rinascente in a proceeding before the Italian Data Protection Authority concerning a new loyalty programme.

Legance - Avvocati Associati

Legance - Avvocati Associati's Rome-based multidisciplinary data protection department consistently advises clients on GDPR and data protection laws, along with the management and implementation of data protection models. The team further assists with data protection-related litigation, internal audits’ compliance with privacy requirements and database transfers.  Andrea Fedi heads up the team, bringing extensive experience in compliance, privacy and anti-bribery matters. Counsel Lucio Scudiero specialises in data law and cybersecurity.

Practice head(s):

Andrea Fedi


Other key lawyers:

Lucio Scudiero


Testimonials

‘Lucio Scudiero is a true 360° data protection expert.’

Key clients

Leonardo S.p.A.


Bracco S.p.A.


Enav S.p.A.


Grimaldi Group


Aon


MBDA S.p.A.


Gruppo Metinvest Trametal


Ital Gas Storage


Aero Sekur


BPER Banca


Fondazione LIRH


Gruppo Hausmann & Co.


Arpinge S.p.A.


Lexia Avvocati

Lexia Avvocati advises tech and fintech platforms, IT service providers, software houses and marketing and digital growth advisors on day-to-day GDPR compliance activities. The team also assists with data breach cases, big data projects, international data transfers, data processing agreements and M&A deals involving data protection. Data protection and privacy specialist Aurora Agostini advises on all aspects of IT, IP and new technology law.

Practice head(s):

Aurora Agostini


Other key lawyers:

Giulietta Minucci; Jessica Giussani


Testimonials

The team can cover multiple legal aspects, with an international approach, for fintech/data-focused companies.

The individuals are very skilled and professional, and fluent in both Italian and English.

Key clients

Cryptosmart S.r.l.


Persia International Bank PLC


Ethicdata S.r.l.


Switcho S.r.l.


BG Italy S.r.l. (Bitget)


Trading 212 Crypto Ltd


Shares Digital Assets S.r.l.


Pirola Pennuto Zei & Associati

Advising both major domestic companies and multinational groups, Pirola Pennuto Zei & Associati's multidisciplinary regulatory, compliance and data protection practice covers GDPR issues, data breach procedures, DPO services, data sharing agreements and employee data processing. The group is headed by Roberta Di Vieto, who became (in 2021) the first woman to be appointed to the firm’s board of directors. Flanking Di Vieto, Mattia Salerno assists with data protection legislation-related compliance issues.

Practice head(s):

Roberta Di Vieto


Other key lawyers:

Mattia Salerno


Key clients

Clariant Group – Italian subsidiaries


SIAS S.p.A. Società Benefit


Qsrp Platform


La Piadineria S.p.A.


Burger King Restaurants S.p.A.


Stellantis Financial Services Italia SpA


Toshiba Italian Companies


DM Drogerie Markt Srl


Ursapharm Srl


Giovenale Srl


Easylivery Srl


Hines RE Italy S.r.l.


Intellera SpA


DXC Group – Italian Companies


Attijariwafa Bank


Ughi E Nunziante

Well known for its privacy and data protection expertise, Ughi E Nunziante's privacy and data protection team routinely advises Italian and multinational companies on GDPR issues. Its expertise covers data protection audits and compliance, assistance during inspections and representation in proceedings brought by the Authority for the Protection of Personal Data. The practice is co-led by data protection specialist Massimiliano Pappalardo and Agostino Clemente, who brings extensive experience in privacy matters.

Practice head(s):

Agostino Clemente; Massimiliano Pappalardo


Testimonials

‘Ughi e Nunziante’s data protection and privacy practice is unique due to its level of specialisation and focus on the pragmatic interpretation of data protection and privacy laws.

An expert team with experienced lawyers who have in-depth knowledge of regulations.

It has a client-centric approach with tailored strategies for individual needs.

Great technology integration that ensures efficient and secure data management.

It has a collaborative culture that emphasises teamwork to achieve innovative solutions.

A top choice for data protection and privacy legal needs.

‘Massimiliano Pappalardo’s in-depth knowledge of data protection and privacy laws, at both the European and national levels, sets him apart.’

‘Massimiliano Pappalardo’s dedication to understanding clients’ unique needs ensures tailored legal strategies.’