Firms To Watch: Data privacy and data protection

Bird & Bird works closely with its international network, providing cybersecurity and data protection advice and representation.
Cugia Cuomo & Associati's TMT and data protection department specialises in regulatory reforms, antitrust filings, webcasting, on-line gambling and publishing.
EMLEX | Eva Maschietto Massimo Maggiore advises on the processing of personal data, including privacy by default and design matters, European compliance programmes and national legislation, civil and administrative litigation, and risk assessments.
LCA Studio Legale has a small privacy and data protection department with experience of data protection consultancy and litigation matters; Gianluca De Cristofaro is the key figure.
Studio Legale Delfino e Associati Willkie Farr & Gallagher LLP's privacy and cybersecurity team has experience of GDPR and European regulation and is known for assisting clients in the pharma and technology sectors in particular.
Stefano Bombelli and Giuseppe Di Masi head up SZA Studio Legale's compliance team, which also has privacy, data protection, and cybersecurity experience.

Firms in the Spotlight Data privacy and data protection

ICT Legal Consulting

ICT Legal Consulting logo

A one-stop-shop for all data-related needs: From an adequate data collection and processing to correct handling of data breaches and deletion of data when no longer necessary, we want to help our clients in extracting the most value out of their data. We offer our clients a holistic approach to achieve strategic compliance: we do not …

View Profile...

Data privacy and data protection in Italy

DLA Piper

DLA Piper‘s data privacy and data protection team includes sub-teams that specialise in finance and insurance, media and telecoms, life sciences, and fashion and retail. The team is playing a significant role in important digital transformation projects in Italy, including the creation of a national data management and e-learning platform of the Italian school system. Giulio Coraggio is the head of the Italian technology practice and of the firm’s global internet of things, and gaming and gambling groups. Giulia Zappaterra is specialised in privacy, data protection and cybersecurity projects.

Practice head(s):

Giulio Coraggio

Other key lawyers:

Giulia Zappaterra

Key clients







Philip Morris




NTT Data



Banca PSA


Work highlights

  • Assisting NTT Data with a digital transformation project relating to the creation of the national data management and e-learning platform of the whole Italian school system that will replace any existing third-party vendors’ platforms.
  • Advised UniCredit on three major data breaches that affected on aggregate over 4 million customers and with the follow-up disputes before the competent data protection authority.
  • Advised Philip Morris on its whole privacy project concerning the management of its CRM system concerning IQOS and VEEV, its smoke-free products, and its IQOS club.

Hogan Lovells International LLP

Hogan Lovells International LLP‘s Massimiliano Masnada is a highly recognised privacy and data protection lawyer. He coordinates the firm’s strategic operations, agreements and regulation team, whose members often act as DPOs and in relation to GDPR matters. National and international clients appreciate the group’s global reach, the experience in dealing with the Italian Data Protection Authority and its litigation expertise. Giulia Mariuz combines her knowledge of data privacy with a specialism in e-commerce.

Practice head(s):

Massimiliano Masnada

Other key lawyers:

Giulia Mariuz; Elisabetta Nunziante


‘Massimiliano Masnada is a partner with absolute and proven experience in privacy and at the same time practical and quick in finding suitable solutions for the customer. Always close to the needs of the business and able to develop solutions that combine the legal aspects with the business perspective.’

‘Business-oriented, fast and reactive. Attentive to customer needs.’

‘Massimiliano Masnada is always up-to-date and able to provide really useful support. Giulia Mariuz and Elisabetta Nunziante are able to provide assistance by getting to the heart of business processes and understanding how to give real support.’

‘Flexibility in managing time and costs.’

‘Extremely competent profiles also on junior resources.’

‘Enormous preparation and deep knowledge of the sector gained over the years. Young and dynamic team.’

‘Massimiliano Masnada and Giulia Mariuz have the ability to anticipate problems due to the enormous experience in the field. The network of professionals in HL’s international network in this matter is also highly appreciated.’

‘Giulia Mariuz has a good general understanding of Italian privacy law and over all GDPR.’

Key clients


Bending Spoons

BNP Paribas Cardif






Pago PA


Zimmer Biomet

Work highlights

  • Assisted Google LLC before the Supreme Court against a ruling of the Court that obliged it to remove all search results relating to a priest involved in the past in episodes of paedophilia.
  • Assisting GlovoApp23/Foodinho in the appeal against the decision of the Italian Data Protection Authority providing Foodihno with a sanction of EUR 2.6 mln for alleged violation of GDPR provisions.
  • Assisting PagoPA in every data privacy and compliance issues regarding the launce of AppIO and the related services/projects offered to the Italian citizen through the app.

ICT Legal Consulting

ICT Legal Consulting‘s lawyers are highly specialised in the fields of information and communication technology, privacy and data, as well as IP law, and operate in a number of industry sectors. The firm’s ICT Cyber Consulting and ICTLC S.p.A. spin-offs, founded in early 2021, provide additional services to clients related to data privacy and security, including data protection by design technologies. Paolo Balboni is internationally recognised not only for his legal practice, but also for his activity as a professor of privacy, cybersecurity, and IT contract law at the European Centre on Privacy and Cybersecurity in Maastricht. Luca Bolognini is a highly successful European privacy and data protection lawyer and jointly heads the team with Balboni. Floriana Francesconi and Vito Michele Pavese are also noted.

Practice head(s):

Paolo Balboni; Luca Bolognini

Other key lawyers:

Floriana Francesconi; Vito Michele Pavese


‘Paolo Balboni and Luca Bolognini are among the leading experts in the sector. In this context, a customer is not looking for a full service firm, but someone who knows how to give precise answers on what can be done with data and technology. They are able to give it.’

‘The firm, made up of a plurality of professionals with integrated skills relating to different disciplines, is able to provide qualified specialist support in the issues relating to privacy and personal data protection with a 360° view from which the customer benefits from obtaining the advice, often going beyond what we were able to express with the request made.’

‘All lawyers provide support with a high and immediate ability to understand clients’ need.’

‘Absolute mastery of the subject of competence and ability to explain complex topics to people who are not in the sector.’

‘Expertise in the subject matter of the consultancy. Constant updating of the customer on the innovations characterizing the sector.’

‘High professionalism, continuous updating on privacy issues not only with regard to Italy, but globally.’

‘Paolo Balboni is a professional of rare passion, very high competence and considerable availability. Davide Baldini and Andrea Strippoli guarantee a high level of professionalism, combined with a practically 24-hour availability.’

‘ICT Legal is unique in its kind because it knows how to combine strong skills with extreme availability and accurate timing in assisting the client. Their strengths are: accuracy of opinions and deliverables in general, competence, availability, strong passion for everything concerning the protection of personal data and activities related to the digitization of processes.’

Key clients

Agos Ducato S.p.A

AID – Associazione Italiana Dislessia

AlfaSigma S.p.A.

Alpitour S.p.A.

Amissima Vita S.p.A.

Amnesty International – Sezione Italiana OdV


AON S.p.A.

Area Science Park – Trieste

Assimoco S.p.A.

Attiva S.p.A.

Axpo Italia S.p.A.

Banijay Italia S.p.A.

Bending Spoons S.p.A.

Bertazzoni S.p.A.

BNL BNP Paribas

Bper Banca S.p.A.

BitBang S.r.l.

Brunello Cucinelli S.p.A.

Centro Stampa Poligrafici S.r.l.

Cofidis S.p.A.

Consulcesi SA

Contactlab S.p.A.

Coop Italia Soc. Coop.

CRC-Evans Offshore Limited

Crédit Agricole Assicurazioni S.p.A.

Crédit Agricole Italia S.p.A. (Cariparma)

Dedalus S.p.A. (Dedalus Group)

Diennea S.r.l.

Doveconviene S.r.l.

Editoriale Nazionale S.r.l.

Emiliana Grandi Alberghi S.p.A.

Endemol Shine Italy S.p.A.

Engineering – Ingegneria Informatica S.p.A.

Eridania Italia S.p.A.

Esprinet S.p.A.

EVIVA S.p.A. S.p.A.

Fabbri Holding Industriale S.p.A. S.p.A.

F.I.S. Fabbrica Italiana Sintetici S.p.A.

Fondazione ANT Italia Onlus

Frigel Firenze S.p.A.

Friul Intagli Industries S.p.A.

Giochi Preziosi S.p.A.

Grandi Navi Veloci S.p.A.

Growens S.p.A.

Jobrapido S.r.l.

Laerdal Italia S.r.l.

Lago S.p.A.

Leonardo S.p.A.

Linkem S.p.A.

Maserati S.p.A.

Mediamarket S.p.A.

Meta System S.p.A.

Micys Company S.p.A.

Monrif S.p.A.

MSC Cruises SA

Netmind S.r.l.

OCF Organismo di Vigilanza e Tenuta dell’albo unico dei Consulenti Finanziari

Poste Italiane S.p.A.

Prima Assicurazioni S.p.A.

Progress Consultant S.r.l.

Register S.p.A.

Robin S.r.l.

Salvatore Ferragamo S.p.A.

Samsung Electronics Italia S.p.A.

Sapio Produzione Idrogeno Ossigeno S.r.l.

Sara Assicurazioni S.p.A.

SGS Italia S.p.A.

SISAC – Struttura Interregionale Sanitari Convenzionati

SIXS S.r.l.

Sofidel S.p.A.

Soft Strategy S.p.A.

Soilmec S.p.A.

Terna S.p.A.

TOD’S S.p.A.

Toothpic S.r.l.

Tper – Trasporto Passeggeri Emilia-Romagna S.p.A.

Trevi S.p.A.

Trevi Finanziaria Industriale S.p.A.

Trudi S.p.A.

United Nations High Commissioner for Refugees (UNHCR)

Università Campus Bio-Medico di Roma

Value Retail Management Italy S.r.l.

Veterfar Fossano S.r.l.

Virgin Active Italia S.p.A.

Vorwerk Italia S.a.s. di Vorkwerk Management S.r.l.

Webees S.r.l.

Welcome Travel Group S.p.A.

Wetaxi S.r.l.

Work highlights

  • Assisting the Dedalus Group in the definition of the Dedalus Global Data Protection Compliance Strategic Plan and the drafting of a Global Data Protection and Valorisation Framework.
  • Assisting Maserati S.p.A in transmitting the necessary competencies in terms of legal, IT and cybersecurity skills to the internal Global Data Protection Officer (DPO) of the client in order for them to effectively perform their work inside the business.
  • Assisting Poste Italiane S.p.A. (the national Italian Post Office and its controlled companies) in the continuous updating of its Privacy Management System, including verification of compliance with privacy requirements and regulatory consultancy activities in the fields of privacy and data protection.


Rocco Panetta‘s former activities as head of legal of the Italian DPA and as representative of the European Data Protection Board contribute towards PANETTA Law Firm‘s recognition in the market. He heads the team and his longstanding experience combines with Marco Lauricella‘s and Lorenzo Cristofaro‘s, who often assist him and also act as data protection officers. Counsel Tommaso Mauro and senior associate Federico Sartore are also highly appreciated. Vincenzo Tiani handles privacy, personal data protection, IP and media law from the firm’s Brussels office.

Practice head(s):

Rocco Panetta

Other key lawyers:

Marco Lauricella; Lorenzo Cristofaro; Federico Sartore


‘The team is very responsive and helpful to clients. Rocco Panetta is an expert in privacy issues for the EU, and he is always available and responsive.’

‘Rocco Panneta is a complete professional. He knows the area of privacy and gives you an almost immediate response. He does not make his clients wait.’

‘Rocca Pannetta is engaging, responsive and has lots of experience and connections in the industry.’

‘Rocco Panetta is a dream to work with. Responsive, with excellent legal knowledge and an ability to explain the legal issues in a comprehensive way.’

‘Rocca Panetta is able to interpret the legislation and the provisions of the Guarantor, thanks to the experience and decades of knowledge of the legislation that has evolved over time, of the principles and logic of reasoning of the authority. The contribution of this approach to the company is priceless. Marco Lauricella, Tommaso Lauro and Federico Sartore combine competence and great availability.’

‘The Panetta data and privacy team are simply superb. Led by the incomparable Rocco Panetta they combine expertise, practical nous and commerciality with an ethos of hard work and collaboration that is second to none. This all makes it very easy to work with them and to recommend them to clients for whom they deliver excellent service.’

‘Rocco Panetta – expert, calm under pressure, commercially savvy – the go to data and privacy lawyer in Italy. Federico Sartore – an up and coming superstar who combines all the hallmarks of a Panetta data & privacy lawyer (expertise, calm under pressure, commercially savvy) with a ferocious work appetite.’

‘Rocco Panetta is one of the undisputed leaders in the field of privacy, he knows the subject in detail and has an international market vision.’

Key clients



Bottega Veneta






Europ Assistance

Procter & Gamble

Hard Rock Café






Clear Channel


OTB (Diesel)





Santander Consumer Bank


Illimity Bank


Kering EyeWear

Work highlights

  • Assisted Tiktok in their relations with the Italian Data Protection Authority and the European Data Protection Board, under art. 66.2 of the GDPR.
  • Assisted Conad during its ecommerce reorganisation.
  • Assisted Deliveroo during the proceeding in front of the Italian and UK DPAs following a DPA investigation under GDPR.

Portolano Cavallo

Portolano Cavallo has longstanding experience of data privacy and data protection, which have been a part of the service offering for many years. Laura Liguori heads up the team and is highlighted for her longstanding involvement in the fields of data protection, cybersecurity, e-commerce, consumer and IT law. Counsel Giulio Novellini covers all areas of data protection, including GDPR implementation, data breaches prevention and incident response. The team has further specialised during its years of activity, and it now includes specific figures dedicated to data protection arising from employment matters.

Practice head(s):

Laura Liguori

Other key lawyers:

Giulio Novellini


‘Subject matter experts, very reassuring in the management of privacy issues.’

‘Laura Liguori is a partner who excellently masters the subject, knows how to deal with customers and has a high standing in the environment where she is highly regarded.’

‘Giulio Novellini is a very precise and prepared lawyer, truly a professional who manages all the problems submitted to him in an optimal way, even in a short time’.

The team is always up to date on the relevant topics for the activity of the core business and has an approach to provide a service of the highest quality and to favour the business at the same time.


In the data protection field, BonelliErede mainly provides assistance in connection with AI and the internet of things, data transfer, outsourcing agreements and the interaction with data protection authorities. Practice head Tommaso Faelli combines a successful IP practice with expertise in IT and data protection, with particular attention to the areas of privacy, e-commerce, big data and cloud computing. Associate Giulia Tenaglia supports him and is noted for her work in data management and the use of new technologies in regulated and non-regulated sectors.

Practice head(s):

Tommaso Faelli

Other key lawyers:

Giulia Tenaglia


‘Availability, proactivity, competence.’

‘Prompt responses, total availability and flexibility, kindness.’

‘Excellent firm, very well-prepared in the field of data protection for the insurance sector.’

‘Highly trained professionals, available and ready to adopt solutions tailored to the reference business.’

‘Specific experiences and skills in multiple sectors, able to provide advice on technical aspects and applicable practices.’

‘The team is equipped with 360-degree skills in the privacy field and, in this way, guarantees assistance on a very wide range of issues.’


Chiomenti‘s TMT and IP practice also includes data privacy and data protection professionals, who assist corporate clients from multiple industry sectors in relation to data transfers, profiling, internal investigations and machine learning-based services, among other matters. The practice also includes a multidisciplinary sub-group dedicated to the data protection aspects of digital transformation and the implementation of blockchain and machine learning solutions. Gilberto Nava heads the IP, TMT and data protection department. The team includes counsel Paolo Bertoni, and associate Ersilia Lazzara. Since publication, Giulio Vecchi left the firm.

Practice head(s):

Gilberto Nava

Other key lawyers:

Paolo Bertoni; Ersilia Lazzara


‘Pleasant to talk and work with.’

‘Dynamism, ability to identify business needs, knowledge of the subject and its applicability to corporate cases at 360 degrees.’

Key clients

Terna S.p.A.

Eni S.p.a.

Toyota Financial Services – International Corporation

Toyota Insurance Management SE


Yoox Net-À-Porter Group S.P.A. (YNAP)

Enel X

Intesa Sanpaolo S.p.a.

Venchi S.r.l.

Hic Mobile S.r.l.

Agile Telecom

InfoCert S.p.a.

Visura S.r.l.


Work highlights

  • Advising Venchi on a digital transformation project, which will affect the organisational and productive procedures and the marketing activities.
  • Assisting Prometeia with reference to data protection issues related to human resources
  • Advising Terna on an ongoing basis in relation to a significant number of data protection matters, also related to the organisation of the group and relationships with companies based outside of the European Union, day-to-day GDPR compliance, and support in relation to the digitalisation of a number of services.


In the data privacy space, Dentons‘ intellectual property and technology team  primarily focuses on AI, particularly as it relates to the financial services sector, and cybersecurity, having assisted numerous high-profile clients following sizeable data breaches. Giangiacomo Olivi, who acts as Europe co-head of the data privacy and cybersecurity group and also of the intellectual property and technology practice, is highly appreciated by the market for his experience across different sectors and countries, as he often advises clients in collaboration with the firm’s international offices. Associate Chiara Bocchi is also noted.

Practice head(s):

Giangiacomo Olivi

Other key lawyers:

Chiara Bocchi; Fabia Cairoli


‘Giangiacomo Olivi has great ability to surround himself with strong collaborators, characterized by high competence and professional and human availability.’

‘Compared to other firms, Dentons has a well staffed data privacy and data protection team. That means that they have resources and capabilities to take on large projects in this practice area, when compared to other firms in Italy. Their broad international network is also well suited for those seeking multi-jurisdictional advice.’

‘Giangiacomo Olivi is an exceptional communicator. He is able to express complex information to diverse and broad audiences in simple and understandable terms.’

‘Considerable experience in the management of a large amount of sensitive data. It offers wide-ranging solutions and answers as complete as possible, not limited to legal aspects only. They listen to the customer carefully and deal with the problem in depth. The team is characterized by a strong cohesion and commonality of purpose among its members.’

‘The team is very diverse and there are excellent young professionals.’

‘The team is very competent and precise. It focuses immediately on targets in line with customer expectations quickly and in a professional way.’

‘The team is well-balanced and professionals are very knowledgeable.’

Key clients


Bending Spoons

BIC Formats

Bolton Group




Delta Airlines



GEDI Gruppo Editoriale




Le Creuset





Movendo Technology


NTT Data



The Student Hotel




Warner Bros



Work highlights

  • Assisting Bolton Group in relation to several privacy issues, including data retention issues and the share of data with its business partners.
  • Assisting QVC in relation to the review of its data management policies and compliance programme in several jurisdictions worldwide.
  • Assisting several multinational companies in regard to the reaction to cyberattacks and devising the overall cybersecurity strategy for a number of multinationals.

Gianni & Origoni

Gianni & Origoni‘s data protection team has recently expanded its capabilities in the field of cybersecurity following the arrival of former Carnelutti‘s partner Stefano Mele in April 2021. His cybersecurity experience completes the group’s service offering, which already included capabilities in multiple areas, including investigations, implementation of new technologies, drafting of data protection and privacy agreements, structuring of ad-hoc data protection compliance systems and audits. Daniele Vecchi co-heads the practice together with counsel Melissa Marchese, who specialises in ordinary and extraordinary data protection management, including information technology aspects. 

Practice head(s):

Daniele Vecchi; Melissa Marchese

Other key lawyers:

Stefano Mele


‘Professionalism and competence’.

Key clients

Lindt & Sprüngli SpA



Eni SpA

Eni SpA

Auditel SpA

Costa Crociere SpA (Carnival Group)

Takeda Italia SpA

Techint SpA

Gellify Digital Investment SpA


Alitalia – Società Aerea Italiana SpA

Memento Labs Srl

Missoni SpA

Technogym SpA

Work highlights

  • Provided Alibaba with assistance to define a data protection structure, as well as cross-border data transfer advice in connection to a COVID-19 diagnostic project.
  • Advised Alitalia during the COVID-19 emergency on the management of all data protection aspects, technology and cybersecurity.
  • Assisting Auditel in an innovative project aimed at tracking and collecting, on a syndicated basis, data on audiences of web TV contents.

Orsingher Ortu – Avvocati Associati

Together with IP, TMT is a core are of practice for Orsingher Ortu – Avvocati Associati. In data privacy and  protection specifically, the team is mostly engaged in day-to-day advisory mandates, negotiation of data protection agreements and the transfer and processing of data. Disputes are also part of the offering, including cases involving the Italian Data Protection Authority. Fabrizio Sanna manages the group, which includes IT, outsourcing and e-commerce specialist Domenico Colella and senior associate Marta Minonne.

Practice head(s):

Fabrizio Sanna

Other key lawyers:

Domenico Colella; Marta Minnone

Key clients


The Walt Disney Company




ITV Global Entertainment Limited






Italian Stock Exchange

F.C. Internazionale Milano Football Club



Egon Zendher



Antares Vision




Work highlights

  • Advised Condé Nast on day-to-day data protection matters.
  • Advised F.C. Internazionale Milano on a wide number of aspects related to data protection day-to-day issues.
  • Advised Yahoo! / Verizon before the Italian Supreme Court on a case against the Italian Data Protection Authority.

Osborne Clarke

Osborne Clarke‘s client portfolio includes Google, Uber and Bytedance, among others. The firm’s advice is particularly sought after not only for its data privacy and protection expertise, but also its strength in the IT, media and digital space, all of which are areas where the firm excels at international level. The team’s ‘profound understanding’ of the regulatory framework is yet another strength. Gianluigi Marino leads the team. Senior associate Marialaura Boni also provides additional support.

Practice head(s):

Gianluigi Marino

Other key lawyers:

Marialaura Boni


‘In-depth knowledge of issues not strictly related to the consultancy in place, allowing us to also consider situations that were beyond the necessary competence, proceeding to formulate a much broader framework than required and above all much more comprehensive than every possible instance.’

‘The lawyers particularly distinguished themselves for their professionalism, their ability to listen and interpret situations, and their willingness to extend their advice and assessments to parties not expressly included in the contract.’

‘The team managed during the pandemic to be among the first firms to send clear indications in real time on the various rules that were communicated on Sunday evening, demonstrating high professionalism and readiness to urgent matters, thus helping the various companies to be reactive to new indications.’

‘Gianluigi Marino: deep knowledge of the subject, honesty, promptness and practicality in finding solutions to the most complex issues.’

‘Profound understanding of the regulatory framework along with the excellent understanding of the business issue at stake. They have a very quick response time without compromising quality. They have business acumen and provide pragmatic solutions that at the same time are legally solid.’

‘Marialaura Boni always proves to be a curious professional who is immersed in the business reality she is confronted with. This capacity for vision and proximity to the customer allows it to provide tailor-made consultancy.’

‘Osborne Clarke is a law firm known for the high quality of its legal services in the tech and data protection field and boasts qualified professionals who are always up-to-date on the issues of main interest at national and international level. Their continuous dialogue with colleagues in other jurisdictions, also through internal meetings and webinars open to customers, the tools they have designed to manage the most complex projects in a practical and efficient way make them strategic partners in the management of the most complicated legal issues. The billing methods have been agreed in an appropriate manner.’

‘Proactive professionals, always available and interested in knowing the details and technicalities that distinguish the reality in which our company operates, to provide the client with always complete and personalized assistance.’

Key clients

Costim S.r.l.

Satispay S.p.A.

Havas Group

Engie Italia S.p.A

Sony Music Entertainment Italy S.p.A

Mail Boxes Etc

Dplay Entertainment Ltd

Uber Technologies Inc. and Uber B.V

ByteDance (UK) Limited – TikTok


Just Eat

Mediobanca – Banca di Credito Finanziario S.p.A.

Re-Forme S.r.l

Binda Italia S.r.l.

Grifols Italia S.p.A

Mowi Italia S.r.l

Xnext S.p.A.

Giesse S.p.A.

Work highlights

  • Advised Costim S.r.l. on the development of a smart city project, which offers an innovative new model of city living and home automation, making extensive use of cutting-edge digital technologies.
  • Advising Satispay on GDPR compliance along with a review of its entire privacy structure in the light of the growth of the group and the services offered through the Satispay app.
  • Assisting Havas Group with a range of data protection issues, including reviewing data processing agreements relating to the implementation of marketing initiatives.


ADVANT Nctm provides ordinary and extraordinary privacy law and IT compliance advice. M&A lawyer Paolo Gallarati, who focuses on TMT, among other areas, heads up the firm's data privacy department. Of counsel Elsa Gentile is a GDPR expert. The protection of personal data and information security, including the management of various compliance projects, are among senior associate Virginia Paparozzi‘s areas of focus. The department also has experience of data breach management in the field of insurance policies. Marco Cappa is praised for providing ‘valid support’ in privacy matters and beyond.

Practice head(s):

Paolo Gallarati

Other key lawyers:

Marco Cappa; Giulio Uras; Virginia Paparozzi


‘Excellent knowledge of privacy and data protection issues, combined with that of the reference sector. This is a plus as many issues (eg for digital pharma) are closely connected to each other.’

‘Paolo Gallarati has the ability to fully understand the needs of the customer and to provide specific advice and to the point, taking a position and helping the customer to orient himself towards the most appropriate solution.’

‘The firm, and in particular Paolo Gallarati, have a very practical and pragmatic approach aimed at finding solutions. Communication is simple and the team is always ready to support requests in a simple way.’

‘Paolo Gallarati is an excellent professional. Direct in communication and endowed with great experience and analytical skills. Attentive to the problems down to the smallest detail and always ready to foresee the future effects of decisions.’

‘Synergy between the various departments of the firm that cover a spectrum so wide as to guarantee an almost complete analysis of the issue. Although it is a structured study, the interaction with professionals is never bureaucratic or tiring.’

‘NCTM professionals are certainly very prepared, flexible and attentive to customer needs.’

‘High competence and sensitivity to customer needs.’

‘Competence, availability and transparency.’

Key clients

Italo – Nuovo Trasporto Viaggiatori S.p.A.

Vaillant Group Italia S.p.A.


Greenpeace Italia

Wind Tre S.p.A.


Nicole Fashion Group S.p.A.


Gruppo IBL Banca S.p.A.

TEA S.p.A.

Gilead Sciences S.r.l.

Veneto Sviluppo S.p.A.


Work highlights

  • Providing legal assistance to Gyrus Capital in relation to a complex personal data protection compliance project.
  • Providing legal assistance to Fresenius Group in relation to its legal needs, including corporate, commercial, M&A (in particular for Nephrocare company) requirements as well as in compliance, privacy, administrative and data protection issues.
  • Providing legal assistance to Subaru Italia in relation to a complex project of compliance with the legislation on the protection of personal data.

Studio Professionale Associato a Baker & McKenzie

At Studio Professionale Associato a Baker & McKenzie, data protection is an area managed by Francesca Gaudino, whose team acts from within the firm’s larger information technology and communications practice group. Among  the strength of the practice is the integration with the firm’s international offices, which allows it to handle projects at a European level. Global compliance programmes, data breach responses and risk management strategies can therefore be counted among the team’s areas of expertise.

Practice head(s):

Francesca Gaudino

Other key lawyers:

Davide Cascone


‘A holistic, problem-solving approach.’

‘Experience and dedication.’

‘Expertise, availability, speed of response, ability to provide multi-jurisdictional opinions.’

‘Professionalism, competence, availability, kindness’

‘Baker keeps the client updated on what are the main news on the market in the privacy / GDPR field, also through the use of innovative methods such as the organization of thematic workshops in webinar mode.’

‘Francesca Gaudino is one of the most experienced professionals, at an Italian and probably also European level, in the field of privacy / data protection. Davide Cascone is always ready and attentive to collect client requests.’

Key clients

EU Commission


Work highlights

  • Advising the EU Commission regarding the Business Process Re-engineering and functional toolkit for GDPR compliance), under the Horizon 2020 framework programme.
  • Assisting Industries SpA, Moncler Group in the launch of its digital strategies worldwide, in-sourcing e-commerce and m-commerce activities.

Legance - Avvocati Associati

At Legance – Avvocati Associati, managing associate Lucio Scudiero is the key figure for assistance with matters concerning privacy, new technology law and compliance, with particular focus on the application of data protection and cybersecurity legislation, criminal liability and trust services for electronic transactions. Scudiero frequently works together with Andrea Fedi, who primarily handles M&A, extraordinary corporate transactions and compliance.

Practice head(s):

Andrea Fedi

Other key lawyers:

Lucio Scudiero


Lucio Scudiero is one of the few true data protection experts on the market.’

‘Italian studio with an international vocation. Network of contacts abroad. Multiple areas of activity for full service assistance.’

‘Availability and speed in replying. Kindness. Ability to understand customer dynamics.’

‘Lucio Scudiero is extremely competent, but also very attentive to dealing in a direct and polite way, showing extreme availability.’

Key clients


Apax Partners

Bottega Veneta

Bristol-Myers Squibb S.R.L.

Do It Now Group

Ferriera Valsider

Generali Business Solutions


Grimaldi Group

Interactive Advertising Bureau Italia – Iab

Miroglio S.p.A.

Nuovo Pignone International



Just Eat Italy

Università Vita-Salute San Raffaele

Work highlights

  • Assisting Bottega Veneta in relation to data protection and corporate compliance issues, with specific reference to the application of Legislative Decree 231/2001.
  • Advising Do IT Now Group on the drafting of commercial contracts regulating the performance of online advertising activities, review of the group’s privacy policy, advice on privacy issues related to direct marketing and telemarketing activities.
  • Assisting Stasher for the legal design (privacy, IP and compliance) of its app.

Orrick, Herrington & Sutcliffe

Orrick, Herrington & Sutcliffe's privacy and data protection team sits within the firm's broader corporate department which is led by Alessandro De Nicola. This has led to an offering specialised in the needs of corporate clients, in particular in relation to cybersecurity and AI development and management matters in the financial services and life sciences sectors. Special counsel Ivan Rotunno handles GDPR compliance, data transfer and other day-to-day advice in the area.

Practice head(s):

Ivan Rotunno

Other key lawyers:

Alessandro De Nicola


‘Ivan Rotunno guarantees continuous availability, as well as competence and professionalism.’

‘Ivan Rotunno is very competent.’

Key clients

Artsana Group

A.S. Roma S.p.A.


Belmond Italia S.p.A.

BNP Paribas Asset Management France

CNP Unicredit Vita S.p.A.

F2i Fondi Italiani per le Infrastrutture Società di Gestione del Risparmio S.p.A.

Ferrari S.p.A.


Prelios S.p.A.

Renovars S.p.A.

Roche Diagnostics S.p.A.

Roche S.p.A.

Rothschild & Co. Italia S.p.A.

Société Générale Milan Branch

Sparkasse Cassa di Risparmio di Bolzano

Tirreno Power S.p.A.

Tutored S.r.l.

Ughi E Nunziante

Alongside its IP practice, Ughi E Nunziante has developed strong privacy and data protection capabilities. The team often handles cybersecurity and privacy regulatory mandates, including data protection and GDPR matters. Massimiliano Pappalardo specialises in these areas and is also a member of the IAPP European Advisory Board. Agostino Clemente's workload includes both IP and data protection matters.

Practice head(s):

Agostino Clemente; Massimiliano Pappalardo

Other key lawyers:

Pasquale Di Stefano


‘The team shows strong internationalization and the provision of legal services free from unnecessary technicalities (ie, solution oriented).’

‘Massimiliano Pappalardo demonstrates a profound knowledge of the subject and of the interactions between it and other legal disciplines. He also demonstrates great flexibility and proactivity, managing to provide practical solutions to complex problems.’

‘Extreme competence, practical and effective approach, courtesy and empathy of professionals.’

‘Pasquale Di Stefano: courtesy, competence, speed and extreme precision characterize their work. Compared to other professionals, they brilliantly manage to offer solutions that can be concretely implemented in a business context.’

‘Competence and continuous updating, team spirit, ability to enter into the problem and at the same time in harmony with the customers, the flexibility in responding to the needs of the changing reality.’

‘Agostino Clemente is a true specialist in the subject, with an interdisciplinary approach.’

‘Extreme competence, wisdom in advising and supporting, particular care and attention to detail, careful examination of alternatives.’

Key clients


Calzedonia Group

Open Fiber S.p.A.

Renè Caovilla S.p.A.

Natuzzi SpA

Ospedali Fatebenefratelli

Jakala S.p.A.

Signature Flights Support Italy S.r.l.

Lazio Innova S.r.l.

Fondazione Ente Nazionale di Previdenza ed Assistenza per gli Psicologi

Consap S.p.A.

Motork Italia S.r.l.

Alpiq Energia S.p.A.

iGenius S.r.l.

Retail Hub S.r.l.


Locker InPost Italia S.r.l.


Work highlights

  • Providing legal assistance to the internal Data Protection Officer of Open Fiber.
  • Providing external Data Protection Officer services, at group level, to Calzedonia.
  • Assisted the Italian companies of the multinational group René Caovilla in a GDPR compliance programme.