DLA Piper’s data privacy and protection practice in Italy covers complex data-driven projects, cyberattacks and privacy-related disputes. Clients further benefit from the group’s sector specialisms in finance, insurance, TMT, life sciences, fashion and retail. Italy IP and technology department head Giulio Coraggio is a renowned tech, privacy, cybersecurity and gaming lawyer, whose track record includes managing some of Europe’s largest cyberattacks. Providing key support, Giulia Zappaterra specialises in privacy, data protection and cybersecurity projects, while Cristina Criscuoli advises on life sciences and financial sector-related privacy and data protection issues.

Hogan Lovells International LLP‘s Milan group routinely assists companies with GDPR-related privacy compliance matters. The team also assists company data protection officers with privacy impact assessments and privacy documentation reviews, as well as organisational and security measures. The practice is headed by privacy and data protection expert Massimiliano Masnada, who represents clients before the Italian Data Protection Authority alongside Giulia Mariuz, a specialist in e-commerce matters.

With one of the largest privacy and data protection practices in the EU, ICT Legal Consulting advises global brands across the fashion, automotive, and banking and finance sectors. The practice is headed by Paolo Balboni, who routinely serves as a data protection officer for multinationals; practice area authority Luca Bolognini; and Floriana Francesconi, a specialist in matters involving engineering, services and pharmaceuticals. Other key names include Nicola Franchetto, who advises on IT contracts, cloud computing and e-marketing; Vito Michele Pavese, who assists clients with European and national data protection compliance; and Francesca Tugnoli, who draws on a background in administrative crime liability.

PANETTA Studio Legale | PANETTA Law Firm utilises its ‘great data, privacy and cyber team‘ to maintain an enviable market reputation for data economy work. Comprised of specialists in privacy and the protection of personal data and cybersecurity, the practice is a go-to for AI matters that come before the Data Protection Authority. Founding partner Rocco Panetta is ‘an outstanding lawyer, whose knowledge of privacy matters is deep and broad’, while Lorenzo Cristofaro brings expertise to research projects funded by the European Union under the Horizon 2020 framework. Other key figures include Marco Lauricella, Tommaso Mauro and Federico Sartore.

The specialist lawyers at Portolano Cavallo‘s market-leading privacy and data protection practice bring extensive experience to handling a wide range of data law issues. Examples includes high-profile disputes and breaches, launches of new initiatives to exploit data, and M&A and employment-related data protection work. With a longstanding focus on internet and data protection matters, Laura Liguori‘s sector expertise covers advertising, marketing, life sciences, fashion and luxury goods. Giulio Novellini‘s wide-ranging practice covers all aspects of EU data protection. Eleonora Curreli is an expert in privacy and cybersecurity.

BonelliErede‘s data protection and privacy practice in Milan sits within the firm’s wider IP team. The practice regularly assists with interactions with data protection authorities, challenging authorities’ decisions before the courts, and providing guidance throughout inspections and investigations. The group also advises on the data and privacy protection side of outsourcing agreements and commercial and technological joint ventures, and on aspects of such matters related to IoT and AI. Tommaso Faelli heads up the digital innovation focus team. Anna La Mura specialises in privacy and data protection. Giulia Tenaglia advises on the usage of new tech in regulated and non-regulated sectors. The arrival of Ivan Rotunno, Alessandro De Nicola and Giulia Rivarola di Roccella from Orrick, Herrington & Sutcliffe in February 2024 further boosted the practice.

Chiomenti‘s privacy and cybersecurity practice advises on GDPR, the Italian Data Privacy Code, and data-related breaches, transfers and privacy issues. The team is also experienced in tech, communications, compliance, investigations and litigation. The group additionally advises companies that are undergoing digital transformation, and assists with the data protection aspects of the Metaverse, blockchain and machine learning systems. Pierluigi Perri, a specialist in the structuring of data governance plans, heads up the department, which includes experienced data protection practitioners Marilena Hyeraci and Ersilia Lazzara. Former practice leader Gilberto Nava left the firm in October 2023.

Privacy is a notable growth area for Dentons‘ Italy practice, which focuses on AI, IoT, cybersecurity and digital media. The Milan-based team is headed up by AI expert Giangiacomo Olivi, who handles major data protection, data privacy and GDPR compliance work, including significant projects involving multiple jurisdictions. Key support is provided by Chiara Bocchi, who coordinates large outsourcing and e-commerce transactions involving data governance issues. Since research concluded, Fabia Cairoli has left the practice.

Gianni & Origoni‘s multidisciplinary team handles data protection and cybersecurity issues across multiple jurisdictions. The group’s expertise covers data protection and privacy agreements, data-related compliance systems and assists companies during data protection audits. It also acts for clients facing enforcement sanctions from the Italian Data Protection Authority. The principal figures are data protection specialist Daniele Vecchi; Stefano Mele, who handles privacy and cybersecurity matters; and Melissa Marchese, who advises Italian and multinational companies on data protection management.

Orsingher Ortu – Avvocati Associati‘s wide-ranging practice covers data processing agreements, legal assistance to data protection officers, cybersecurity issues and the management of data breaches. In addition, the team acts in proceedings before the Italian Data Protection Authority, manages the data protection aspects of outsourcing deals and advises on compliance with data protection legislation. The team is led by data protection specialist Fabrizio Sanna. Marta Minonne is the Italian referral contact for the association AndCo Law Alliance, which represents lawyers across France, Italy, Spain, Germany and the UK. Domenico Colella provides additional support.

Osborne Clarke's Italy practice acts for some of the world’s leading tech companies on privacy and security matters across the fintech, eMobility, advertising, music and real estate sectors. The group is particularly focused on advising clients on digital transformations and the development of data-driven business models. Gianluigi Marino heads up the firm’s data protection team in Milan, advising on data breaches, cybersecurity, GDPR implementation, big data, outsourcing and compliance. Other key figures include senior associate Marialaura Boni, a media and advertising specialist, and senior lawyer Antonio Racano, whose wide-ranging workload includes the implementation of data compliance programs.

ADVANT Nctm‘s privacy and IT compliance practice advises domestic and multinational companies on privacy-related compliance, along with the adoption and implementation of organisation, management and control models. The workload of group head Paolo Gallarati includes GDPR implementation. Giammarco Navarra‘s practice covers personal and sensitive data protection issues. Elsa Gentile advises on compliance with GDPR and national privacy law. Senior associate Marco Cappa is another key figure.

The privacy and data security practice group of Studio Professionale Associato a Baker & McKenzie acts for clients across industries on their privacy and data protection requirements. Its expertise covers crises, transactions, daily operations and preparing organisations for new legislation. Practice head Francesca Gaudino in Milan advises clients from data-driven sectors, such as retail, healthcare, life sciences and financial services.

Bird & Bird's dedicated team advises on a wide range of cybersecurity and data protection matters, from transactions, crisis management, data breaches and regulatory and internal investigations to disputes and incident-related preventions and responses. The department is co-led by privacy, data protection and security specialist Adriano D’Ottavio and Debora Stella, who brings extensive experience in data protection and IT issues.

EY TAX & LAW ITALY‘s team comprises 18 IT and data protection law specialists, who act for government entities, public administrations and domestic and international corporations. The group also advises businesses across the banking and finance, insurance, transportation, automotive and web-based services sectors. The practice’s principal figures are IT and data protection expert Alessandra Pietroletti in Rome, and Milan-based Luigi Neirotti, whose focus encompasses IT law and data security and protection.

LCA Studio Legale‘s Milan office bolstered its data protection team through the July 2023 recruitment of tech, data protection and cybersecurity expert Giulio Vecchi (as team co-head) from Chiomenti. The 11-lawyer practice routinely assists domestic and international companies with both day-to-day and strategic data protection issues. The practice is co-led by IP specialist Gianluca De Cristofaro, whose work covers data protection and cybersecurity, as well as IT and internet law.

Legance - Avvocati Associati's Rome-based multidisciplinary data protection department consistently advises clients on GDPR and data protection laws, along with the management and implementation of data protection models. The team further assists with data protection-related litigation, internal audits’ compliance with privacy requirements and database transfers.  Andrea Fedi heads up the team, bringing extensive experience in compliance, privacy and anti-bribery matters. Counsel Lucio Scudiero specialises in data law and cybersecurity.

Lexia advises tech and fintech platforms, IT service providers, software houses and marketing and digital growth advisors on day-to-day GDPR compliance activities. The team also assists with data breach cases, big data projects, international data transfers, data processing agreements and M&A deals involving data protection. Data protection and privacy specialist Aurora Agostini advises on all aspects of IT, IP and new technology law.

Advising both major domestic companies and multinational groups, Pirola Pennuto Zei & Associati's multidisciplinary regulatory, compliance and data protection practice covers GDPR issues, data breach procedures, DPO services, data sharing agreements and employee data processing. The group is headed by Roberta Di Vieto, who became (in 2021) the first woman to be appointed to the firm’s board of directors. Flanking Di Vieto, Mattia Salerno assists with data protection legislation-related compliance issues.

Well known for its privacy and data protection expertise, Ughi E Nunziante's privacy and data protection team routinely advises Italian and multinational companies on GDPR issues. Its expertise covers data protection audits and compliance, assistance during inspections and representation in proceedings brought by the Authority for the Protection of Personal Data. The practice is co-led by data protection specialist Massimiliano Pappalardo and Agostino Clemente, who brings extensive experience in privacy matters.