Cybersecurity 2026

ITALY Law and Practice Contributed by: Paolo Balboni, Luca Bolognini, Francesco Capparelli and Giulia Finocchiaro, ICT Legal Consulting

ICT Legal Consulting (ICTLC) is an international law firm that provides strategic legal and regulatory sup - port across privacy, data protection, intellectual prop - erty, and technology, media and telecommunications (TMT) law – with a strong focus on the normative and operational aspects of cybersecurity. The firm assists organisations with designing and implementing gov - ernance, compliance and security frameworks that meet the highest international standards. With over 80 professionals and a network active in more than

65 jurisdictions, ICTLC combines global co-ordina - tion with local insight. Through its sister company ICT Cyber Consulting, the firm offers integrated cy - bersecurity services, including legal–technical risk assessments, resilience planning, and alignment with frameworks such as NIS2, DORA and the Cyber Resilience Act. ICTLC’s multidisciplinary expertise enables clients to navigate complex digital regula - tions and strengthen trust, compliance and resilience across their global operations.

Authors

Paolo Balboni is a leading European ICT, privacy and cybersecurity lawyer, serving as Data Protection Officer for multinational companies. Admitted to the Milan and Amsterdam Bars, he is founding partner of ICT Legal Consulting and ICT Cyber Consulting. He advises on legal matters involving data protection, cybersecurity, AI, IoT, IT contracts and digital regulation. Paolo is a professor at Maastricht University and holds positions with the EPO and European Commission expert groups. He is a published author and frequent keynote speaker. His expertise spans multiple sectors, and he has contributed to key EU regulatory frameworks, including the GDPR and cloud data protection codes.

Francesco Capparelli is Chief Cybersecurity Adviser at ICT Legal Consulting and ICT Cyber Consulting.

Francesco is a lawyer, a qualified auditor/lead auditor ISO/IEC 27001, ISO 22301, ISO 37001, ISO/IEC 20000-1, ISO 9001 and ISO 42001, a Certified Ethical Hacker, CIPPM and a Data Protection Officer. He obtained three master’s degrees from LUISS University and Link Campus University in Rome in Competition Law and Innovation, with a specialisation in Privacy and Big Data in Cybersecurity, a specialisation in Artificial Intelligence and Biometrics in Blockchain, and a specialisation in Smart Contracts. He is also a certified PRINCE 2 project manager.

Giulia Finocchiaro is Cybersecurity Adviser at ICT Legal Consulting and ICT Cyber Consulting. She is a lawyer with a broad legal background, and is a qualified auditor/lead auditor ISO/ IEC 27001 and ISO 22301. After

Luca Bolognini is a prominent privacy and data protection attorney, admitted to the Italian Supreme Court and founding partner of ICT Legal Consulting. He serves as President of the Italian Institute for Privacy and

graduating in Law, she obtained a diploma from the School of Specialisation for the Legal Professions, which further refined her legal skills. She obtained a master’s degree in Cybersecurity Culture and Governance from the University of Catania, which deepened her knowledge of the sector. She is also actively involved in research activities, demonstrating her commitment to the advancement of cybersecurity and data protection.

Data Valorisation, co-founded several cybersecurity ventures, and directs Giuffrè Francis Lefebvre’s “IUS Privacy Portal”. Recognised internationally by Chambers Europe, Luca frequently contributes to European research initiatives, teaches at numerous prestigious universities, and actively publishes influential works addressing privacy, data protection, cybersecurity, artificial intelligence and digital innovation. His extensive scholarship emphasises balancing technological advancement with robust legal and ethical frameworks.

213 CHAMBERS.COM

Powered by