Data Protection and Privacy 2026

ITALY Law and Practice Contributed by: Paolo Balboni, Luca Bolognini, Nicolò Maria Salvi and Davide Baldini, ICT Legal Consulting

ICT Legal Consulting (ICTLC) is an international law firm that provides strategic legal and regulatory sup - port across privacy, data protection, intellectual prop - erty, and technology, media and telecommunications (TMT) law, with a strong focus on the normative and operational aspects of cybersecurity. The firm assists organisations in designing and implementing govern - ance, compliance and security frameworks that meet the highest international standards. With over 80 pro - fessionals and a network active in more than 65 juris -

dictions, ICTLC combines global co-ordination with local insight. Through its sister company ICT Cyber Consulting, the firm offers integrated cybersecurity services, including legal-technical risk assessments, resilience planning, and alignment with frameworks such as NIS2, DORA and the Cyber Resilience Act. ICTLC’s multidisciplinary expertise enables clients to navigate complex digital regulations and strengthen trust, compliance and resilience across their global operations.

Authors

Paolo Balboni is a leading European ICT, privacy and cybersecurity lawyer, serving as the Data Protection Officer for multinational companies. Admitted to the Milan and Amsterdam Bars, he is founding partner of ICT Legal Consulting and ICT Cyber Consulting. He advises on legal matters involving data protection, cybersecurity, AI, IoT, IT contracts and digital regulation. Paolo is a professor at Maastricht University, and holds positions with the EPO and European Commission expert groups. He is a published author and frequent keynote speaker. His expertise spans multiple sectors, and he has contributed to key EU regulatory frameworks, including the GDPR and cloud data protection codes.

Nicolò Maria Salvi has been advising on personal data protection and ICT law since 2017, with a focus on data

protection compliance and legal issues related to the use of new technologies. He is a partner at ICT Legal Consulting, a certified Data Protection Officer and a certified auditor under the Europrivacy certification scheme. He holds a master’s degree in Data Protection and Data Protection Design, and is enrolled in the Register of the Italian Institute for Privacy and Data Valorisation. He also serves as assistant professor in Constitutional and Media Law at LUISS Guido Carli University.

Davide Baldini is a lawyer and managing partner of ICT Legal Consulting. He advises multinational companies and innovative start-ups on data protection and IT contracts. He is a qualified Data Protection

Luca Bolognini is a prominent privacy and data protection attorney, admitted to the Italian Supreme Court, and is founding partner of ICT Legal Consulting. He serves as President of the Italian Institute for

Officer (ECPC-B) from Maastricht University, and a certified auditor for the Cloud Security Alliance Code of Conduct and the Europrivacy Certification Scheme. He is the author of several essays and articles for legal blogs and top-tier law journals. He is a PhD candidate in International and European Law at the University of Florence, where he is working on artificial intelligence and algorithmic discrimination.

Privacy and Data Valorisation, co-founded several cybersecurity ventures, and directs Giuffrè Francis Lefebvre’s “IUS Privacy Portal”. Recognised internationally by Chambers Europe, Luca frequently contributes to European research initiatives, teaches at numerous prestigious universities, and actively publishes influential works addressing privacy, data protection, cybersecurity, artificial intelligence and digital innovation. His extensive scholarship emphasises balancing technological advancement with robust legal and ethical frameworks.

199 CHAMBERS.COM

Powered by