Practice

Tech, AI, Data & IP

We advise technology companies, industrial groups, digital platforms and SaaS providers on AI governance, data protection, intellectual property and technology contracts, within a fast-evolving European regulatory framework.

What we do

AI Act and Italian Law 132/2025 compliance
GDPR compliance, DPIAs, data breach management
Cross-border data transfers and Schrems II
Trademarks, patents, trade secrets and IP litigation
SaaS, cloud, licensing and open source agreements
DSA, DMA and Data Act compliance
NIS2 and cybersecurity incident management

Service pillars

AI Act and AI governance

Classification of AI systems (prohibited, high-risk, limited risk, GPAI), obligations for providers and deployers under Regulation (EU) 2024/1689, oversight of AgID, ACN and the fundamental rights authority under Italian Law 132/2025, AI literacy under Article 4 AI Act, conformity assessment and declarations of conformity.

GDPR and personal data protection

DPIAs, records of processing, controller, joint controller and processor roles, Article 28 GDPR contracts, data breach management, Italian Data Protection Authority sanctions, lawyers' professional secrecy and the Italian Garante guidance on law firms.

Cross-border data transfers

2021 Standard Contractual Clauses, Transfer Impact Assessment post-Schrems II, EU-US Data Privacy Framework, BCRs and Article 49 GDPR derogations, mapping of intra-group and cloud provider flows.

Intellectual property

Trademarks, patents, designs, copyright and neighbouring rights, trade secrets (Legislative Decree 63/2018), licensing, assignments and IP franchising, strategic protection and IP litigation, IP aspects of M&A and financing transactions.

SaaS, cloud and software licensing

Master service agreements, SLAs, data processing agreements, exit plans, portability, multi-tenant vs single-tenant architectures, EULAs, software development agreements, open source compliance, audit and benchmarking.

DSA, DMA and Data Act

Obligations for online platforms, marketplaces and VLOPs/VLOSEs under Regulation (EU) 2022/2065 (DSA), gatekeeper obligations under Regulation (EU) 2022/1925 (DMA), data access and sharing under Regulation (EU) 2023/2854 (Data Act).

Cybersecurity and NIS2

Implementation of Legislative Decree 138/2024 transposing the NIS2 Directive, scope of essential and important entities, security measures, significant incident notification to ACN, governance and management body liability.

Regulatory framework

Regulatory framework. Regulation (EU) 2016/679 (GDPR), Legislative Decree 196/2003 (Italian Privacy Code), Italian AI Law 132/2025, Regulation (EU) 2024/1689 (AI Act), Regulation (EU) 2022/2065 (DSA), Regulation (EU) 2022/1925 (DMA), Regulation (EU) 2023/2854 (Data Act), Directive (EU) 2022/2555 (NIS2) and Legislative Decree 138/2024 transposition, Legislative Decree 30/2005 (Italian IP Code), Law 633/1941 (Italian Copyright Law), Legislative Decree 63/2018 (trade secrets).