Compliance, Data Protection & Cybersecurity

CBA advises clients on compliance, privacy, data protection and cybersecurity matters, supporting companies and corporate groups, including those operating in regulated sectors, in the design and implementation of effective governance, internal control and risk management systems.

In particular, the team assists clients with day-to-day compliance activities (including the adoption and updating of organisational models, the development of internal procedures and security measures, impact assessments, gap analyses, and training and awareness programmes), as well as in extraordinary transactions and, more broadly, in all compliance-related matters. This includes, in particular, organisational, management and control models pursuant to Legislative Decree 231/2001 (“231 Models”), corporate compliance frameworks, and, more generally, sustainability and ESG (environmental, social and governance) compliance.

The professionals advise both Italian and multinational clients across all commercial and industrial sectors, including regulated and data-sensitive industries (such as financial services, banking, insurance and healthcare), as well as on all matters related to the use of new technologies, including e-commerce, mobile applications, fintech platforms and artificial intelligence systems.

The practice adopts a multidisciplinary, risk-based approach, supporting management in the development of governance and control models that are effective, sustainable and aligned with international best practices.
The team also provides assistance in pre-litigation and litigation proceedings before competent authorities and courts, in relation to key compliance, privacy, data protection and cybersecurity matters.

Team of Compliance, Data Protection & Cybersecurity

Articles

2026

Press reviews

The irreplaceable supplier: the new cyber risk companies are overlooking
Read more
2026

Press releases

CBA strengthens its Compliance, Data Protection & Cybersecurity practice with the addition of Riccardo Guarino
Read more
2026

Press reviews

Terzo Millennio: Automated decision-making and legal liability
Read more
2026

Press reviews

US visas and social media profiles: Trump challenges the GDPR
Read more
2026

Press reviews

Data Act and GDPR: managing mixed datasets in the IoT
Read more
2025

Press reviews

Digital Omnibus: redefining personal data governance between simplification and AI
Read more
2025

Press releases

CBA advises F&P Equity Partners on the acquisition of Nachmann
Read more
2025

Press reviews

NIS2 Compliance, Cybersecurity and Energy: current landscape and next steps
Read more
2025

Press reviews

Data Act: key innovations introduced by the Regulation
Read more
2025

Press reviews

Antiriciclaggio, le tecnologie danno supporto agli studi legali
Read more

Technical content and books

2026

Technical contributions

Digital Services Act focus on AliExpress’s compliance obligations and remediation plan
read more
2026

Technical contributions

The Agrisud judgment and the future of tax inspection powers in Italy
read more
2025

Technical contributions

Italian DSA on AI and social platforms
read more
2025

Technical contributions

Kiss Cam at a concert: a case under the European General Data Protection Regulation (GDPR)
read more
2023

Technical contributions

The perils of artificial intelligence: Data Protection Authority blocks ChatGPT
read more

THIS WEBSITE IS ECO-SUSTAINABLE AND REDUCES THE IMPACT OF CO2 IN THE ATMOSPHERE
Here’s an estimate of our emissions in real time

© 2026
ITA
envelopephone-handsetmagnifiercrosschevron-downchevron-leftchevron-right linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram