Data Protection services for specific sectors

Business processes and workflows are increasingly characterized by digital transformation, which also represents a powerful competitive lever in the market.

However these changes often pose specific privacy risks.

We offer a series of vertical services in our areas of specific competence, through feasibility studies, privacy risk analysis, impact assessments and legal opinions to support company initiatives.


Contact us for more information

e-Health sector

In the digital health area we have gained specific experience in:

  1. telemedicine processes, Patient Support Program, data transmission via APP, IoE / Smart, implementation of diagnostic and treatment processes in the public and private sectors, use of innovative technologies
  2. data management in clinical trials, clinical investigations for MD, use of data in scientific research and in the Real World Data
  3. analysis of data transmission and identification of privacy roles in innovative processes in the health sector, such as relationships with public and private health companies, medical groups, pharmacies and insurance funds
  4. processing of genetic data, use for research purposes and extra-EU transfers
  5. processing of personal data by interconnection, combination or comparison of information; data processing in artificial intelligence software and in the context of Big Data
  6. non-EU data transfers and intra-group flows of personal data (Article 47 GDPR-Binding Corporate Rules);


Medical Devices Sector

Compliance with the GDPR intersects with the application of the new EU Reg. 2017/745 on Medical Devices.

The particular experience that our law firm has in both disciplines and our tight-knit multidisciplinary team allow us to provide comprehensive assistance and advice to reach compliance with both regulations, covering the technological/ IT aspects, as well as the legal ones.

In particular, we perform analyses and reports in the area of privacy by design and by default for:

  1. application software
  2. apps, medical device software and IVDs
  3. assistance in drafting instructions and complementary measures for the organisational structure that uses them
  4. mobile software platform for telemedicine
  5. Web platform for interacting with users (including e-commerce and others)
  6. wireless software platforms for the Internet of Everything


Marketing Area

Marketing advertising undoubtedly represents a constantly evolving sector. In this regard, we have specific expertise in managing:

  1. processing activities that involve a systematic use of data for the observation, monitoring or control of data subjects
  2. websites and social networks
  3. data processing in marketing advertising
  4. development of commercial practices through data profiling and use of data (fidelity card etc.)

Human Resources Area

Technological innovation is having a significant impact on the management of human resources and the organisation of data, intersecting with the delicate issues of compliance with the Workers' Statute. The presence of a labor law lawyer allows us to offer specific assistance in the:

  1. processes for the evaluation and monitoring of the performance and behavior of employees and users
  2. use of biometrics
  3. business organization processes using BYOD (Bring Your Own Device)
  4. innovative technologies applied to employment contracts
  5. data collection and processing with the use of drones


Procurement Sector

We also provide specific assistance for:

  1. tender procedures for the purchase of software (declaration of compliance with the GDPR)
  2. tender procedures, for the implementation of services using innovative technologies (that have specific privacy aspects to be analysed)
  3. presentation of feasibility projects for innovative public-private partnership models
  4. identification of privacy profiles and management of relations with the PA particularly in service contracts.


Criminal Law Area

  1. assistance in the preparation of company policies for the prevention of risks and crimes in the IT area
  2. advice on the modification of the organisational and management models (according to Leg. Decree 2001/231) to make them compliant with the new GDPR discipline
  3. training in the company and via webiner in order to make staff aware of IT risks
  4. creation of models pursuant to Leg. Decree 2001/231, aimed at preventing IT crimes
  5. judicial legal assistance in criminal proceedings or administrative litigation in the computer crimes field