Data Protection

Cugia Cuomo & Associati provides regulatory assistance in the area of privacy and data security. The firm, in particular, regularly advises electronic communications operators, including internet content providers, broadcasting companies, private entities that process personal data within the framework of information systems used for the purposes of consumer credit and/or concern reliability and timeliness of payments and/or commercial information, referring to the implementation of the security measures for the protection of personal data, conducting activities' of:

 

GDPR Compliance

  •  General Data Protection Regulation  (GDPR) and Italian Data Protection Code compliance check;
  • GDPR Compliance traning;
  • Draft of Data Protection Impact Assessment (DPIA);
  • Assistance on information and data subject rights;
  • Assistance on General Obligations of Controller and Processor;
  • Assistance on implementation of appropriate technical and organisational measures to ensure a level of security appropriate to the risk;
  • Advice on notification of data breach to the authorities and consumers, implementation of data retention policies in the IT industry, policies, including procedures for access to personal data of users,
  • Appointments of Data Processor, person in charge of processing , System Administrator figures, and Data Processor Officers;
  • Advice on records of processing activities;
  • Analysis of the network architecture and the security measures;
  • Advice on transfers of personal data to third countries or international organisations;
  • Advice on Binding corporate rules;
  • Compliance with call center regulation;
  • Drafting and / or review of company privacy policies,
  • Drafting and / or review of privacy and cookies policies on the website;
  • Drafting of models of agreement to the privacy policies, also in relation to commercial and advertising activities
  • Drafting or review of standard of written statement related to the consent of the data subject's agreement to the processing of personal data relating to him or her;
  • Assistance related to Obligations Applying to Providers of Publicly Available Electronic Communications Services
  • Compliance of IT databases for the filing of traffic and personal data;
  • Definition of minimum standards of data processing (strong authentication, logging, remote administration, etc.)
  •  Compliance with rules applicable to the data retention;

GDPR Litigation

  • Assistance in case of litigation both in front of the ordinary Courts and of the Special Authorities

DPO as a service (GDPR)

Companies may appoint an external Data Protection Officer, which has expertice in privacy law. In this regard, The Firm  provides our Clients with DPO service in order to allow such companies to be assisted by our team of professionals on GDPR matters. 

*

The Firm has also a deep knowledge of IT sector specific privacy regulations, particularly as mobile communications are concerned, as, for instance, regarding matters of:

  • IoT and M2M;
  • users geo-localization
  • users profiling for marketing purposes;
  • legal profiles relating to chronologic and typing-related web searches
  • definition of actors responsibilities in relation to IT products (telecoms operator, application developer, software developer, content provider, advertiser)

 

Firm news

apr15

15/04/2025

Prolonged inaction by Italian State on widespread dumping put Terra dei Fuochi residents’ lives at risk

On January 30, 2025, the European Court of Human Rights issued its  judgment1 in the case of Cannavacciuolo and Others v. Italy (applications nos. 51567/14 and three others) stating that there had

apr15

15/04/2025

Identificazione e analisi dei mercati della terminazione delle chiamate vocali su rete mobile

La delibera 77/25/cons conclude il procedimento istruttorio concernente il VI ciclo di analisi dei mercati dei servizi di terminazione delle chiamate vocali su rete mobile, avviato con delibera n. 46/24/CONS.

apr15

15/04/2025

Approvazione dell’istanza di revisione del Listino dei servizi di accesso all’ingrosso forniti tramite le nuove infrastrutture mobili di cui al Piano Italia 5G dal Raggruppamento Temporaneo di Imprese (costituito da Infrastrutture Wireless Italiane S.p.A.

Con la delibera n. 78/25/CONS, Agcom ha approvato, ai sensi delle delibere n. 67/22/CONS e n. 26/23/CONS e sulla base dei criteri di equità e ragionevolezza, nel rispetto di quanto indicato nei

Lawyer News

mag1

01/05/2025

Statuto dei lavoratori

Testo della Legge 20 maggio 1970, n. 300

apr30

30/04/2025

Conclave: il caso del Cardinale Becciu

La sua rinuncia al voto ha posto fine al

apr30

30/04/2025

Magistratura onoraria, modifiche operative dal 1° maggio

La riforma in G.U.: limite di durata del