Skip to main page content

Francesca Gaudino

Partner
Baker McKenzie
Participates in 1 Session

Francesca Gaudino is the Head of the Data Privacy and Cyber practice of Baker McKenzie in Italy.
Francesca works in the IT/C practice group since she joined the firm, specializing in the area of data protection and security, with specific attention to legal issues emerging in use of cutting-edge technologies. She assists clients in a full range of data protection and cyber related matters, including: data governance, education and training, adoption of devoted e-tools for HR management and reporting, critical personal data processing (i.e. biometric data, health data, profiling and targeting), transfer-border data flows, multi-jurisdictional platforms, social networks, cloud based and IT outsourcing deals. She also advice clients on the EU legislative scenario impacting data and technology, such as AI governance projects, compliance with the Data Act and Data Governance Act.
Francesca also advice clients on cyber matters, from setting up of incident response strategies to audits and governance projects.
Francesca provides advisory and also contentious advice, representing clients in front of the Italian Data Protection Authority and civil Courts.
Francesca is a regular contributor on international reviews and routinely holds lectures at University post-graduate courses; she regularly speaks at national and international conferences and workshops on data protection and cyber issues.

Sessions in which Francesca Gaudino participates

Thursday 15 May, 2025

Time Zone: (GMT+01:00) Rome
3:00 PM
3:00 PM - 4:00 PM | 1 hour
Health and Medical Data Compliance
Artificial IntelligenceInnovative TechnologiesData regulation in practiceInterpretation available

This session will cover the legal implications and real-world use cases of anonymization, pseudonymization, and synthetic data. From enabling secure data sharing for research and ensuring compliance in clinical trials, the panel will dive into how some techniques can help meet privacy requirements while still fostering scientific progress.  Key questions 

Sessions in which Francesca Gaudino attends

Monday 12 May, 2025

Time Zone: (GMT+01:00) Rome
9:30 AM
9:30 AM - 10:30 AM | 1 hour
AI and Compliance
Artificial IntelligenceRegulatory evolutionInnovative TechnologiesInterpretation available

Discussions surrounding the interplay of AI and Data Protection Laws will reveal how academics and practitioners from around the world manage the intersectionality of these laws. How do data protection laws and emerging AI intersect, and how do they complement each other? If you’re a privacy professional, legal expert, AI developer, or policymaker, this is your must-attend session, as it will feature professionals from Google, EDRI, DG Justice, a...

10:30 AM
10:30 AM - 11:00 AM | 30 minutes
11:00 AM
11:00 AM - 12:00 PM | 1 hour
Research and Innovation

This panel will explore the new era of data governance, emphasising the importance of building simplified programs that inspire trust. It will take a holistic approach to data, privacy, cybersecurity, and artificial intelligence, incorporating global laws, regulations, and emerging trends. The discussion will highlight the secular nature of global laws, data sovereignty, restrictions on data transfers, and data minimization.  

11:00 AM - 11:40 AM | 40 minutes
AI and Compliance
Artificial IntelligenceRegulatory evolutionInnovative TechnologiesEnforcementInterpretation available

Generative AI development and deployment is exploding, but the recent EDPB Opinion 28/2024 and early enforcement actions (notably the fine against OpenAI by the Garante in Italy) signal that compliance with the GDPR must be taken seriously from the outset. Against this backdrop, our panel will explore how to build trust and avoid pitfalls when developing and deploying LLMs in Europe. We’ll examine the evolving legal landscape—and whether it leaves enough room for meaningful innovation....

11:40 AM
11:40 AM - 12:20 PM | 40 minutes
AI and Compliance
Artificial IntelligenceRegulatory evolutionInnovative TechnologiesInterpretation available

This enriching session will shed light on the consequences of data scraping in regard to privacy and intellectual property rights. Data scraping refers to the automated extraction of data from websites, APIs, and other online sources, which consequently raises questions surrounding the secondary uses of such data. Attendees of this session will have the opportunity to hear from several European and global authorities on how they perceive and addr...

12:00 PM
12:00 PM - 1:00 PM | 1 hour
Research and Innovation
Innovative TechnologiesData regulation in practice

This session will explore how to design data spaces that aren’t just legally compliant but also fundamentally structured around privacy, security, and trust. By embedding compliance in the core of data infrastructure design, we can move beyond reactive measures and create environments that foster confidence and cooperation.  Key questions 

12:00 PM - 1:00 PM | 1 hour
Data Protection in Italy
Session in ItalianCybersecurity

Il panel moderato dall’Avv. Cataleta Il panorama normativo cybersecurity e l’impatto sulle organizzazioni copre diversi aspetti relativi alla cybersecurity e non solo. L’obiettivo del panel è attuare delle riflessioni critiche su:  scenario della severity degli attacchi cyber e panoramica nel settore manufacturing. Riflessioni sulla corrispondenza tra spesa in cybersecurity e numero degli attacchi e analisi dei rischi derivanti dall’esternalizzazione della ...

12:20 PM
12:20 PM - 1:00 PM | 40 minutes
AI and Compliance
Artificial IntelligenceInternational CooperationRegulatory evolutionInnovative TechnologiesInterpretation available

As AI usage seems to proliferate, international regulations may be the way to go to develop cross-border compliance and cooperation. Featuring representatives from both sides of the Atlantic, as well as renowned global think tanks, this session will discuss how organizations can effectively align themselves with international regulations to achieve convergence and interoperability.  ...

1:00 PM
1:00 PM - 2:00 PM | 1 hour
2:00 PM
2:00 PM - 3:00 PM | 1 hour
Making Data Secure
CybersecurityArtificial IntelligenceRegulatory evolutionData regulation in practiceInterpretation available

This panel focuses on integrating the new cybersecurity obligations introduced by the NIS 2 Directive with the GDPR’s existing requirements for data integrity and confidentiality. 

3:00 PM
3:00 PM - 4:00 PM | 1 hour
Making Data Secure
CybersecurityRegulatory evolutionData regulation in practice

The Cyber Resilience Act (CRA) sets obligatory requirements for hardware and software products as well as infrastructure, aiming to guarantee high standards of security for all items connected to the internet. This session brings together experts to explore the CRA’s real-world implications, shedding light on the challenges, opportunities, and urgent questions surrounding cyber resilience. 

4:00 PM
4:00 PM - 4:30 PM | 30 minutes
4:30 PM
4:30 PM - 5:15 PM | 45 minutes
Making Data Secure
CybersecurityInnovative TechnologiesInterpretation available

In this insightful session, experts and professionals in the field will delve into the realm of post-quantum cryptography, exploring how we can strengthen data protection strategies and secure digital infrastructure against emerging threats. The panel will share thoughts on the potential risks and how new approaches are being developed.  Key questions 

5:15 PM
5:15 PM - 6:15 PM | 1 hour
AI and ComplianceData Protection Certification
Artificial IntelligenceCertificationInnovative TechnologiesInterpretation available

AI systems are becoming more integrated into critical decision-making processes, which makes questions of liability and accountability more pressing than ever. If an AI-based decision goes wrong, who is responsible? This session will unite experts from Meta, Italian Institute for Privacy and Data Valorisation, AI Law Tech Institute, SGS, and CNPD to explore the evolving frameworks for AI liability and the role of certification in building respons...

5:15 PM - 6:00 PM | 45 minutes
Making Data Secure
CybersecurityInnovative TechnologiesInterpretation available

Cyber threats are evolving at an unprecedented pace, which makes AI and machine learning essential tools in the fight against cybercrime, by enabling faster threat detection, automated responses, and predictive defense strategies. However, with these advancements come new challenges. The panel of this session will explore the future of AI-driven defense and what it means for privacy, security, and resilience.  

6:30 PM
6:30 PM - 7:30 PM | 1 hour
Social Events

We will inaugurate the fourth edition of the Privacy Symposium at the Official Welcome Reception. This event marks the beginning of a week rich in insightful discussions and open exchange, set in the inspiring atmosphere of Venice. Guests will have the opportunity to admire the remarkable works of Tintoretto, one of the city’s most celebrated painters, while connecting with professionals from diverse backgrounds and engaging in fruitful discussions. The evening will be enriched by...

Tuesday 13 May, 2025

Time Zone: (GMT+01:00) Rome
9:00 AM
9:00 AM - 10:30 AM | 1 hour 30 minutes
International Cooperation
Regulatory evolutionInterpretation available

The International Cooperation track serves as platform for exchanging ideas, building meaningful partnerships, and exploring innovative solutions beyond borders and across various disciplines. This session opens with an insightful discussion featuring an esteemed panel of high-level speakers and experts, such as the Secretary General of the Inter Parliamentary Union, U.N.

9:00 AM - 10:30 AM | 1 hour 30 minutes
Deep Dive In
Artificial IntelligenceRegulatory evolutionInnovative Technologies

This exclusive 2-hour session equips regulators with essential AI knowledge for effective oversight. A seasoned AI-focused leader and two technical experts will offer concise explanations of fundamental concepts—from how AI processes data (tokenization, vectorization) to advanced applications (transformers, retrieval-augmented generation, agents). Attendees will explore synthetic data’s privacy implications, AI/ML security threats (e.g., data poi...

10:30 AM
10:30 AM - 11:00 AM | 30 minutes
11:00 AM
11:00 AM - 1:00 PM | 2 hours
Deep Dive In
Deep dive in and capacity building
11:00 AM - 12:00 PM | 1 hour
Socio-economic Perspective
Certification

The purpose of the panel is to discuss transparency requirements in the digital data economy, and its benefits. The discussion will focus on the different recipients of transparency (individuals, companies, regulators), the different means (notices, company reporting, certification, KPIs) and how it impacts sustainability/ data responsibility in the age of AI.

11:00 AM - 12:00 PM | 1 hour
Technology and Compliance
Innovative TechnologiesData regulation in practiceFundamental rights

In this thought-provoking session, the panel will dive into the intriguing world of neuro privacy. As breakthroughs in neuroscience offer unprecedented insights into the human brain, important ethical questions arise regarding the collection, use, and potential misuse of neural data. The speakers will explore the intersection between neuroscience, privacy, and fundamental human rights, while focusing on the emerging challenges and potential solut...

11:00 AM - 12:00 PM | 1 hour
Data Protection in Italy
Session in ItalianArtificial Intelligence
11:50 AM
11:50 AM - 12:40 PM | 50 minutes
International Cooperation
Data regulation in practiceCross-border data transfersEnforcementInterpretation available

Standard Contractual Clauses (SCCs) have long been a go-to mechanism for ensuring compliance, but as different jurisdictions update their frameworks, the landscape is shifting fast. SCCs are defined as standardized clauses that allow data transfers outside of the European Economic Area. This insightful session explores the latest developments in SCCs across EU and beyond, with a special focus on the path towards in...

12:00 PM
12:00 PM - 1:00 PM | 1 hour
Data Protection in Italy
Session in ItalianData regulation in practiceInterpretation available
1:00 PM
1:00 PM - 2:00 PM | 1 hour
2:00 PM
2:00 PM - 4:00 PM | 2 hours
Deep Dive In
Deep dive in and capacity buildingInternational CooperationSocio-economic perspectiveEnforcement

While the EU has set a global benchmark with GDPR, effective privacy enforcement requires collaboration beyond its member states. This simply means that privacy doesn’t stop at borders, and neither should data protection. European Data Protection Authorities face growing challenges in aligning regulations, sharing strategies, and tackling cross-border data transfers with non-EU countries. This session brings together data protection professionals...

2:00 PM - 3:00 PM | 1 hour
International Cooperation
Data regulation in practiceInterpretation available

While regulators worldwide are fighting the same battles, too often they’re doing it in isolation. This session brings together industry experts and distinguished officials from EDPS, Dutch Data Protection Authority, Office of the Privacy Commissioner of Canada, and US Department of Justice. Attendees will learn about the real challenges of cross-border privacy enforcement and explore the ways in which regulators can work together to turn fragmen...

3:00 PM
3:00 PM - 4:00 PM | 1 hour
Data Protection in Italy
Session in ItalianArtificial IntelligenceInterpretation available
4:00 PM
4:00 PM - 4:30 PM | 30 minutes
4:30 PM
4:30 PM - 5:15 PM | 45 minutes
International Cooperation
Regulatory evolutionInterpretation available

From GDPR to emerging AI regulations, organizations must navigate complex frameworks while ensuring seamless data flows across borders. This session will bring together experts to discuss practical strategies for overcoming regulatory conflicts, enabling responsible data practices, and fostering global cooperation. Key questions 

4:30 PM - 5:30 PM | 1 hour
Data Protection in Italy
Session in ItalianData regulation in practiceEnforcementInterpretation available
5:00 PM
5:00 PM - 6:00 PM | 1 hour
Technology and Compliance
Innovative TechnologiesRegulatory evolutionDeep dive in and capacity building

The last few years have seen a significant increase in digital solutions that support privacy friendly electronic identification and authentication: mobile identity wallets, zero knowledge proofs, verifiable credentials, age assurance applications, and so forth. Legislators are also increasing their support for these solutions. But are they actually trustworthy from a privacy perspective? This session will explore the potential, and the pitf...

5:30 PM
5:30 PM - 6:15 PM | 45 minutes
Data Protection in Italy
Session in ItalianInterpretation available
6:00 PM
6:00 PM - 7:30 PM | 1 hour 30 minutes
Social Events

After a productive day of engaging sessions, what better way to refresh than by enjoying a traditional Aperol Spritz at the Privacy Professionals’ Meet-up? Join us for a relaxed evening of conversation and connection over this iconic Italian cocktail. It’s a unique opportunity to get to know other participants of the Privacy Symposium, while enjoying a taste of the dolce vita in true Venetian style.

Wednesday 14 May, 2025

Time Zone: (GMT+01:00) Rome
9:00 AM
9:00 AM - 9:45 AM | 45 minutes
Data Protection in Italy
Session in ItalianArtificial IntelligenceInternational CooperationRegulatory evolutionSocio-economic perspectiveFundamental rightsInterpretation available
9:45 AM
9:45 AM - 10:30 AM | 45 minutes
Data Protection in Italy
Session in ItalianArtificial IntelligenceData regulation in practiceEnforcementInterpretation available
10:30 AM
10:30 AM - 11:00 AM | 30 minutes
11:00 AM
11:00 AM - 12:00 PM | 1 hour
International Cooperation
Regulatory evolutionData regulation in practice

Europe’s data regulations are very intricate to form the whole picture, which means that each piece is essential, yet constantly shifting. The Data Act, Data Governance Act and GDPR are not isolated frameworks; they are deeply intertwined to shape the way we interact with the digital reality. This session unites esteemed professionals and officials from Euroconsumers, DG Justice, DG Connect, and Lativia DPA, diving beyond the legal aspect to unco...

12:00 PM
12:00 PM - 1:00 PM | 1 hour
Data Regulations in Practice
Cross-border data transfers

With international data transfers under increasing regulatory and judicial scrutiny, organizations must adapt to evolving compliance challenges. From the European General Court’s ruling in Bindl v Commission to ongoing discussions around the EU-US Data Privacy Framework, the need for redundancy in GDPR transfer tools to avoid overreliance on a single transfer mechanism is crucial. This panel will explore key legal developments, risks, and ...

1:00 PM
1:00 PM - 1:30 PM | 30 minutes
Exhibition Area

A dedicated meeting to exchange knowledge and showcase innovative approaches to privacy and compliance, bringing together esteemed authorities, organisations, and research projects. It offers a unique opportunity to explore and engage with practical resources, including tools designed to support compliance with data protection regulations.The Exhibition Area will be held in the Atrium of the Scuola Grande di San Giovanni Evangelista and will be accessible the whole week ...

1:00 PM - 2:00 PM | 1 hour
2:00 PM
2:00 PM - 3:00 PM | 1 hour
Data Regulations in Practice
Artificial IntelligenceCross-border data transfers

Explore the critical issues shaping HR data privacy in the age of AI. This panel of government and legal experts will address the complexities of cross-border data flows, emerging compliance requirements, and the implications of AI for human resources data. Discover strategies for fostering international cooperation and ensuring robust employee data protection in a rapidly evolving regulatory landscape. 

2:00 PM - 4:00 PM | 2 hours
Deep Dive In
CybersecurityDeep dive in and capacity building

Imagine this: A multinational company grappling with an unexpected ransomware attack. Stakeholders are on edge, the clock is ticking, and swift decisions are paramount. This isn’t just a test of your expertise, but also a measure of how well you can handle pressure, make crucial decisions with your team, and lead during chaos. This two times award finalist service (Finnish Comms Awards 2025 and 2025 SABRE EMEA ...

2:00 PM - 3:00 PM | 1 hour
Data Protection in Italy
Session in ItalianArtificial IntelligenceSocio-economic perspectiveInterpretation available
4:00 PM
4:00 PM - 4:30 PM | 30 minutes
4:30 PM
4:30 PM - 5:30 PM | 1 hour
Data Protection in Italy
Session in ItalianData regulation in practiceInterpretation available

Il settore della ricerca è probabilmente quello che oggi è più in fermento. Molte sono le novità normative, sia a livello europeo che a livello nazionale;  alcune sono già state pubblicate, altre invece stanno completando il loro iter approvativo. Le Regole Deontologiche per i trattamenti a  fini statistici e di ricerca scientifica si trovano davvero in mezzo al guado e potrebbero correre il rischio di “nascere già vecchie”.In  questo panel, a...

5:15 PM
5:15 PM - 6:00 PM | 45 minutes
Data Regulations in Practice
Artificial IntelligenceCybersecurity

This expert panel will delve into the multifaceted challenges surrounding cybersecurity and privacy incident management, as well as personal data breaches within the European regulatory landscape. With contributions from industry leaders, privacy professionals, and regulators, the discussion will highlight the interplay between key regulations such as the GDPR and the NIS 2 Directive, emphasizing their evolution in the context of AI systems and m...

6:00 PM
6:00 PM - 7:30 PM | 1 hour 30 minutes
Social Events

Marking the halfway point of the conference, have a relaxing evening at the Privacy Professionals’ Meet-up.  Enjoy a refreshing spritz while engaging with other privacy experts. After a productive day of sessions, this is an excellent occasion to meet with other participants and speakers, resume discussions, and enjoy a relaxing evening.

Thursday 15 May, 2025

Time Zone: (GMT+01:00) Rome
9:00 AM
9:00 AM - 9:45 AM | 45 minutes
Data Protection in Italy
Session in ItalianCertificationInterpretation available
9:20 AM
9:20 AM - 10:30 AM | 1 hour 10 minutes
Health and Medical Data Compliance
Regulatory evolutionInnovative TechnologiesData regulation in practiceInterpretation available

This session will welcome industry professionals to explore the adoption of the European Health Data Space (EHDS) regulation and its impact on obligations and compliance requirements. Drawing on the panel's insights, the discussion will cover the practical aspects of implementing EHDS, while also addressing the challenges and opportunities it presents.  Key questions 

9:45 AM
9:45 AM - 10:30 AM | 45 minutes
Data Protection in Italy
Session in ItalianData regulation in practiceInterpretation available
10:30 AM
10:30 AM - 11:00 AM | 30 minutes
11:00 AM
11:00 AM - 12:15 PM | 1 hour 15 minutes
Health and Medical Data Compliance
Regulatory evolutionData regulation in practiceInterpretation available

In pursuit of medical breakthroughs, data is considered a goldmine. At the same time, accessing medical data should not come at the expense of crossing legal and ethical lines. This session will tackle one of the most important issues in medical research today: the lawful use of patient data for secondary purposes like advancing scientific discovery and healthcare innovation. The distinguished panel of this session will explore the complex questi...

12:15 PM
12:15 PM - 1:00 PM | 45 minutes
Health and Medical Data Compliance
International CooperationRegulatory evolutionData regulation in practiceCross-border data transfersInterpretation available

Medical research often relies on accessing large and diverse datasets from different regions to ensure the results are comprehensive and unbiased. This session will explore the opportunities, needs, and challenges involved in sharing medical data across borders. The European Health Data Space (EHDS) offers a framework to enable such international collaboration, but how does it function in practice? What are the potential constraints in other juri...

1:00 PM
1:00 PM - 2:00 PM | 1 hour
4:00 PM
4:00 PM - 4:30 PM | 30 minutes