Skip to main page content

Luca Bolognini

He/Him

President
Istituto Italiano per la Privacy e la Valorizzazione dei Dati
Participates in 43 items

Luca BologniniPresident of the Italian Institute for Privacy and Data Valorisation (Istituto Italiano per la Privacy e la Valorizzazione dei Dati), founded in 2008. Luca is an attorney-at-law admitted to practice before the Italian Supreme Court, a member of the Rome Bar Association and founding partner of the law firm ICT Legal Consulting with offices in Milan, Rome, Bologna, The Netherlands, Greece, Finland, Spain, France, Sweden, Nigeria, Australia, Kenya, and partner law firms in other 56 countries. Leading Individual Data Privacy and Data Protection The Legal 500 (Italy) 2020-21-22-23-24. Recommended Lawyer The Legal 500 EMEA 2016-2024. Chambers Europe Ranked Lawyer 2022-23-24. IAPP Member, CIPP/E and TÜV Italia Certified Privacy Officer. Co-founder and shareholder of the data compliance consulting firm ICTLC SpA and of the cybersecurity firm ICT Cyber Consulting Srl. He obtained his Law degree from the Alma Mater University of Bologna. Luca serves as an independent Ethics and Privacy Advisor for several European research and innovation projects (Horizon 2020 / Horizon Europe) and as an Expert Coach for the Executive Agency for Small & Medium-sized Enterprises (EASME) of the European Commission. In 2017, he founded the “CNAC – National Center Anti-Cyberbullying”, supported by relevant Italian and international companies and law firms. He speaks Italian and English fluently and has reasonable knowledge of Spanish. He has published studies on data protection and other legal aspects concerning Artificial Intelligence, e-Privacy, secondary use of data in the scientific research, R&D and marketing fields, Big Data, international data transfers, cloud & edge computing, Internet of Things and Industry 4.0, smart contracts, fintech, e-health, data processing liability and privacy “class actions”, right to monetize data, freedom of information, right to be forgotten, minors’ privacy, profiling, and pseudonymization for scientific journals and both national and international newspapers (including Computer Law & Security Review, Diritto Economia e Tecnologie della Privacy, Corriere della Sera, Il Sole 24 Ore, Politico, The Wall Street Journal Europe).

From 2023 to 2025, Luca Bolognini has coordinated, with Rosario Imperiali, the Scientific Committee of the Giuffrè Francis Lefebvre’s “IUS Privacy Portal” in Italy. He is co-founder of the Privacy Symposium International Conference in Venice. Luca is also a member of the Experts Board of EU-IoT and co-chair of the Europrivacy GDPR certification International Board of Senior Experts. He regularly participates as a speaker to national and international conferences (including ITU Telecom World, IoT Week, Annual Privacy Forum, Privacy Day Forum, CPDP) and radio/TV broadcasts on innovation policies matters. He has lectured at Bologna Business School ofthe University of Bologna, Scuola Superiore della Pubblica Amministrazione, CNR Pisa, Università Statale di Milano, IED, IPSOA and TÜV Sud Privacy Officer mastercourses and at several other training and higher education programs and masters in Italy. From 2010 to 2019, he has been in charge of teaching privacy law at the SSPL at the Faculty of Law of the University of Teramo, Italy. In the last 10 years, Luca’s been in charge of teaching EU data protection law at the Master in Big Data Management of LUISS Guido Carli, at the Master in cybersecurity, data protection and privacy at the University of Rome Tor Vergata, at the Master in Labour Law at the Unimercatorum, at the Master in Data Protection Officer at Politecnico di Milano, at the Master in Professionisti della digitalizzazione e della privacy at the University Unitelma Sapienza, at the Master in Intelligenza Artificiale, Diritto ed Etica Delle Tecnologie Emergenti at the Università Europea di Roma, at the “Corso Maestro Protezione Dati & Data Protection Designer®” at the Academy Istituto Italiano Privacy, at the Master in Internet Ecosystem at the University of Pisa, at the Advanced Master in Privacy, Cybersecurity and Data Management at Maastricht University, at the Master of Science in Medical Informatics at FHNW University, at the Master Course BuTH-AI (Building Trust in Human-Centric Artificial Intelligence) at Link Campus University, at the Master in Advanced Studies on the IoT at the University of Geneva, and at the Master Total Worker Health at Università Cattolica del Sacro Cuore.

Luca Bolognini’s books in the last 15 years, as editor, author or co-author: «Deontologia privacy per avvocati e investigatori privati» (privacy for lawyers and private investigators, Giuffrè, 2009); «Next Privacy» (RCS Etas, 2010); «Privacy Technologies and Policies» (chapter on IoT and 3D privacy, Springer, 2016); «Generazione Selfie» (Corriere della Sera, 2014); «Il Regolamento Privacy Europeo» (the first Italian commentary on the GDPR, Giuffrè, 2016); «La responsabilità civile nel trattamento di dati personali e per atti di cybercrime» (on personal data processing-related liability, Giuffrè Francis Lefebvre, 2018);  «Codice Privacy: tutte le novità del D.Lgs. 101/2018” (Giuffrè Francis Lefebvre, 2018); «A.I. Artificial Insanity – Reflections on the resilience of human intelligence» (Rubbettino, 2018), a pamphlet about digital rights, Big Data law and impacts of Artificial Intelligence, AR/VR and IoT on human lives; «Internet of Things Security and Data Protection» (Springer, 2019), in particular with the essays "Evolution of Data Protection Norms and Their Impact on the Internet of Things", "Voluntary Compliance Commitment Tool for European General Data Protection Regulation", "IoT and Cloud Computing: Specific Security and Data Protection Issues"; «La rappresentanza dei diritti in materia di protezione dei dati personali, tra azioni plurisoggettive e azioni collettive» in the book «Azione di classe: la riforma italiana e le prospettive europee» (essay on privacy and data protection class actions, Giappichelli, 2020); «Responsabilità, Rischio e Danno in Sanità» (chapter on privacy and data transparency in the Italian health sector, Giuffrè Francis Lefebvre, 2022). Director and author of the book «Privacy e libero mercato digitale» (Giuffrè Francis Lefebvre, 2021), on the balance and interaction between data protection and other sectoral market regulations. Author of the book «L'Arte della Privacy - Metafore sulla (non) conformità alle regole nell'era data-driven»  (Rubbettino, 2022, English edition: «The Art of Privacy – Metaphors on (non) compliance in the data-driven era», Spanish edition: «El Arte de la Privacidad – Metáforas sobre la (no) conformidad con las reglas en la era de los datos»). Director, with Enrico Pelino and Marco Scialdone, and author of the book «Digital Services Act e Digital Markets Act» (Giuffrè Francis Lefebvre, 2023). Author of the book «Diritto Dipinto - L'arte legale nel "tutto digitale"» (Rubbettino, 2023, English edition: «Painted Privacy – Legal art in the “all digital” era», 2024). Author and editor, with S. Zipponi, of the volume «Privacy e diritto dei dati sanitari» on health personal data and the European Health Data Space (Giuffrè Francis Lefebvre, 2024). Director, with Enrico Pelino, and author of the volume «Codice della Disciplina Privacy» (Giuffrè Francis Lefebvre, first edition 2019, second edition 2024) a complete commentary on the GDPR and all the Italian data protection and privacy laws

Inventor of the card game and videogame DATA! The game®”.

Some of Luca Bolognini’s open access papers: https://independent.academia.edu/LucaBolognini1

Sessions in which Luca Bolognini participates

Thursday 8 June, 2017

Time Zone: (GMT+01:00) Paris
11:30
11:30 - 12:30 | 1 hour
IoT Security & Privacy
14:00
14:00 - 15:45 | 1 hour 45 minutes
GIoTSIoT Security & Privacy
14:45
14:45 - 15:45 | 1 hour
IoT Security & Privacy
16:15
16:15 - 18:00 | 1 hour 45 minutes
GIoTSIoT Security & Privacy

Friday 9 June, 2017

Time Zone: (GMT+01:00) Paris

Tuesday 5 June, 2018

Time Zone: (GMT+01:00) Paris
14:00
14:00 - 15:00 | 1 hour
IoT and Big DataEmerging IoT Research and DevelopmentIoT Security and Data Protection

Wednesday 6 June, 2018

Time Zone: (GMT+01:00) Paris
12:00
12:00 - 13:00 | 1 hour
IoT Security and Data Protection

Thursday 20 June, 2019

Time Zone: (GMT+01:00) Paris
11:15
11:15 - 12:30 | 1 hour 15 minutes
IoT Security & Data Protection

Tuesday 31 August, 2021

Time Zone: (GMT+01:00) Paris
19:00

Wednesday 1 September, 2021

Time Zone: (GMT+01:00) Paris
10:30
10:30 - 11:30 | 1 hour

Personal data protection is a fundamental right. However, many companies routinely collect a growing number of personal data on EU residents and trade them as a commodity. The General Data Protection Regulation (GDPR) has been adopted to better protect personal data and data subjects’ rights. The strong penalties of the GDPR now constitute a strong incentive and catalyst for making data processing comply with the regulation.Several solutions are merging from the research to support ...

Tuesday 5 April, 2022

Time Zone: (GMT+01:00) Paris
14:00
14:00 - 14:20 | 20 minutes
Italian SessionsCybersecurityInnovative Technologies and Data Protection

Sessione in italiano / Session in ItalianIT:L'intelligenza artificiale pare essere pervasiva in tutte le nuove tecnologie che raccolgono e trattano dati personali, in diverse forme, a supporto delle decisioni aziendali. La valutazione della compatibilità di tali tecnologie con i diritti e le libertà fondamentali è in carico al Titolare ...

14:30
14:30 - 15:30 | 1 hour
Italian SessionsRegulatory EvolutionCybersecurityData Protection in Practice

Sessione in italiano

18:00
18:00 - 20:00 | 2 hours
Social Events

Wednesday 6 April, 2022

Time Zone: (GMT+01:00) Paris
14:00
14:00 - 15:00 | 1 hour
Innovative Technologies and Data ProtectionData Protection in PracticeRegulatory EvolutionInternational CooperationItalian Sessions

Session in English interpreted into Italian / Sessione in inglese con la traduzione in italiano

15:00
15:00 - 16:00 | 1 hour
International CooperationInnovative Technologies and Data ProtectionData Protection in PracticeCybersecurityItalian Sessions

Session in English interpreted into Italian / Sessione in inglese con la traduzione in italiano

Thursday 7 April, 2022

Time Zone: (GMT+01:00) Paris
15:00
15:00 - 16:00 | 1 hour
Data Protection in PracticeSocio-economic Perspective
17:00
17:00 - 18:00 | 1 hour
International CooperationRegulatory EvolutionCybersecurityHealth and Medical DataInnovative Technologies and Data ProtectionSocio-economic PerspectiveItalian Sessions

Session in English interpreted into Italian / Sessione in inglese con la traduzione in italiano

Tuesday 21 June, 2022

Time Zone: (GMT+01:00) Paris
14:45
14:45 - 16:00 | 1 hour 15 minutes
Data Protection, Ethics and Security in a connected world4. From Data Spaces to Data Legislation

Tuesday 18 April, 2023

Time Zone: (GMT+01:00) Paris
14:00
14:00 - 14:20 | 20 minutes
Data Protection in Italy
Socio-economic perspectiveSessions available in Italian
15:30
15:30 - 17:00 | 1 hour 30 minutes
Data Protection in Italy
Regulatory evolutionSessions available in ItalianSocio-economic perspectiveFundamental rights

Wednesday 19 April, 2023

Time Zone: (GMT+01:00) Paris
14:00
14:00 - 15:00 | 1 hour
Technology and Compliance
Innovative technologies and data protectionData protection in practice
15:00
15:00 - 16:00 | 1 hour
Accountability, Trust and PET
international cooperationRegulatory evolutionHealth and medical data Innovative technologies and data protectionSocio-economic perspectiveData protection in practiceAccountability, trust and certificationCross-border data transfers

Thursday 20 April, 2023

Time Zone: (GMT+01:00) Paris
17:00
17:00 - 18:00 | 1 hour
International Cooperation
international cooperationRegulatory evolution

Monday 10 June, 2024

Time Zone: (GMT+01:00) Paris
9:00
9:00 - 10:30 | 1 hour 30 minutes
Data Protection in Italy
Sessions available in Italian
9:00 - 9:30 | 30 minutes
Privacy and Democracy

This rich introduction to the Privacy and Democracy track represents a compelling journey into the heart of democratic values and individual privacy rights, featuring high-level speakers from the Italian Institute for Privacy and Data Valorisation and the European Centre for Certification and Privacy. 

11:00
11:00 - 12:00 | 1 hour
DPO Cooperation

Introduction The new wave of European regulations is directly impacting and redefining the role of the DPOs. In parallel, new standards are emerging to specify the qualification requirements of DPO and data protection professionals. Whether you are a DPO or a data compliance professional seeking to enhance your experience, or an organization aiming to strengthen your data protection s...

Tuesday 11 June, 2024

Time Zone: (GMT+01:00) Paris
14:00
14:00 - 14:30 | 30 minutes
Data Protection in Italy
Artificial IntelligenceSessions available in Italian
16:30
16:30 - 17:15 | 45 minutes
Socio-economic Perspective

Introduction There has been an emerging innovative approach to marketing in the digital realm that utilizes the concept of privacy by design. In this session, attendees will discover this approach, especially regarding online marketing that prioritizes user privacy from the outset. From data minimization to transparent consent mechanisms, the speakers will unveil strategies for buildi...

Wednesday 12 June, 2024

Time Zone: (GMT+01:00) Paris
9:00
9:00 - 10:00 | 1 hour
Data Protection in Italy
Socio-economic perspectiveSessions available in Italian

Thursday 13 June, 2024

Time Zone: (GMT+01:00) Paris
17:30
17:30 - 18:00 | 30 minutes
AI and Compliance
Artificial Intelligence

Introduction This session is designed to reflect on the key insights that have been discussed in the collective exploration of artificial intelligence. To conclude, speakers will talk about the most crucial learnings, trends, and actionable steps, in addition to valuable reflections to inform future endeavors in the realm of AI.  

Friday 14 June, 2024

Time Zone: (GMT+01:00) Paris
9:00
9:00 - 10:00 | 1 hour
Data Protection Certification

Introduction In recent years, data protection certification has emerged as a new mechanism for demonstrating compliance with the regulation. The European Data Protection Seal under Art. 42 GDPR has recently been unlocked in Europe, and other jurisdictions are adopting similar regulations. This session will review and discuss lessons learned from privacy and data protection certificati...

10:00
10:00 - 11:00 | 1 hour
Data Protection Certification

Introduction Recent years have seen the emergence of regional and international data protection certifications, including the European Data Protection Seal in Europe and the Global CBPR. This session will discuss the opportunities and challenges for international convergence and interoperability in terms of data protection certifications.  

14:45
14:45 - 15:30 | 45 minutes
Health and Medical Data Compliance

Introduction In the field of healthcare data processing, consent has long been considered the primary legal basis. However, with evolving medical research and innovation, alternative legal bases are gaining more attention. This session will discuss and review these alternative approaches to support lawful medical data processing.  

Monday 12 May, 2025

Time Zone: (GMT+01:00) Paris
17:15
17:15 - 18:15 | 1 hour
AI and ComplianceData Protection Certification
Artificial IntelligenceCertificationInnovative TechnologiesInterpretation available

AI systems are becoming more integrated into critical decision-making processes, which makes questions of liability and accountability more pressing than ever. If an AI-based decision goes wrong, who is responsible? This session will unite experts from Meta, Italian Institute for Privacy and Data Valorisation, AI Law Tech Institute, SGS, and CNPD to explore the evolving frameworks for AI liability and the role of certification in building respons...

Tuesday 13 May, 2025

Time Zone: (GMT+01:00) Paris
17:15
17:15 - 18:00 | 45 minutes
Socio-economic Perspective
Fundamental rightsPhilosophy

Personal data defines identity. However, in a world where surveillance is invisible, data is power, and sharing is an everyday activity, does true privacy still exist? And if we lose it, do we also lose something essential about ourselves? This session will bring together experts to explore the philosophical and practical implications around the nature of privacy and what it truly means for our digital selves, fund...

17:30
17:30 - 18:15 | 45 minutes
Data Protection in Italy
Session in ItalianInterpretation available

Wednesday 14 May, 2025

Time Zone: (GMT+01:00) Paris
9:00
9:00 - 9:45 | 45 minutes
Data Protection in Italy
Session in ItalianArtificial IntelligenceInternational CooperationRegulatory evolutionSocio-economic perspectiveFundamental rightsInterpretation available

Thursday 15 May, 2025

Time Zone: (GMT+01:00) Paris
9:00
9:00 - 9:45 | 45 minutes
Data Protection in Italy
Session in ItalianCertificationInterpretation available
9:20
9:20 - 10:30 | 1 hour 10 minutes
Health and Medical Data Compliance
Regulatory evolutionInnovative TechnologiesData regulation in practiceInterpretation available

This session will welcome industry professionals to explore the adoption of the European Health Data Space (EHDS) regulation and its impact on obligations and compliance requirements. Drawing on the panel's insights, the discussion will cover the practical aspects of implementing EHDS, while also addressing the challenges and opportunities it presents.  Key questions 

14:00
14:00 - 15:00 | 1 hour
Data Protection Certification
CertificationRegulatory evolutionData regulation in practiceCross-border data transfersInterpretation available

The European Data Protection Seal is a golden standard for demonstrating compliance, helping organizations navigate the complex world of GDPR. With Europrivacy officially recognized as a European Data Protection Seal, certification is no longer a theoretical idea but a tangible reality. In this engaging session, the distinguished panel of speakers will explore the impact of certifications, the lessons learned from ...

Sessions in which Luca Bolognini attends

Tuesday 5 April, 2022

Time Zone: (GMT+01:00) Paris
14:30
14:30 - 15:30 | 1 hour
Italian SessionsRegulatory EvolutionCybersecurityData Protection in Practice

Sessione in italiano

18:00
18:00 - 20:00 | 2 hours
Social Events

Wednesday 6 April, 2022

Time Zone: (GMT+01:00) Paris
14:00
14:00 - 15:00 | 1 hour
Innovative Technologies and Data ProtectionData Protection in PracticeRegulatory EvolutionInternational CooperationItalian Sessions

Session in English interpreted into Italian / Sessione in inglese con la traduzione in italiano

15:00
15:00 - 16:00 | 1 hour
International CooperationInnovative Technologies and Data ProtectionData Protection in PracticeCybersecurityItalian Sessions

Session in English interpreted into Italian / Sessione in inglese con la traduzione in italiano

Thursday 7 April, 2022

Time Zone: (GMT+01:00) Paris
15:00
15:00 - 16:00 | 1 hour
Data Protection in PracticeSocio-economic Perspective
17:00
17:00 - 18:00 | 1 hour
International CooperationRegulatory EvolutionCybersecurityHealth and Medical DataInnovative Technologies and Data ProtectionSocio-economic PerspectiveItalian Sessions

Session in English interpreted into Italian / Sessione in inglese con la traduzione in italiano

Monday 20 June, 2022

Time Zone: (GMT+01:00) Paris

Monday 10 June, 2024

Time Zone: (GMT+01:00) Paris
9:00
9:00 - 10:30 | 1 hour 30 minutes
Data Protection in Italy
Sessions available in Italian