PRIVACY, PERSONAL DATA PROCESSING AND VIDEO SURVEILLANCE
Sarzana and Associates, Law Firm , is a leading Italian firm providing legal advice and assistance in the fields of personal data protection, digital privacy, and artificial intelligence. The firm assists private companies, public administrations, and third-sector organizations in all phases of regulatory compliance, from preliminary risk assessments to legal representation and proceedings before the Italian Data Protection Authority.
The firm's members have served on numerous ministerial and institutional committees, including the committees for the protection of individuals from automated databases and the committee for the fight against cybercrime. The founder served as the Minister of Justice's delegate to the Council of Europe Committee of Experts that drafted the International Convention on Combating Crime in Cyberspace.
Regulatory references
Regulation (EU) 2016/679 — GDPR · Legislative Decree 30 June 2003, n. 196 (Privacy Code) and subsequent amendments · Regulation (EU) 2024/1689 — AI Act · Directives 95/46/EC and 2002/58/EC · Provisions of the Guarantor for the Protection of Personal Data
Consulting and assistance regarding privacy and personal data processing
The Firm offers a comprehensive legal consultancy and operational assistance service covering the entire personal data processing lifecycle, with a particular focus on processing carried out via electronic communication networks and digital tools.
Data Protection Audit
Comprehensive assessment of corporate data processing, flow mapping, GDPR gap analysis, and compliance assessment of ongoing personal data processing.
DPIA and privacy documentation
Drafting of Data Protection Impact Assessments, privacy notices, cookie policies, DPA agreements, and all other forms required by the Code, including for websites and digital platforms.
Treatment register
Preparation and updating of the Register of Processing Activities pursuant to Article 30 of the GDPR for businesses and public administrations, including the related management system and periodic review.
Data Breach Management
Assistance in managing personal data breaches: notification to the Data Protection Authority within 72 hours, communication to data subjects, mitigation measures, and adjustment of internal procedures.
DPO as a Service
Appointment and ongoing support for the Data Protection Officer, including oversight of regulatory compliance, staff training, and direct contact with the Italian Data Protection Authority.
Online reputation and the right to be forgotten
Protecting your digital reputation, removing illegal content, and exercising the right to be forgotten against search engines, social media, and online platforms, including through legal channels.
Judicial and extrajudicial assistance in privacy matters
The firm guarantees comprehensive protection in both administrative and judicial proceedings, assisting clients at every stage of the proceedings with consolidated experience in privacy litigation.
Assistance before the Privacy Guarantor
Representation and defense in proceedings before the Italian Data Protection Authority, including inspections, sanctioning proceedings, and the drafting of mandatory regulatory documentation (notifications, preliminary checks).
Judicial protection
Assistance in administrative and judicial proceedings before ordinary, civil, and criminal courts, as well as before Regional Administrative Courts regarding unlawful data processing.
Mediation and out-of-court resolution
Negotiation and mediation for alternative dispute resolution regarding privacy matters, reducing time and costs while protecting the confidentiality of the parties involved.
Video surveillance: consulting and compliance
The firm assists local authorities, businesses, and public administrations in setting up and managing video surveillance systems that comply with privacy legislation and the provisions of the Guarantor, including the General Provision of 2010 and subsequent updates.
Risk analysis related to the installation of video surveillance systems with or without image recording.
Identification of the appointments required by privacy legislation and definition of subjective responsibilities.
Advice on equipment placement methods and technical specifications compliant with current regulations.
Analysis of the powers of local authorities and indication of the technical and regulatory procedures for complying with the requirements of the security decrees and the Guarantor's provision.
Drafting of privacy and video surveillance regulations, informational signage, and information for data subjects.
Assistance during inspections by the Guarantor and in proceedings before the Authority, as well as drafting the mandatory documentation to be submitted to the Guarantor.
Privacy, GDPR, and Artificial Intelligence
The Firm assists clients in complying with the new obligations introduced by Regulation (EU) 2024/1689 on Artificial Intelligence (AI Act), with a particular focus on the intersection between AI systems and the processing of personal data. The AI Act introduces a risk classification system for AI systems—unacceptable, high, limited, and minimal—resulting in transparency, compliance, and human oversight obligations for providers and deployers, and penalties of up to €35 million or 71% of annual global turnover.
AI Act compliance
Analysis and adaptation of enterprise AI systems to the requirements of the AI Act, including model lifecycle management, compliance assessment, and registration of high-risk systems.
AI governance
Definition of internal policies for the responsible use of AI, governance frameworks, human oversight procedures, and staff training on regulatory obligations.
AI Contracts and GDPR
Drafting contracts for the development, purchase, and licensing of AI systems, including liability clauses, GDPR compliance guarantees, and management of personal data used to train models.
Contact us at 06.32.11.553 For more information or to request an appointment, or fill out the form found in THIS contact page.
English 
Italian 