track records
We are invited members of the UNESCO Consultation Committee on AI Guidelines for Courts and have served as stakeholders in the European Data Protection Board’s working group on AI models.
We have provided written evidence to the European Commission on the implementation of the Digital Services Act and to the UK Parliament on key issues including AI regulation, the future of data protection, retained EU law, and human rights protection.
We were also invited to present oral evidence before distinguished members of the House of Lords and the House of Commons on the Bill of Rights Bill 2022 and the Retained EU Law Bill 2023.
We assisted an important public institution in drafting an internal regulation for the processing of personal data, identifying the different governance bodies responsible for processing.
We have actively contributed to global cybersecurity policy development as participants in the UN OEWG on Cyber and ICTs, shaping discussions on:
· AI and Quantum threats to national security
· Cross-border governance of emerging technologies
· Space security and digital infrastructure resilience
Additionally, we have served as advisors to the EU DGINTPA, supporting the internationalization of European digital projects and the development of global governance strategies.
National Policy Implementation
We have played a key role in EU-ENISA working groups, assisting EU member states in implementing national cybersecurity policies aligned with NIS directives. Our expertise also extends to advising on national digitalization and innovation programs, ensuring compliance with legal and ethical standards in the deployment of emerging technologies.
Recognition & Publications
Our leadership in multilateral cyber cooperation has been recognized with the US State Department’s IVLP Award (2019) for contributions to international policy.
We have also contributed to cybersecurity scholarship as the author of Cybersecurity in Italy. Policies, Governance and Ecosystem (Springer, 2024), providing an in-depth analysis of national cybersecurity frameworks and legal ecosystems.
We provided strategic advisory services to tech companies and private sector operators to navigate the complex European regulatory landscape.
We actively participated in the negotiation and drafting of the Strengthened Code of Practices on Disinformation, working alongside European institutions, digital platforms, and civil society organisations.
We organised and facilitated events and roundtables that brought together representatives from European and national institutions, tech companies, and civil society organisations.
We collaborated with civil society organisations to analyse and contribute to the drafting of the Code of Practices on Generative Artificial Intelligence.
We defined and implemented operational and organizational procedures and models for the protection of business activities, in compliance with the regulatory framework of Legislative Decree 231/2001 and the main European regulations, including the Data Act, the Digital Services Act, the AI Act, and cybersecurity regulations, with particular attention to the requirements set out by the Prime Ministerial Decree of July 22, 2011.
We established and trained working groups composed of the company’s senior management, tasked with oversight and critical issue management, with the aim of ensuring adequate levels of resilience.
These activities enhanced the company’s ability to protect its tangible and intangible assets, to overcome operational challenges, and to successfully address certification processes and regulatory compliance across its operations.
We oversaw the development of company procedures for internal audit activities, in relation to the obligations arising from various regulatory sources. We produced the necessary guidelines and models for analysis, training, and the generation of digital evidence (digital forensics) to support the company’s legal practices.