Profile
Qualified lawyer with 10+ years of post-qualification experience, backed by 25+ years of hands-on IT experience.
As Head of Product Privacy & Ethics at PagoPA, leads the data protection, artificial intelligence, and open
source compliance strategy for Italy’s most critical Digital Public Infrastructure (DPI), serving tens of millions of citizens.
Combines a strong grounding in civil law fundamentals with rare technical fluency and lateral thinking,
bridging the gap between complex regulatory frameworks and technology. Possesses subject-matter expertise in data
protection, cybersecurity, artificial intelligence, and
intellectual property, including IAPP certifications in privacy and AI governance (AIGP, CIPM, CIPT).
-
2023 oct - PresentHead of Product Privacy & Ethics
(PagoPA, Rome, Italy)
Lead a team of specialized privacy and technology counsels, embedding Privacy-by-Design across Italy's core Digital Public Infrastructure (DPI) ecosystem, including the mobile app IO (15M+ active users annually), the Italian EU Digital Identity Wallet (IT-Wallet), the digital payment platform (pagoPA), the digital notifications platform (SEND), and the interoperability platforms for Italian (PDND) and European (Knodia) public bodies. Provide strategic legal advice and guidance on data protection, artificial intelligence, and open source, contributing to the development of corporate governance and strategy in those fields. Represent PagoPA in the EU OSPO Network and in the Fondazione per la Sostenibilità Digitale’s legal affairs working group.
-
2022 apr - 2023 sepProfessional Privacy & Tech Counsel
(PagoPA, Rome, Italy)
Partnered directly with engineering and product teams to identify, analyse, and mitigate legal and privacy risks throughout the product lifecycle. Focused specifically on electronic identification, digital payments and customer experience monitoring, delving into cryptography, pseudonymization and anonymization techniques. Responsibilities included conducting rigorous compliance reviews for new products or features, and authoring Data Protection Impact Assessments (DPIAs) and other privacy documentation (RoPAs, TIAs, LIAs, notices).
-
2015 nov - 2022 marQualified lawyer & Data Protection Officer
(Turin Bar Association, Italy)
Litigated civil, tax and administrative cases, and advised individuals, public bodies and private companies on data protection, freedom of information, tech law, property law and inheritance matters. Concurrently, served as the Data Protection Officer (DPO) for both the Turin and Asti Notary Councils from 2018 to 2022. During legal practice, served as an appointed member of the Turin Bar Council's Scientific Commission (2016-2017) and the Informatics Commission (2019-2022).
-
2010 - 2015Early career
Began legal career with comprehensive training in civil law and notary practice, as a Trainee Notary at Studio Notarile Ferraris and, subsequently, as a Trainee Lawyer at Studio Legale Valas in Turin, Italy.
- 2025 AIGP - Artificial Intelligence Governance Professional (IAPP - International Association of Privacy Professionals)
- 2025 CIPM - Certified Information Privacy Manager (IAPP - International Association of Privacy Professionals)
- 2023 CIPT - Certified Information Privacy Technologist (IAPP - International Association of Privacy Professionals)
Institutional Activity
-
2024 - presentMember of the Steering Committee for the Ph.D. in Law at the University of Milan
(Milan, Italy)
Support the governance and academic direction of the University's doctoral program in Law.
-
2024 - 2026External Expert on the Ethical Board for Emerging Technologies of the City of Turin
(Turin, Italy)
Serve on Italy's first municipal AI ethics board, established to assess the impact of artificial intelligence projects, issue recommendations on their alignment with fairness, transparency, and human rights, and shape local governance guidelines.
-
2021Hearing at the Constitutional Affairs Committee of the Senate of the Republic
(Rome, online)
Contributed to the examination of the draft bill converting Decree Law No. 139/2021 ("Decreto Capienze") on urgent provisions concerning data protection in public administration processing.
Conferences, Lectures and Seminars
-
2026-07-02IO app: Italy’s open source digital identity solution
(Brussels, Belgium)
Speech at the “OSPOs for Europe 2026 - from vision to action: securing Europe’s sovereignty in the digital world” conference, organised by the Government of Schleswig-Holstein.
-
2026-04-16Public governance of identity: the Italian model
(Turin, Italy)
Panel discussion (Chair) at the “Digital identity: rights, markets, and institutions” conference, organised by the University of Turin Law Department
-
2025-12-11ApplyAI: identifying public administrations' needs for AI adoption
(Brussels, Belgium)
Workshop (online) organised by DG DIGIT, Interoperable Europe Unit, European Commission.
-
2025-11-11Law and Technology
(Naples, Italy)
Lecture (online) at the 5G Academy, organised by the University of Naples Federico II.
-
2025-10-03The (gen)ethical code of privacy
(Rovereto, Italy)
Panel discussion at the "Wired Next Fest 2025 Trentino" conference organised by Wired Italia.
-
2025-02-27The state of Legal Tech in Italy (2025)
(Turin, Italy)
Seminar (online) organised by the University of Turin Law Department under the project "TuTeLa Turin Tech & Law: a lab for social good".
-
2024-10-22The data nexus: sharing, protecting and reusing data in the public administration
(Padua, Italy)
Round table discussion at the "City Vision - General States of smart cities" conference.
-
2024-10-22AI in the city: opportunities and risks of urban digital transformation
(Padua, Italy)
Round table discussion at the "City Vision - General States of smart cities" conference.
-
2024-10-14Data strategy: between privacy and cybersecurity
(Milan, Italy)
Panel discussion at the "Legal Tech Report: The Legal Future in Italy" conference organised by 4CLegal and Gruppo24ore during Milano Digital Week 2024.
-
2024-09-20Digital public services and citizens
(Turin, Italy)
Panel discussion at the "Digital PA Summit Piemonte" conference organised by Torino Legal Hackers and SpaghettETH.
-
2024-03-25The state of Legal Tech in Italy (2024)
(Turin, Italy)
Seminar (online) organised by the University of Turin Law Department under the project "TuTeLa Turin Tech & Law: a lab for social good".
-
2024-03-18Enabling technologies and sustainability for the smart city
(Turin, Italy)
Panel discussion at the "Use and reuse of data in the urban context" conference organised by the University of Turin Law Department under the project "TuTeLa Turin Tech & Law: a lab for social good", in cooperation with Data Valley.
-
2021-12-15The main cyber threats and how to defend against them (theory and practical cases)
(Turin, Italy)
Seminar (online) at the "Dialogues in digital awareness: a secure computerized study" conference organised by the Turin Bar Association Council, Informatics Commission.
-
2021-10-07Writing about law: word processing and automated drafting of legal documents; interoperability and
security in document transmission processes
(Milan, Italy)
Lecture to the Single-cycle Master's Degree Course in Law, University of Milan, “Computer legal skills” course - Prof. Pierluigi Perri.
-
2021-10-06The jurist and the current technology landscape. Legal tech, cloud computing, big data
(Milan, Italy)
Lecture to the Single-cycle Master's Degree Course in Law, University of Milan, “Computer legal skills” course - Prof. Giovanni Ziccardi.
-
2021-03-18Civic Hacking and Open Data: a democratic revolution?
(Milan, Italy)
Seminar (online) organised by Legal Hackers Milan during Milano Digital Week 2021.
-
2021-03-10Messaging services and privacy - do we need to worry?
(Verona, Italy)
Seminar (online) organised by the Verona Order of Engineers (“Cybersecurity 2021” cycle).
-
2021-01-22im irl – instant messengers in real life
(Rome, Italy)
Webinar organised by the Cyber Saiyan Association (RomHack Conference organizer).
-
2020-10-22The reception of clients and participation in meetings remotely
(Milan, Italy)
Lecture (online) to the Single-cycle Master's Degree Course in Law, University of Milan, “Computer legal skills” course - Prof. Pierluigi Perri.
Media appearances
- 2025-03-13AI in PagoPA: innovazione tecnologica al servizio dei cittadini (4C AI Portal)
- 2024-12-18L’anno in cui è aumentata la cittadinanza digitale con l’app IO (PagoPA blog)
- 2024-12-11Il “product legal counseling” nelle imprese (Next Legal podcast)
- 2022-11-03C'mon let's Tweet again (Rai Radio 3 Scienza)
- 2021-10-30Green pass rubati anche in Italia: dopo quello di Hitler, 62 codici per sfornare certificati (Open online)
- 2021-10-27Cosa sappiamo dei Green Pass validi di Adolf Hitler (Italian Tech)
- 2021-10-10P.a., privacy abolita per decreto. Esperti in allarme: “Gravissimo” (Il Fatto Quotidiano)
- 2021-05-15WhatsApp, scaduto l'ultimatum: chi non può più usare l'app e cosa succede (Il Giornale)
- 2021-05-12WhatsApp, le nuove regole per la privacy. Ecco che cosa cambia (Italian Tech)
- 2021-04-06Si può cercare tra i dati rubati a Facebook. Ma il Garante ordina lo stop (La Repubblica)
- 2021-02-24Privacy: le stanze senza muri di Clubhouse (Changes – Gruppo Unipol)
- 2021-02-09Nativi ma non esperti (Rai Radio 3 Scienza)
- 2021-02-04Whatsapp, Telegram o Signal, ecco qual è la chat più sicura: tutto quello che c'è da sapere (Agenda Digitale)
- 2021-01-15Addio privacy, fuga da WhatsApp (RSI - telegiornale)
- 2021-01-14Il Garante della privacy vuole vederci chiaro sulle nuove condizioni di Whatsapp (Wired)
- 2021-01-13Chat in fuga da WhatsApp: perché scegliere Telegram, Signal e le altre (La Stampa)
- 2021-01-12Bisogna preoccuparsi per le nuove regole sulla privacy di WhatsApp? (Il Post)
- 2021-01-12Un video vi ha convinto ad abbandonare WhastApp e passare a Signal? Attenti! È stato tagliato (Open online)
- 2021-01-04Hacker bucano Ho Mobile, ecco cosa devono fare i 2 milioni di clienti a rischio (Il Riformista)
- 2020-05-30Ecco come funzionerà lo scambio dei dati del contact tracing sull'app Immuni (Wired)
- 2020-04-03Il complicato rapporto dell'Inps con le regole sulla privacy (Wired)
- 2019-12-09Basta il codice fiscale per scoprire chi ha chiesto un prestito a Findomestic (Wired)
- 2019-10-04Diritto all'oblio e norma sul copyright. Il parere di Enrico Ferraris (Diritto Mercato e Tecnologia)
- 2019-09-16Cybercrime, doppia campagna per diffondere sLoad in Italia (Difesa & Sicurezza)
- 2019-07-10Privacy, dati personali e sicurezza: ecco come li usano le app di food delivery (Wired)
- 2019-06-24Il ministero della Giustizia sta condividendo online i dati personali di migliaia di persone (Wired)
- 2019-04-06Perché tutti questi siti del governo non rispettano la privacy europea? (Wired)
- 2019-03-27Riforma del copyright, cosa cambia in pratica per chi carica e condivide contenuti sul web? (Wired)