01
DPO as a Service
The outsourced DPO office, for those who must appoint one or strengthen the one they have: compliance duties, records and dealings with the authority, on an ongoing basis.
DATA PROTECTION, AI ACT, CYBERSECURITY
Data and AI compliance, demonstrable, from a single senior lawyer
Advice on GDPR, AI Act, DORA and NIS2 for companies and DPOs: a single senior lawyer for the entire stack, with the evidence behind every choice.
- Europrivacy Lead Auditor
- ISO 27001 and 27701
- DPO Maastricht
- GDPR
- AI Act
- DORA
- NIS2
- 231
- Data Act
THE SERVICES
Six areas of data law, one point of contact
Every business arrives with a specific need, often just one. From there I cover the entire regulatory stack that concerns it, without multiplying points of contact.
02
GDPR and Privacy
Data processing brought into compliance and kept that way: records, DPIAs, privacy notices, data-subject requests, transfers outside the Union.
03
AI Act and Compliance
Your AI systems' obligations under the AI Act: transparency, risk classification, provider and deployer roles.
04
Cybersecurity
DORA and NIS2 turned into concrete measures: risk governance, incident handling, duties towards the authorities.
05
Data Act
The new rules on access to and sharing of data, contracts and cloud: what changes for those who produce or use connected data.
06
231 Models and Whistleblowing
The 231 Model and reporting channels, including the new AI-related offences entering the organisation's catalogue.
ABOUT
Nicola Franchetto
Lawyer with over ten years of experience in data protection law, also advising on the AI Act and cybersecurity. In collaboration with the ICT Legal Consulting network.
I advise companies and DPOs on the rules that govern data and artificial intelligence, from the GDPR to the AI Act, from DORA to the Data Act. Over more than ten years I have designed and audited data governance frameworks internationally; a lawyer and a computer engineer, I sit at the meeting point between law and technology.
The method is always the same, start from the regulatory standard rather than short-term convenience, and anchor every choice to evidence. For the most demanding questions I draw on the ICT Legal Consulting network: the depth of a network, with a single senior point of contact.
FROM THE BLOG
Analysis of cases, fines and regulations
Decisions of the authorities, judgments and new rules, read at the source and turned into what to do. Not summaries: analysis.
THE FIRST STEP
A specific need? Let's start there
Describe your case. Get a clear read on what you need to do, with the regulatory standard to hand.