Practice area
Privacy & Cybersecurity
Gian Marco Iulietto works on data protection and cybersecurity for companies, public bodies and professional associations.
He serves as Data Protection Officer (DPO) for professional associations. He handles GDPR compliance (records of processing, privacy notices, processor appointments, impact assessments, data breach management) and rules on work devices and tools.
On security, he works on the obligations under the NIS2 Directive and the Cyber Resilience Act, which brings cybersecurity into the requirements for digital products. He teaches privacy and cybersecurity at the Molise Bar School.
Frequently asked questions
- What does a Data Protection Officer (DPO) do?
- The DPO, provided for by the GDPR, informs and advises the controller, monitors compliance, cooperates with the supervisory authority and acts as contact point for data subjects. Appointment is mandatory, among others, for public authorities and bodies.
- What is the Cyber Resilience Act?
- It is Regulation (EU) 2024/2847, which sets cybersecurity requirements for products with digital elements placed on the EU market, throughout their lifecycle.
- What does Gian Marco Iulietto do on privacy?
- DPO appointments, GDPR compliance, contracts and appointments with suppliers, data breach management, and alignment with cybersecurity obligations.