Paolo Balboni

Practice Areas

Paolo Balboni (Ph.D.) is a top tier European ICT, Privacy & Cybersecurity lawyer and serves as Data Protection Officer (DPO) for multinational companies. Professor of Privacy, Cybersecurity, and IT Contract Law at the European Centre on Privacy and Cybersecurity (ECPC) within the Maastricht University Faculty of Law. Member of the EUMETSAT Data Protection Supervisory Authority. Lead Auditor BS ISO/IEC 27001:2013.

Dr. Balboni (qualified lawyer admitted to the Milan Bar and the Amsterdam Bar) is a Founding Partner of ICT Legal Consulting (ICTLC), a law firm with offices in Milan, Rome, Bologna, Amsterdam, Athens, Helsinki, Madrid, Paris, Lagos, Melbourne and Partner Law Firms in 53 countries around the world. Paolo Balboni is also Founding Partner of ICT Cyber Consulting, a company specialized in information/data security.

Career

Together with his team he advises clients on legal issues related to cybersecurity, privacy and data protection, IT contracts, cloud/edge/quantum computing, artificial intelligence (AI), big data and smart analytics, internet of things (IoT), regulatory issues related to telecommunications and electronic communications, payments, e-commerce, digital marketing and advertising, regulations and liabilities of digital platforms, e-health, and general IP matters. He has long-term expertise in the ICT, Food and Beverage, Entertainment, Education, Healthcare, Automotive, Logistics and Transportation Solutions, Fashion, Human Resources Management, Insurance, and Financial and Banking sectors, including Fintech, and with specific reference to Anti-Money Laundering (AML) and Counter-Terrorist Financing (CFT) matters. He is a Recommended Lawyer ranked by The Legal 500 EMEA 2021 in the areas of Data Privacy and Data Protection and Industry Focus: TMT.

In 2019 he was appointed as a Member of the EUMETSAT Data Protection Supervisory Authority.

Professional Memberships

Paolo Balboni is involved in European Commission studies on new technologies and participated in the revision of the EU Commission proposal for a General Data Protection Regulation. He played an active role in the drafting of the European Union Commission Data Protection Code of Conduct for Cloud Service Providers. He co-chairs the Privacy Level Agreement (PLA) Working Group of Cloud Security Alliance and has acted as the legal counsel for the European Network and Information Security Agency (ENISA) projects on ‘Cloud Computing Risk Assessment’, ‘Security and Resilience in Governmental Clouds’, and ‘Procure Secure: A guide to monitoring of security service levels in cloud contracts’.

Publications

Keynote speaker at numerous international conferences on the legal aspects of Cybersecurity, ICT contracts, Privacy & Data Protection matters; Paolo Balboni is also the author of the book Trustmarks in E-Commerce: The Value of Web Seals and the Liability of their Providers (T.M.C Asser Press), and of numerous journal articles published in leading international law reviews.

Personal

Graduated in Law at the University of Bologna (Italy) in 2002, Paolo Balboni completed his Ph.D. in Comparative Technology Law at Tilburg University (The Netherlands) in 2008.

Languages Spoken

He speaks Italian, English and Dutch fluently and has good knowledge of French, Spanish, and German.