Umberto Mottola

Managed 36 multinational accounts monthly across financial, tech, and services sectors, conducting 18,000+ compliance assessments for GDPR, Al Act, NIS 2.0, and ISO 27001.

Implemented international frameworks by evaluating technical measures (MFA, encryption) and organizational controls (DPIA, LIA, TIA, ROPAs) for clients with cross-border operations.

Provided consultancy on drafting Data Processing Agreements (DPAs), including clauses for data breach management between controllers and processors.

Led end-to-end compliance programs for 30+ clients, including public institutions (universities, municipalities) and private enterprises, ensuring adherence to GDPR and sector- specific regulations. I managed the plans for the implementation of the principles of privacy by design and by default for various customer software, I drafted TIA,LIA,DPIA, and Data processing agreements both in case the company was Data Controller and in case it was Data Processor. I took care of the management of ROPAs and managed access requests and the exercise of data subjects' rights I acted as primary liaison for data subjects and authorities, managing breach responses, and audits.

I provided comprehensive privacy law consultancy and litigation support to over 20 clients in the B2B and service sectors, specializing in the preparation of ROPAs, GDPR-compliant Data Processing Agreements (DPAs), and DPIAs, along with conducting privacy risk assessments. My experience also includes handling privacy-related criminal cases under the Italian Privacy Code (Articles 167-172 of Legislative Decree 196/2003), particularly addressing unlawful data processing (Art. 167), unlawful data dissemination (Art. 167-bis), fraudulent data acquisition (Art. 167-ter), and failures to implement adequate security measures (Art. 172). Additionally, I drafted and negotiated various contracts, including pharmaceutical agreements, NDAs with privacy safeguards, DPA aligned with Article 28 GDPR, and real estate contracts incorporating data protection provisions.