Paolo Balboni

Paolo Balboni – Founding Partner ICTLC – Managing Partner ICTLC International

Paolo Balboni, Ph.D., is a top tier European ICT, Privacy & Data Protection lawyer and serves as Data Protection Officer (DPO) for multinational companies. Professor of Privacy, Cybersecurity, and IT Contract Law. Lead Auditor BS ISO/IEC 27001:2013.


Paolo Balboni (qualified lawyer admitted to the Milan Bar and The Netherlands Bar *) is a Founding Partner of ICT Legal Consulting (ICTLC), a law firm with offices in Milan, Bologna, Rome, Helsinki, an International Hub in Amsterdam, and multiple Partner Law Firms around the world.
Together with his team he advises clients in the fields of Personal Data Protection, Data Security, Information and Communication Technology (ICT) and Intellectual Property Law, also acting as Data Protection Officer in outsourcing. Paolo Balboni has considerable experience in Information Technologies including Cloud Computing, Big Data, Analytics and the Internet of Things, Media and Entertainment, Healthcare, Fashion, Insurance, Banking, Anti-Money Laundering (AML) and Counter-Terrorist Financing (CFT).


Paolo Balboni is Professor of Privacy, Cybersecurity, and IT Contract Law at the European Centre on Privacy and Cybersecurity (ECPC) within the Maastricht University Faculty of Law. He is involved in European Commission studies on new technologies and participated in the revision of the EU Commission proposal for a General Data Protection Regulation. Paolo Balboni played an active role in the drafting of the European Union Commission Data Protection Code of Conduct for Cloud Service Providers. In 2019 he was appointed as a Member of the EUMETSAT Data Protection Supervisory Authority.


He co-chairs the Privacy Level Agreement (PLA) Working Group of Cloud Security Alliance and has acted as the legal counsel for the European Network and Information Security Agency (ENISA) projects on ‘Cloud Computing Risk Assessment’, ‘Security and Resilience in Governmental Clouds’, and ‘Procure Secure: A guide to monitoring of security service levels in cloud contracts’. As a frequently invited speaker, Paolo Balboni has spoken on the legal aspects of ICT, Privacy & Data Protection matters at more than 30 international conferences around the world in the last 2 years.


Paolo Balboni is the author of the book Trustmarks in E-Commerce: The Value of Web Seals and the Liability of their Providers (T.M.C Asser Press), and of numerous journal articles published in leading European Law reviews.
Graduated in Law at the University of Bologna (Italy) in 2002, Paolo Balboni completed his Ph.D. in Comparative Technology Law at Tilburg University (The Netherlands) in 2008.
He speaks Italian, English and Dutch fluently and has good knowledge of French, Spanish, and German.

* Prof. Dr. Paolo Balboni has registered the following principal and secondary legal practice areas in the Netherlands Bar’s register of legal practice areas (in Dutch: rechtsgebiedenregister): ICT-law (Privacy law), Intellectual Property law. Based on this registration, he is required to obtain at least ten training credits per calendar year in each registered principal legal practice area in accordance with the standards set by the Netherlands Bar.