Law & Technology is a research project by Valentina Grazia Sapuppo, dedicated to the point where law meets technology. It brings together research, study and outreach on artificial intelligence, data protection, cybersecurity, compliance, environment, safety and gender equality.
Valentina Grazia Sapuppo
Valentina Grazia Sapuppo is a Legal and Technical Expert at UNINFO, the body federated to UNI (the Italian standardisation body) for information technologies and their applications, which represents Italy within CEN (the European Committee for Standardization) and ISO (the International Organization for Standardization). She serves there upon designation by AIP-ITCS (Associazione Informatici Professionisti, Italian Computer Society) and the Stati Generali dell’Innovazione (SGI), on the UNI/CT 526 technical commission, which covers unregulated professional activities and professional profiles in the ICT sector, and on its European counterpart CEN/TC 428 «ICT Professionalism and Digital Competences», as well as in the working groups on artificial intelligence of ISO/IEC JTC 1/SC 42 and CEN-CENELEC JTC 21, where she contributes to the development of international and European standards for artificial-intelligence management systems, risk management and trustworthiness.
Her work focuses on the intersection between voluntary technical standards and the binding regulatory framework of the European Union. She holds Auditor/Lead Auditor (A/LA) qualifications for ISO/IEC 42001:2023 (AI management systems) and ISO/IEC 27001:2022 (information security), as well as other management-system standards, with direct hands-on experience in assessing the conformity of organisations.
Formerly a Technical Officer at the Certification and Inspection Department (DC) of ACCREDIA, the sole national accreditation body (MS: SSI ‑ BCMS ‑ ITX | PRD: Europrivacy V77 | eIDAS | SPID | GDPR PdR 43.2 | INVEO | PRS: DigComp 2.2 | UNINFO UNI/CT 510‑526‑533), she held the roles of Chief Legal & Compliance Officer, AI, ICT & Data Protection Certification Scheme Manager and Head of the Academy Division at ITEC S.r.l. ‑ European Technological Certification Institute, having previously gained extensive experience supporting numerous organisations in implementing management systems and Governance, Risk & Compliance models based on the standards ISO 9001, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 22301, ISO/IEC 20000-1 and ISO 37001 and frameworks such as GDPR, NIST, the NIS Directive and Legislative Decree 231/2001, as well as in international law firms, providing professional consultancy in personal data protection, privacy and cybersecurity, legal compliance, ICT, intellectual property (IP) and TMT, governance and control models, and the valorisation of information assets for data-driven businesses.
A Corporate Compliance Officer and lecturer in advanced training courses for professionals, she is a Professional IT Practitioner under Italian Law 4/2013, a certified DPO (formerly UNI 11697:2017, now UNI EN 17740:2024 ‑ UNI/TS 11945:2024), Europrivacy Assessor & Implementer V.77 and International Privacy Expert Manager. She is a member of the EDPB Support Pool of Experts and a Fellow Researcher at the Information Society Law Center (ISLC) of the University of Milan, in the research group «New technologies and vulnerable people», where she works on algorithmic bias, digital inclusion and gender disparity in AI standardisation ‑ themes that steer her standards work towards social impact and inclusive representation in the definition of technical standards. She is also active in various national, European and international associations.
Profiles, engagements and recognitions
A selection of institutional profiles, speaking engagements, biographical publications and contributions documenting the professional path of Valentina Grazia Sapuppo.
- ISOC Italy ‑ member profile
- Italian Privacy Institute ‑ Fellow
- TopLegal ‑ appointment as Chief Legal & Compliance Officer of ITEC
- 360 ‑ professional profile
- Stati Generali dell’Innovazione ‑ author page
- e‑Privacy XXXII ‑ speaker
- e‑Privacy XXX ‑ speaker
- Associazione Master ‑ presentation (PDF)
- Academia Nacional de Ciencias (CETI/SAI) ‑ short biography (PDF)
- LinkedIn ‑ “Sfera” talk
- LinkedIn ‑ “DigComp 2.2: the European competence framework”
- CINFOR Foggia ‑ “AI and the legal profession: legal prompting”
- Take the date ‑ event “AI and privacy: balancing innovation, knowledge and ethics in the digital age”
- Economy Magazine ‑ feature on harmonised standards and ISO/IEC 42001
- Stati Generali dell’Innovazione ‑ speaker, «Artificial Intelligence» conference (2024)
- Stati Generali dell’Innovazione ‑ moderator and speaker, «Women in Tech» (2024)
- Stati Generali dell’Innovazione ‑ speaker, «The advent of AI» (2025)
- Stati Generali dell’Innovazione ‑ speaker, «Empowering Women in Tech» (2025)
- Avvocato360 Academy ‑ speaker, webinar on the hybrid lawyer and ChatGPT (2023)
- Academia Nacional de Ciencias de Buenos Aires ‑ lecture in the CETI series
- Agentic AI (Nicola Fabiano) ‑ author of chapter 16 on technical standardisation
- AI AnthropoCosmic ‑ project team member (Pontifical Salesian University)
2030 Agenda for Sustainable Development
The Law & Technology project embraces the principles of the United Nations 2030 Agenda. By its purpose and areas of activity, it relates in particular to the following Sustainable Development Goals (SDGs):
Sources and further reading: United Nations ‑ Goals, UN Italy (UNRIC), ASviS, UN Data Portal.
FeaturedAI AnthropoCosmicCall for Paper open until 15 September 2026. An international project for an AI at the service of humanity, the environment and the cosmos.
Read the article
FeaturedAgentic AILimits before the action, evidence during, responsibility afterwards. Nicola Fabiano’s book on the governance of agentic systems, with a preface by Antonino Caffo.Chapter 16 by Valentina Grazia SapuppoRead the article
