Law & Technology is a research project by Avvocato Valentina Grazia Sapuppo, dedicated to the point where law meets technology. It brings together research, study and outreach on artificial intelligence, data protection, cybersecurity, compliance, environment, safety and gender equality.
Valentina Grazia Sapuppo
Avvocato Valentina Grazia Sapuppo is a Legal and Technical Expert in UNINFO (the body federated to UNI for Information Technologies and their applications, representing Italy within CEN and ISO), upon nomination by AIP-ITCS and the Stati Generali dell’Innovazione (SGI), in the working groups of ISO/IEC JTC 1/SC 42 (Artificial Intelligence) and CEN/CENELEC JTC 21 (Artificial Intelligence), where she contributes to the development of international and European standards for AI management systems, risk management and trustworthiness.
Her work focuses on the intersection between voluntary technical standards and the binding regulatory framework of the European Union. She holds Auditor/Lead Auditor (A/LA) qualifications for ISO/IEC 42001:2023 (AI management systems) and ISO/IEC 27001:2022 (information security), as well as other management-system standards, with direct hands-on experience in assessing the conformity of organisations.
Formerly a Technical Officer at the Certification and Inspection Department (DC) of ACCREDIA, the sole national accreditation body (MS: SSI ‑ BCMS ‑ ITX | PRD: Europrivacy V77 | eIDAS | SPID | GDPR PdR 43.2 | INVEO | PRS: DigComp 2.2 | UNINFO UNI/CT 510‑526‑533), she held the roles of Chief Legal & Compliance Officer, AI, ICT & Data Protection Certification Scheme Manager and Head of the Academy Division at ITEC S.r.l. ‑ European Technological Certification Institute, having previously gained extensive experience supporting numerous organisations in implementing management systems and Governance, Risk & Compliance models based on the standards ISO 9001, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 22301, ISO/IEC 20000-1 and ISO 37001 and frameworks such as GDPR, NIST, the NIS Directive and Legislative Decree 231/2001, as well as in international law firms, providing professional consultancy in personal data protection, privacy and cybersecurity, legal compliance, ICT, intellectual property (IP) and TMT, governance and control models, and the valorisation of information assets for data-driven businesses.
A Corporate Compliance Officer and lecturer in advanced training courses for professionals, she is a Professional IT Practitioner under Italian Law 4/2013, a certified DPO (formerly UNI 11697:2017, now UNI EN 17740:2024 ‑ UNI/TS 11945:2024), Europrivacy Assessor & Implementer V.77 and International Privacy Expert Manager. She is a member of the EDPB Support Pool of Experts and a Fellow Researcher at the Information Society Law Center (ISLC) of the University of Milan, in the research group «New technologies and vulnerable people», where she works on algorithmic bias, digital inclusion and gender disparity in AI standardisation ‑ themes that steer her standards work towards social impact and inclusive representation in the definition of technical standards. She is also active in various national, European and international associations.
Profiles, engagements and recognitions
A selection of institutional profiles, speaking engagements, biographical publications and contributions documenting the professional path of Avvocato Valentina Grazia Sapuppo.
- ISOC Italy ‑ member profile
- Italian Privacy Institute ‑ Fellow
- TopLegal ‑ appointment as Chief Legal & Compliance Officer of ITEC
- Avvocato360 ‑ professional profile
- Stati Generali dell’Innovazione ‑ author page
- e‑Privacy XXXII ‑ speaker
- e‑Privacy XXX ‑ speaker
- Associazione Master ‑ presentation (PDF)
- Academia Nacional de Ciencias (CETI/SAI) ‑ short biography (PDF)
- LinkedIn ‑ “Sfera” talk
- LinkedIn ‑ “DigComp 2.2: the European competence framework”
- CINFOR Foggia ‑ “AI and the legal profession: legal prompting”
- Take the date ‑ event “AI and privacy: balancing innovation, knowledge and ethics in the digital age”
2030 Agenda for Sustainable Development
The Law & Technology project embraces the principles of the United Nations 2030 Agenda. By its purpose and areas of activity, it relates in particular to the following Sustainable Development Goals (SDGs):
Sources and further reading: United Nations ‑ Goals, UN Italy (UNRIC), ASviS, UN Data Portal.