Law & Technology is a research project by Valentina Grazia Sapuppo, dedicated to the point where law meets technology. It brings together research, study and outreach on artificial intelligence, data protection, cybersecurity, compliance, environment, safety and gender equality.
Valentina Grazia Sapuppo
Valentina Grazia Sapuppo is a Legal and Technical Expert at UNINFO, the body federated to UNI (the Italian standardisation body) for information technologies and their applications, which represents Italy within CEN (the European Committee for Standardization) and ISO (the International Organization for Standardization). She serves there upon designation by AIP-ITCS (Associazione Informatici Professionisti, Italian Computer Society) on the UNI/CT 526 technical commission, which covers unregulated professional activities and professional profiles in the ICT sector, and on its European counterpart CEN/TC 428 «ICT Professionalism and Digital Competences», and, upon designation by the Stati Generali dell’Innovazione association (SGI), on the UNI/CT 533 technical commission and in the working groups on artificial intelligence of ISO/IEC JTC 1/SC 42 and CEN-CENELEC JTC 21, where she contributes to the development of international and European standards for artificial-intelligence management systems, risk management and trustworthiness.
Her work focuses on the intersection between voluntary technical standards and the binding regulatory framework of the European Union. She holds Auditor/Lead Auditor (A/LA) qualifications for ISO/IEC 42001:2023 (AI management systems) and ISO/IEC 27001:2022 (information security), as well as other management-system standards, with direct hands-on experience in assessing the conformity of organisations.
Formerly a Technical Officer at the Certification and Inspection Department (DC) of ACCREDIA, the sole national accreditation body (MS: SSI, BCMS, ITX | PRD: Europrivacy V77 | eIDAS | SPID | GDPR PdR 43.2 | INVEO | PRS: DigComp 2.2 | UNINFO UNI/CT 510‑526‑533), she held the roles of Chief Legal & Compliance Officer, AI, ICT & Data Protection Certification Scheme Manager and Head of the Academy Division at ITEC S.r.l. (European Technological Certification Institute), having previously gained extensive experience supporting numerous organisations in implementing management systems and Governance, Risk & Compliance models based on the standards ISO 9001, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 22301, ISO/IEC 20000-1 and ISO 37001 and frameworks such as GDPR, NIST, the NIS Directive and Legislative Decree 231/2001, as well as in international law firms, providing professional consultancy in personal data protection, privacy and cybersecurity, legal compliance, ICT, intellectual property (IP) and TMT, governance and control models, and the valorisation of information assets for data-driven businesses.
A Corporate Compliance Officer and lecturer in advanced training courses for professionals, she is a Professional IT Practitioner under Italian Law 4/2013, a certified DPO (formerly UNI 11697:2017, now UNI EN 17740:2024 and UNI/TS 11945:2024), Europrivacy Assessor & Implementer V.77 and International Privacy Expert Manager. She is a member of the EDPB Support Pool of Experts and a Fellow Researcher at the Information Society Law Center (ISLC) of the University of Milan, in the research group «New technologies and vulnerable people», where she works on algorithmic bias, digital inclusion and gender disparity in AI standardisation, themes that steer her standards work towards social impact and inclusive representation in the definition of technical standards. She is also active in various national, European and international associations.
Profiles, engagements and recognitions
A selection of institutional profiles, speaking engagements, biographical publications and contributions documenting the professional path of Valentina Grazia Sapuppo.
- Agentic AI (Nicola Fabiano): author of chapter 16 on technical standardisation
- AI AnthropoCosmic: project team member (Pontifical Salesian University)
- Digeat Festival 2026: speaker at the round table «Le regole dell’IA: occorrono nuove leggi o recuperare i principi del diritto?», Lecce, 6 November 2026
- ISOC Italy: member profile
- Italian Privacy Institute: Fellow
- TopLegal: appointment as Chief Legal & Compliance Officer of ITEC
- 360: professional profile
- Stati Generali dell’Innovazione: author page
- e‑Privacy XXXII: speaker
- e‑Privacy XXX: speaker
- Associazione Master: presentation (PDF)
- Academia Nacional de Ciencias (CETI/SAI): short biography (PDF)
- LinkedIn: “Sfera” talk
- LinkedIn: “DigComp 2.2: the European competence framework”
- CINFOR Foggia: “AI and the legal profession: legal prompting”
- Take the date: event “AI and privacy: balancing innovation, knowledge and ethics in the digital age”
- Economy Magazine: feature on harmonised standards and ISO/IEC 42001
- Stati Generali dell’Innovazione: speaker, «Artificial Intelligence» conference (2024)
- Stati Generali dell’Innovazione: moderator and speaker, «Women in Tech» (2024)
- Stati Generali dell’Innovazione: speaker, «The advent of AI» (2025)
- Stati Generali dell’Innovazione: speaker, «Empowering Women in Tech» (2025)
- Avvocato360 Academy: speaker, webinar on the hybrid lawyer and ChatGPT (2023)
- Academia Nacional de Ciencias de Buenos Aires: lecture in the CETI series
2030 Agenda for Sustainable Development
The Law & Technology project embraces the principles of the United Nations 2030 Agenda. By its purpose and areas of activity, it relates in particular to the following Sustainable Development Goals (SDGs):
Sources and further reading: United Nations: Goals, UN Italy (UNRIC), ASviS, UN Data Portal.
FeaturedAI AnthropoCosmicAn international project for an AI at the service of humanity, the environment and the cosmos, placing human dignity at the centre of system design.
Read the article
FeaturedAgentic AILimits before the action, evidence during, responsibility afterwards. Nicola Fabiano’s book on the governance of agentic systems, with a preface by Antonino Caffo.Chapter 16 by Valentina Grazia SapuppoRead the article
InterviewLaw and the digital giantsThe Meta settlement on minors is not a conviction. The United States and Europe take opposite paths, and on AI agents the question of who answers remains open.Un Giorno Speciale on Radio Radio, with Alessio De Paolis · audio from 2:26:00 · in ItalianListen to the interviewWatch the videoRead the article
ContributionThe Digital Omnibus reshapes the AI ActNew deadlines for high-risk systems and a clarification on the AI literacy duty: more time to comply, no discount on preparing people and processes.Article written for the Skilla blog, in ItalianRead on Skilla
SpeakerDigeat Festival 2026Valentina Grazia Sapuppo among the speakers of the festival on data protection, digital archives and the rules of the future. She takes part in the panel «The rules of AI: new laws or principles of law?».Friday 6 November 2026, 16:30, Ex Convitto Palmieri, LecceThe panelSpeaker profileThe festival
Moderator and speakerAI AnthropoCosmic 2026Valentina Grazia Sapuppo in the project of the Università Pontificia Salesiana on Person, Environment and Cosmos: moderator of the morning session of the closing conference and speaker at the AI Laboratori del Domani on e-commerce and AI.14 November 2026, online · 28 November 2026, Università Pontificia Salesiana, Rome · sessions held in ItalianThe conferenceThe sessionThe contributionSpeakerThe project