About Me

Nicola Franchetto

Lawyer specialised in data laws, privacy and digital compliance.

I am Partner and Lead Innovation Officer at ICTLC Factory (ICT Legal Consulting), one of the leading firms in Europe in the TMT and data protection sector. Recommended by Legal 500 for data protection.

For over 15 years I have assisted national and international companies in navigating the European regulatory landscape: GDPR, AI Act, DORA, NIS2, Data Act. My approach combines legal expertise, technological vision and pragmatism. I don’t sell paper compliance — I build solutions that work in practice.

Professional experience

Franchetto Legal — Founder

2020 – present

Personal law firm specialised in data laws. Direct consulting for companies on GDPR, AI Act, DORA, cybersecurity and digital compliance. DPO as a Service for organisations in various sectors.

ICT Legal Consulting — Partner & Lead Innovation Officer

2015 – present

Studio partner and head of technological innovation through ICTLC Factory. Development of tools and platforms for managing privacy obligations (RoPA, LIA, DPIA). Consulting for corporate and multinational clients on data protection, cybersecurity and regulatory compliance.

Clients and sectors

Over the years I have worked with organisations of every size — from startups to listed multinationals — in sectors including: finance, fashion, sport & wellness, technology, healthcare, public administration. I cannot mention names for ethical reasons, but my work is recognised by Legal 500 and the professional certifications I have obtained.

Certifications and recognitions

• Legal 500 — Recommended for Data Protection (Italy)
• CIPP/E — Certified Information Privacy Professional / Europe (IAPP)
• Europrivacy — European certification on data protection
• ISO 27001 / ISO 27701 — Expertise in information security and privacy management systems
• Maastricht University — DPO Certification Programme

Areas of specialisation

• GDPR and personal data protection
• AI Act and artificial intelligence regulation
• DORA and digital operational resilience (financial sector)
• NIS2 and cybersecurity for critical infrastructure
• Data Act and data access
• Model 231 and whistleblowing
• DPO as a Service

Training and lecturing

In addition to consulting, I regularly hold workshops and training sessions on data protection, AI Act and cybersecurity for companies, trade associations and institutions. I believe training is an integral part of compliance: an aware team is the first line of defence.

Contact details

Email: nicola@franchetto.legal
PEC: nicola.franchetto@pec-legal.com
LinkedIn: nicola-franchetto
X: @nickfranketto