In this episode of Legal Break, Giulio Coraggio, location head of the Italian Intellectual Property & Technology Law group at the law firm DLA Piper and the journalist Antonio Ravenna explain an important Italian court decision about DPO liability, GDPR, and cyber fraud.

A company lost €390,000 in a Business Email Compromise (BEC) attack: criminals sent fake payment instructions and the money went to the wrong bank account. The company tried to blame its external DPO, but the Court of Florence (Decision No. 3034 of 29 May 2026) said no.

Giulio and Antonio explain, in clear and simple words, why the DPO’s job under the GDPR is to advise and monitor, not to make security decisions, and why the duty to put real security measures in place stays with the company. They also share practical lessons: why good documentation is the DPO’s best defense, why ignoring the DPO’s advice can create liability for the company, and why naming a DPO is not a replacement for real cybersecurity.

Send us Fan Mail

📌 You can find our contacts 👉 www.dlapiper.com

Is your organization truly ready for NIS 2? Italy transposed the NIS 2 Directive through
Legislative Decree 138/2024 — but implementation is complex, obligations are strict, and
the criticalities are real.

In this episode of The Legal Break, Giulio Coraggio, location head of the Italian Intellectual Property and Technology department at the global law firm DLA Piper and the journalist Antonio Ravenna give a clear, practical breakdown of what NIS 2 means for companies operating in Italy today.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📌 KEY TOPICS COVERED
━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✔ NIS 2 Directive (EU 2022/2555) — what changed vs. NIS 1
✔ Italian transposition via Legislative Decree 138/2024
✔ 18 sectors in scope, including 11 "highly critical" sectors
✔ Essential vs. important entities: how to determine your category
✔ Registration obligations with ACN (Agenzia per la Cybersicurezza Nazionale)
✔ Technical and organizational security measures
✔ Incident notification timelines and requirements
✔ Supply chain and third-party vendor risk
✔ Management body accountability and personal liability
✔ Sanctions up to 0.1% of global turnover for essential entities
✔ Remaining open questions and compliance roadmap

━━━━━━━━━━━━━━━━━━━━━━━━━━━━
👥 SPEAKERS
━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🔹 Giulio Coraggio — Partner, Technology & Data, DLA Piper Italy
LinkedIn: / giulio-coraggio
Blog: https://www.gamingtechlaw.com

🔹 Antonio Ravenna — Legal Journalist

━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🔗 USEFUL RESOURCES
━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📄 D.Lgs. 138/2024 (Official text): https://www.normattiva.it
🌐 ACN – Agenzia per la Cybersicurezza Nazionale: https://www.acn.gov.it
🌐 DLA Piper Technology & Data practice: https://www.dlapiper.com

━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🎙️ ABOUT THE LEGAL BREAK
━━━━━━━━━━━━━━━━━━━━━━━━━━━━
The Legal Break is DLA Piper's podcast series where legal experts decode the most relevant regulatory and legal developments for business — clearly, concisely, and without the jargon.

🔔 Subscribe so you never miss an episode.
👍 Like this video if you found it useful.
💬 Have a question about NIS 2 compliance? Drop it in the comments.

Send us Fan Mail

📌 You can find our contacts 👉 www.dlapiper.com

Italy just became the first EU country to pass a comprehensive national AI law — and the real game-changer is what comes next.

In the time it takes to finish your coffee, Giulio Coraggio, location head of the Italian Intellectual Property and Technology department at the global law firm DLA Piper, and journalist Antonio Ravenna break down how Italy's Law No. 132/2025 plugs into the EU AI Act, and why the upcoming implementing decrees could reshape compliance for anyone building or deploying AI in Italy.

No 40-page memos. No jargon. Just the essentials — in one coffee break. ☕

In this episode:
🇮🇹 Why Italy moved first in Europe — and what Law No. 132/2025 actually changes
⚖️ How the Italian framework is designed to sit inside the EU AI Act (not on top of it)
📜 The implementing decrees coming by October 2026 — and what they'll cover
🏥 Sector hotspots: healthcare, employment, professional services, justice & deepfakes
🚨 The compliance traps companies need to watch now

Whether you're in-house counsel, a compliance lead, or a founder shipping AI products, this is the short briefing you didn't know you needed.

🎧 Follow The Legal Break wherever you listen — new episodes unpack the legal topics that matter, one coffee at a time.
💬 Got a topic you want us to cover? Let us know.
⭐ Enjoying the show? Leave a rating and review — it helps more listeners find us.

Send us Fan Mail

📌 You can find our contacts 👉 www.dlapiper.com

The European Union is already revisiting the AI Act before many companies have even completed their first compliance assessments.

In this episode, Giulio Coraggio and Antonio Ravenna discuss the impact of the changes introduced by the EU Digital Omnibus package and what businesses should expect next from the evolving European AI regulatory framework.

The conversation explores:
• why the European Commission proposed changes to the AI Act
• the simplification measures affecting high-risk AI systems
• the relationship between the AI Act and machinery legislation
• the new timelines and delegated acts expected from the Commission
• whether the reforms will simplify compliance or increase uncertainty
• what companies should do now to prepare for AI governance obligations

Giulio Coraggio is a technology and data lawyer at the global law firm DLA Piper, where he focuses on artificial intelligence, privacy, cybersecurity, digital regulation, and technology transactions. He regularly advises international companies on AI governance and compliance strategies.

Antonio Ravenna is a journalist focused on artificial intelligence, innovation, and digital transformation, regularly covering the evolution of AI regulation and its impact on businesses and society.

As AI becomes embedded in everyday business operations, AI governance can no longer be postponed. The regulatory framework may evolve, but the need for responsible AI management remains critical.

Subscribe for more insights on artificial intelligence regulation, privacy, cybersecurity, technology law, and digital innovation.

Send us Fan Mail

📌 You can find our contacts 👉 www.dlapiper.com

The European Union has agreed on major changes to the AI Act to reduce overlap with machinery, product safety, and sector-specific regulation. But is this just simplification — or the beginning of a broader rethink of AI regulation in Europe? In this episode of Diritto al Digitale, Giulio Coraggio, technology and data lawyer at DLA Piper, analyzes the latest AI Act amendments, the delay of high-risk AI obligations, the impact on industrial AI, medical devices, robotics, and what companies must do now to prepare for AI compliance, cybersecurity, and governance challenges.

Send us Fan Mail

📌 You can find our contacts 👉 www.dlapiper.com

Why are 82% of companies investing in artificial intelligence, yet 81% fail to generate real business value?

In this episode of Diritto al Digitale, hosted by Giulio Coraggio, technology and data lawyer at the global law firm DLA Piper, we explore the growing AI value gap and its profound legal and strategic implications for businesses.

The episode provides a detailed legal analysis of why artificial intelligence initiatives often remain isolated and fail to scale, focusing on critical issues such as AI governance, AI Act compliance, and GDPR risks. It explains why treating AI as a simple technological tool—rather than a regulated system—creates both missed opportunities and significant exposure to liability.

We also examine the implications of high-risk AI systems under the AI Act, the regulatory challenges posed by AI agents and autonomous decision-making, and how evolving legal frameworks are shaping the future of AI adoption in Europe and globally.

A key focus is on governance: how companies can design structured AI governance models to enable scalability, ensure compliance, and turn AI into a true competitive advantage rather than a legal risk.

This episode is designed for legal professionals, in-house counsel, compliance officers, and business leaders dealing with AI regulation, data protection, and digital transformation.

Key topics include: AI value gap, AI governance frameworks, AI Act requirements, GDPR and automated decision-making, AI agents regulation, legal risk management, and scalable AI adoption.

If you are advising on or implementing AI strategies, this episode will help you understand why the real challenge is not the technology itself—but how it is governed, structured, and legally managed.

Send us Fan Mail

📌 You can find our contacts 👉 www.dlapiper.com

The global race to regulate artificial intelligence is accelerating—and companies can no longer afford to ignore it.

In this episode of Diritto al Digitale, Giulio Coraggio, Technology and Data Lawyer at DLA Piper, analyzes the growing divergence between the EU AI Act and the US AI Policy Framework, two competing models that are reshaping AI governance, compliance, and innovation strategies worldwide.

The European Union is advancing a risk-based regulatory framework under the AI Act, reinforced by the latest developments of the Digital Omnibus package, introducing stricter obligations for high-risk AI systems, data governance, and compliance by design. At the same time, the United States is pursuing a more flexible, policy-driven approach based on soft law, voluntary standards, and ex post enforcement.

What does this mean in practice for companies operating globally?

This episode explores:

- The latest updates on the EU AI Act and Digital Omnibus
- The structure and impact of the US National AI Policy Framework
- Key differences between ex ante compliance and ex post enforcement models
- Legal, operational, and reputational risks for businesses using AI
- Why AI governance is no longer optional for organizations

If your business is developing, deploying, or integrating artificial intelligence, understanding these regulatory dynamics is critical to managing risk and staying competitive.

Listen now to gain practical insights into AI regulation, compliance strategies, and the future of global AI governance.

Send us Fan Mail

📌 You can find our contacts 👉 www.dlapiper.com

Artificial intelligence, semiconductors, satellites, robotics.

Most people see them as civilian technologies powering the digital economy.

But many of these innovations also have a military dimension.

They are what regulators call dual-use technologies — technologies that can serve both civilian and defence purposes.

As geopolitical tensions rise and global defence spending reaches record levels, these technologies are becoming strategic assets for governments and industry.

And this shift is triggering a rapid expansion of European regulation, from export controls to foreign investment screening, sanctions regimes and industrial policy initiatives such as the European Defence Fund and the EU Chips Act.

In this episode of Diritto al Digitale, Giulio Coraggio, location head of the Italian department of Intellectual Property & Technology at the global law firm DLA Piper, explores:

• what qualifies as a dual-use technology
• the EU legal frameworks governing these technologies
• why companies developing AI, chips, robotics and aerospace technologies are increasingly affected by defence regulation
• the industrial opportunities for European and Italian companies in this rapidly evolving sector
• and the growing intersection between technology, law and geopolitics

If you work in technology law, compliance, defence, AI, semiconductors or export control, this is a conversation you cannot afford to miss.

Because the future of innovation in Europe will increasingly depend on technologies that are both civilian and military at the same time.

Send us Fan Mail

📌 You can find our contacts 👉 www.dlapiper.com