Regulating the Processing of Personal and Non-Personal Data in ICT Agreements.

The webinar “Regulating the Processing of Personal and Non-Personal Data in ICT  Agreements”, entirely designed and delivered by Avv. Alessandro Del Ninno, provides a structured and practical overview of the pivotal role that data governance plays in modern ICT contracting. The session examines how the management of personal data, pseudonymised data, anonymous data and non-personal data affects the negotiation, drafting and performance of technology contracts, in light of the GDPR, the EU Data Governance Act, the Data Act, and the latest European developments on interoperability and cross-border data flows.

The training offers a comprehensive framework for correctly allocating party responsibilities, identifying the proper privacy qualification in various contractual models (software supply, cloud services, outsourcing, data sharing), and drafting clauses relating to security, audit, subcontracting, business continuity and incident management. Particular attention is devoted to the distinction between personal and non-personal data, the regulation of co-generated data, and the obligations imposed on providers and customers in cloud and AI-based architectures, as well as the related implications throughout the ICT contract lifecycle.

Avv. Del Ninno also illustrates the contractual safeguards required to govern international data transfers, the relationships between Controllers, Joint Controllers and Processors, the documentation and transparency obligations, and the liability framework applicable to security breaches or misuse of data. The webinar concludes with practical guidance for drafting contracts compliant with the evolving European regulatory landscape, equipping participants with immediately applicable tools for negotiating and managing ICT contracts in complex environments.

Workshop Schedule