Alessandro Vasta

 PARTNER

PADUA
INFORMATION TECHNOLOGY & PRIVACY.
COMMERCIALE AND INTERNATIONAL TRADE LAW.
CORPORATE AND M&A.
INDUSTRIAL AND INTELLECTUAL PROPERTY.

Alessandro Vasta has been a Partner of Tonucci & Partners since 2003, where he leads the Data Protection, Cybersecurity, New Technologies and Artificial Intelligence practice.

He has also worked for several years in compliance matters under Italian Legislative Decree No. 231/2001, in particular managing projects aimed at drafting Organisational Models under Legislative Decree 231/2001 and holding appointments on the Supervisory Bodies of leading public and private companies.

Previously, he worked with leading Italian and international law firms.

He is an IAPP-certified AIGP (Artificial Intelligence Governance Professional) and an ISO/IEC 42001:2023 Lead Auditor for artificial intelligence management systems. He is a member of the Steering Committee of ASSODPO, where he coordinates the Scientific Committee, and a member of the AI Working Group of CEDPO (the Confederation of European Data Protection Organisations). He also represents the Firm in Techlaw, an international network of leading independent law firms present in more than 35 countries.

He acts as Data Protection Officer for leading Italian companies and multinationals across the following sectors: large-scale retail, public bodies and publicly-owned companies, scientific research, healthcare, sport, fashion, manufacturing, ICT, travel & retail and transport sectors.

He sits on Supervisory Bodies under Legislative Decree No. 231/2001 and on boards of statutory auditors in the public sector, real estate development and construction, manufacturing and automotive.

He advises on regulation under the EU strategy for the digital single market and for data (includingthe Data Act and the Digital Services Act) and assists clients with the implementation and governance of artificial intelligence systems, compliance with the NIS2 Directive and cyber legislation, personal data protection, and the adoption of organisational models under Legislative Decree No. 231/2001. He speaks regularly at conferences, workshops and master’s programmes in Italy and abroad, and is the author of publications on data protection and technology law.

EDUCATION

Post-graduate Degree in International Trade and Finance, Faculty of Law – University of Padua, (1994).
Law Degree cum laude, University of Padua (1991).

QUALIFICATIONS

Admitted to practice before the High Courts (2012).
Admitted to the Bar Association – Court of Padua (1994).

LANGUAGES

Italian (mother tongue)
English
French

In evidenza

2026 Privacy Symposium.

The Privacy Symposium, an international event dealing with data governance, regulatory compliance and innovative technologies, took place in

2025 CEDPO DPO Conference

As Coordinator of ASSO DPO Working Group on Artificial Intelligence as well as association’s representative within CEDPO Artificial