Data Governance Act

We work alongside public sector bodies in devising organisational and contractual models for the re-use of the protected data they hold during their activities. Where requested, the service starts from a census of the information assets, of the exclusive rights over protected materials and of the compliance steps already taken under the GDPR for personal data and continues with the verification of the metadata and the analysis of the most suitable technical solutions — anonymisation, pseudonymisation or access within secure processing environments — to give re-users access to the data in full compliance with the legislation.
We also assist the body in defining the contractual conditions with re-users and in drawing up any exclusive arrangements, where justified by the public interest. The added value is an approach that combines legal and technical expertise for data re-use that is secure, compliant and genuinely workable

We work alongside data re-users in accessing and lawfully re-using protected data held by public sector bodies (personal data, commercially confidential data and other data covered by exclusive rights). We assist the Client in obtaining the consents of data subjects or the permissions of the rights holders needed for re-use, in complying with the technical conditions set by the body — such as anonymisation, pseudonymisation or the use of secure processing environments — and in ensuring GDPR compliance for personal data. We also handle the compliance obligations connected with data transfers, including to third countries, with particular attention to highly sensitive non-personal data and to the safeguards laid down by the Data Governance Act.
The service is personalised to the nature of the data and the purposes of the re-use. The added value is oversight that combines legal and technical expertise, reducing non-compliance risks across the entire re-use cycle.

We assist data intermediation services providers in the notification process before the national competent authority under Regulation (EU) 2022/868 (Data Governance Act), which can be started in Italy now that AgID has activated the relevant procedure. We first verify that the service model complies with the requirements of the Regulation — in particular the neutrality of the provider’s third-party role and the structural and legal separation of the intermediation activity from the other services offered — and, through one or more working sessions with the Client’s contacts, we gather the documents and information needed for the notification, agree the description of the service and prepare the complete draft application. We then take care of submitting the notification and assisting the Client should AgID request clarifications or additions during the procedure, through to obtaining the confirmation that allows use of the label ‘data intermediation services provider recognised in the Union’. The service is designed to oversee both the legal and the operational aspects of the entire notification procedure.

We assist data altruism organisations both at the set-up stage and in managing the compliance obligations laid down by the Data Governance Act. Our legal advice covers the establishment of recognised data altruism organisations and, subsequently, support with their registration in the national public registers. We also take care of keeping the activity records and preparing the annual report, drafting the terms and conditions and defining the organisational and technical measures needed to prevent unauthorised transfers of, or access to, the data.
The service is personalised to the nature of the organisation and the objectives of general interest it pursues. Ours is an integrated advisory service that accompanies the organisation from its creation to full operation, in conditions of compliance and transparency.

In managing its day-to-day activities, every company runs into a range of ordinary legal issues that often call for multidisciplinary input — with higher management costs and a greater dispersion of energies, which inevitably affect how quickly action can be taken. This is the scenario the Legal Desk service offered by netforLegaL is designed for. It is a multidisciplinary legal assistance and advisory service whose availability and, above all, speed the Client can always count on. The service meets the need to outsource the handling of legal issues in less complex business contexts and can also be a valuable support to the in-house legal department in more structured organisations.
The involvement of a pool of senior professionals — organised by area of specialisation — allows the Client to capitalise on the advisory experience gained, ensuring constant regulatory updates in its sector. The multidisciplinary approach also delivers attractive economies of scale.

Our areas of work include:

• Support to public sector bodies in devising models for data re-use;
• Assistance to re-users of public sector data;
• Support to data intermediation services providers;
• Assistance to data altruism organisations;
• Set-up of the governance and compliance obligations under the Data Governance Act.

For each Client the service involves a “contact lawyer”, who coordinates the work and has an ongoing relationship with the company. The presence of this figure brings:

• A stronger relationship of trust with the Client;
• The progressive personalisation of the service, as knowledge of the company context steadily grows;
• The guarantee of a constant legal presence, which also plays a proactive role towards the Client.

As for how the service is offered, the methodology is that of a typical help desk: maximum freedom and flexibility for the Client to set upfront an annual budget for the initiative, to make the most of its economies of scale.

The expected result is to turn what has perhaps been perceived until now as the cost of regulatory compliance into an insurance policy — or an investment — in the peace of mind of doing things properly.

Our services also include training sessions on data governance and data re-use. Our training is designed to offer both a general grounding in the principles of the legislation and more specific, technical and operational content, tailored to the Client’s sector and to any special regulations that apply. As part of our ongoing advisory work, we also deliver dedicated training sessions on the correct use and implementation of the documentation and procedures adopted.
All our learning services are modulated and adapted to the specific needs of the Client and can be delivered both in class and at distance; timing, duration and recipients of such sessions are always defined in advance and agreed upon with the Client, with the possibility to arrange single sessions for personnel with specific duties and competences within the company.
We furthermore offer drafting of learning materials (e.g. awareness raising materials, simulations of possible scenarios with fictional characters, legal text easily accessible via hypertext) which can also be uploaded into e-learning platforms including animations, sounds, multiple answers questions and randomized answers.
We also offer a range of “ready-to-go” solutions, thanks to a consolidated collaboration with our technological partner Mediamed Interactive, which allows us to offer to our Clients a product based on the more evolved and widespread training platforms, so that our Clients can enjoy both standard sessions or more tailored sessions.