Federica Mammì Borruto’s practice focuses on data protection, e-commerce, technology, and consumer protection law matters.

Federica also has experience in cybersecurity matters, unfair commercial practices, and misleading advertising. She assists clients in the context of corporate and commercial transactions and advice on compliance, as well as litigation, internal investigations, and investigations carried out by public authorities.

Federica joined the firm in 2016.

Read More

Selected Activities

trigger
  • Teaching Assistant in “Principles of Civil Law” at LUISS Guido Carli University (Rome), since 2019.

Publications

“Whistleblowing in Focus: Recent Developments, Emerging Issues, and Considerations for Companies. Part Three: Looking Ahead,” Cleary Gottlieb Alert Memo, January 23, 2025

“Cybersecurity Law Enters Into Force,” Cleary Gottlieb Alert Memo, July 25, 2024 

“The AI Act has been published in the EU Official Journal,” Cleary AI and Technology Insights blog, July 12, 2024 

“AI Act and the GDPR: How Data Protection Rules Fit Together,” Agenda Digitale, July 8, 2024

IT systems and services for e-mail management in the workplace and metadata processing, June 27, 2024

“Intelligenza artificiale e obblighi per le aziende: come cautelarsi,” Il Sole 24 Ore - Econopoly, June 6, 2024

Statement 2/2024 on the Financial Data Access and Payments Package, June 5, 2024

“Italian Transposition of the Omnibus Directive: the Reform in Pills,” Cleary Gottlieb Alert Memo, September 11, 2023

“Italian National Cybersecurity Perimeter: Some Considerations Following Completion of the Regulatory Framework,” Cleary Gottlieb Alert Memo, April 17, 2023 

“Key Takeaways from the EDPBs Cookie Banner Taskforce Report,” Cleary Cybersecurity and Privacy Watch blog, February 9, 2023.

“Sfide legali collegate all’Intelligenza Artificiale Le azioni da mettere in campo in ottica di prevenzione e gestione del ‘rischio privacy,’” I quaderni del Gruppo ASLA di Corporate Compliance, 2022

“Due Diligence for Private Acquisitions (Italy),” Practical Law, 2022

“President Biden Signs Executive Order on New EU-US Data Privacy Framework,” Cleary Cybersecurity and Privacy Watch blog, October 7, 2022.

“European Health Data Space – The Commission’s Proposal on a Single Market For Digital Health Services, Products, and Data,” Cleary Cybersecurity and Privacy Watch blog, July 19, 2022

“The New Commission SCCs for Data Transfers Under GDPR – More Questions Than Answers?” Cleary Gottlieb Alert Memo, July 6, 2022

“Notes on the margins of the conference ‘DNA banks: use, abuse and opportunities’ in JEI - JUS AND INTERNET, cat. Infogiuridica, March 2017

Events