The GDPR processes. Drafting the Transfer Impact Assessment.

Alessandro Del Ninno participated as a lecturer in a series of practical workshops dedicated to the drafting of GDPR procedures, organized by Paradigma and addressed to professionals and corporate managers involved in data protection and compliance activities. The training programme, structured into several thematic sessions, examined from an operational perspective some of the main organizational procedures required to ensure the proper implementation of the General Data Protection Regulation within organizations.

Particular attention was devoted to the session focusing on the TIA (Transfer Impact Assessment) procedure, dedicated to the assessment of transfers of personal data to third countries. During his presentation, Attorney Del Ninno illustrated the European regulatory framework applicable to extra-EU data transfers, analysing the concept of personal data transfer in light of the guidelines issued by the European Data Protection Board and the role that transfer impact assessments play within the compliance framework established by the GDPR.

The session examined in particular the operational steps required to conduct a Transfer Impact Assessment, starting from the mapping of personal data flows and the identification of the exporting and importing entities, up to the analysis of the legal framework of the third country receiving the data. It also addressed the need to identify supplementary technical, organisational or contractual measures capable of addressing potential gaps in the level of protection ensured outside the European Economic Area.

During the workshop, further attention was given to the documentation of the assessment process and the formalisation of the TIA outcomes, as well as to the ways in which this procedure should be integrated with other corporate privacy compliance activities, highlighting the importance of periodic updates and continuous review of the assessments performed.

Through this series of workshops, Attorney Del Ninno provided participants with a practical methodology for drafting and implementing key GDPR procedures, emphasising how such tools represent an essential element in translating the principles of European data protection law into structured, verifiable organisational processes fully integrated within corporate governance models.

Conference Schedule