Lauro is a specialist in data protection and digital regulation, advising digital platforms, media publishers, and IoT companies. His practice includes strategic product guidance and regulatory engagement, tackling complex issues like profiling, AI compliance, biometric data processing, and online child safety.

Lauro's experience

  • Assisted the provider of a widely used consumer AI product to update its data protection impact assessments and best interests of the child assessments to account for new feature launches, in anticipation of consultation with UK and EU regulators.

  • Advised the provider of an AI-powered KYC tool on the potential applicability of the EU AI Act’s provisions relating high-risk AI systems.

  • Advised a platform client in relation to a cross-border regulatory inquiry. This included advising on defence strategy and anticipated remediations. It also included co-counselling on connected litigation.

  • Advises a leading vehicle manufacturer on data protection for connected vehicles and robots, including voice assistants and remote diagnostics. Covers data sharing under the EU Data Act, law enforcement access, NIS 2 compliance across jurisdictions, and applicability of the UK PSTI Act.

  • Advised a large digital platform on the overhaul of its approach to data protection accountability documentation globally. The project sought to consolidate and streamline documentation and ensure consistent approaches to regulatory compliance across different products. The matter also involved ensuring consistency with multiple compliance projects running in-parallel.

  • Advises a global news publisher on website monetisation via targeted ads and content. Covers ePrivacy rules, personal data classification, consent, IAB Transparency & Consent Framework, and roles in the ad ecosystem. Also conducts vendor due diligence to ensure compliance and effective data governance.

  • Advised a photo services company on its provision of automated services using facial recognition. This involved providing detailed advice on the definitions and rules relating to the processing of “biometric data” and representing the client in a consultation with the UK ICO.

  • Supported a device manufacturer’s efforts to comply with various national laws requiring the implementation of parental controls.

  • Supported a platform client in updating compliance documentation for children’s data processing across products. Work included data protection impact and best interests assessments, aligning with UK AADC, Irish DPC Fundamentals, and global standards. Covered age assurance methods and measures to ensure regulatory compliance across jurisdictions.

  • Spent considerable time on secondment at a major digital platform provider, where he supported the client's engagements with data protection regulators, managed global compliance programmes, and advised on requirements relating to protecting children online.

    • United Kingdom

Credentials

  • 2024
    Made Partner in Pinsent Masons
  • 2021
    Qualified - England and Wales
  • 2018
    Joined Pinsent Masons
  • 2013
    Qualified - Malta
  • 2012
    University of Malta - Doctor of Laws
  • 2010
    University of Malta - Bachelor of Laws (First Class)
Load More

Out-Law / Insight by Lauro Fava

We are processing your request. \n Thank you for your patience. An error occurred. This could be due to inactivity on the page - please try again.