Personal data protection

Advice on the GDPR and the Italian Privacy Code is complemented by staff training, operational experience with the major AI systems and application development. Data protection is thus assessed in the actual processes, and not only in the documents describing them.

Certification concerns the individual’s professional competence: it does not certify PERI Labs software or guarantee project compliance.

Activities, people and purposes

The analysis starts from data flows, the parties involved and the purposes of processing, and checks the documentation against the organisation as it actually operates.

Contracts, suppliers and responsibilities

Notices, agreements and supplier relationships are examined in a coordinated way. In AI projects the analysis extends to the data transmitted to the system and to the uses, including model training, reserved to the supplier.

Professional awareness

Targeted training in support of organisational choices: recognising personal data and confidential information, understanding the tools’ terms of use and identifying when further assessment is needed.

Pseudonymisation and masking

PERI Labs projects integrate identifier replacement, contextual masking and review of the information to be protected, while maintaining the legal distinction between pseudonymisation and anonymisation.

Quality and review

An incorrectly recognised item or an uncertain OCR reading can affect both analysis and protection: quality checks are designed to make these limits visible.