15
Sep
By Luca Gambini and Elisa Stefanini
1. Introduction
For the first time in Italy, a court has affirmed that when a data controller changes, there is no need to acquire new consent from the participants of a research project involving the processing of sensitive data, should the research purposes not change.
Such an innovative principle is particularly relevant in the case of a merger and acquisition (M&A) deal involving a change of ownership of a database containing sensitive data such as a...