Work

Books

B. Lazarotto, O. Hinrichs & P. De Hert (eds), Article-by-Article Commentary on the Data Governance Act and Data Act, Edward Elgar, forthcoming 2027.

Journal Articles

B. Lazarotto, P. R. Trigo Kramcsák & S. Stalla-Bourdillon, ‘Giving EU Data Governance Law a Second Life? From Rebranding to Real-World Impact’, Computer Law & Security Review, Vol. 61, 2026 (forthcoming).

R. Saverino, P. R. Trigo Kramcsák & B. Lazarotto, ‘The Rise of AI Authorities? A Closer Look at Latin America’s Institutional Responses and External Influences’, University of Bologna Law Review, 10(2), 2025, pp. 43–84.

B. Lazarotto, ‘On the Frictions Between the GDPR and the Data Act: A Closer Look at the Hamburg Position Paper’, Privacy and Data Protection, 2025(8), pp. 3–7.

B. Lazarotto, ‘Can Business-to-Government Data Sharing Serve the Public Good?’, Opinio Juris in Comparatione, Special Issue, 2024, pp. 145–160.

B. Lazarotto, ‘The Right to Data Portability: A Holistic Analysis of the GDPR, DMA and the Data Act’, European Journal of Law and Technology, BILETA Special Issue, 15(1), 2024.

B. Lazarotto, T. Crepax & G. Mitisha, ‘Measuring Data Access and Re-Use in the European Legal Framework for Data: The Case of Vehicle Data’, Open Research Europe, 3:192, 2023.

B. Lazarotto, ‘The Grass Is Not Always Greener on the Other Side: Digital Astroturfing, Disinformation and the Erosion of the Rule of Law’, LSU Journal of Social Justice & Policy, 2023, pp. 113–124.

B. Lazarotto, ‘The Data Act: Empty Promises for Business-to-Government Data Sharing?’, Privacy in Germany (PinG), 5/2022, pp. 1–6.

B. Lazarotto, ‘The Impact of Disinformation During the Covid-19 Pandemic and Its Regulation by the EU’, UNIO – EU Law Journal, 6(2), 2020, pp. 25–34.

Book Chapters

P. R. Trigo Kramcsák, B. Lazarotto & R. Saverino, ‘The Incipient Latin American Approach to AI Governance: Highlighting Data Governance Issues Through Emerging Supervisory Authorities’, in B. Luca & B. G. Walter (eds), AI From the Global Majority (UN IGF Coalition Outcome Report), Springer, 2025, pp. 53–59.

B. Lazarotto, ‘Artigo 5, X – Tratamento’, in L. Schertel Mendes, I. Maria Rosal & E. Fernandes (eds), Lei Geral de Proteção de Dados Pessoais Comentada, Forense, 2025, pp. 103–106.

B. Lazarotto & P. De Hert, ‘Public-Private Partnerships in Smart Cities and the Privatisation of Citizenship’, in A. Smets & P. Ballon (eds), Handbook of Platform Urbanism, Edward Elgar, 2025, pp. 115–127.

B. Lazarotto, ‘Smart Governments: The Pitfalls of Big Data in Public Administration’, in Social Informatics, Routledge, 2025, pp. 129–141.

B. Lazarotto, ‘The Role of Technology in Citizens’ Right to Good Administration: Examining the Impact of Smart Governments’, in J. Goossens, E. Keymolen & A. Stanojević (eds), Public Governance and Emerging Technologies, Springer, 2025, pp. 43–59.

B. Lazarotto & P. R. Trigo Kramcsák, ‘Another Data Dilemma in Smart Cities: The GDPR’s Joint Controllership Tightrope Within Public-Private Collaborations’, in M. Jensen, C. Lauradoux & K. Rannenberg (eds), Privacy Technologies and Policy (APF 2024), Springer, 2024, pp. 156–167.

B. Lazarotto, ‘Unlocking Data Sharing Dilemmas: A Comparative Analysis of Business-to-Government Data Sharing Regulations’, in J. Drexl, P. Boshe, M. Hennemann & K. Wiedemann (eds), Global Data Law Conference Series, Springer, 2023, pp. 173–187.

Book Reviews

B. Lazarotto, ‘Boundaries of Data (Review)’, European Data Protection Law Review, 10(3), 2024, pp. 318–322.

B. Lazarotto, ‘Digital Oil: Machineries of Knowing (Review)’, Italian Journal of Science & Technology Studies, 14(28), 2024, pp. 133–137.

B. Lazarotto, ‘Data Lives: How Data Are Made and Shape Our World, by Rob Kitchin (Review)’, Information & Culture, 58(1), 2023, pp. 121–122.

Reports & Working Papers

B. Lazarotto, P. T. Kramcsák, A. Chomczyk Penedo & S. Stalla-Bourdillon, ‘The Future of Data Governance in the EU: A Response to the Call for Evidence on the Data Union Strategy Initiative’, Brussels Privacy Hub Working Papers, 12(1), July 2025.

B. Lazarotto, ‘Data Protection and Data Law in South America: An Overview’, Brussels Privacy Hub Working Papers, 11(1), January 2025.

R. Adams, F. Adeleke, … B. da Rosa Lazarotto & P. Groenewolt, Global Index on Responsible AI 2024 (1st ed.), Global Center on AI Governance, 2024.

C. Rossi Chauvenet, S. Martinelli, … et al., ‘Use and Re-Use of Urban Data in the Smart City Domain’, Data Valley Consulting / City Vision, Commissioned Report, V.01/2023.

G. González Fuster, J. Ausloos, … B. da Rosa Lazarotto et al., ‘The Right to Lodge a Data Protection Complaint: Ok, But Then What?’, Access Now Commissioned Report, 2022.

Selected Commentary

P. T. Kramcsák & B. Lazarotto, ‘”Personal Data”: More Than a Definition — a Quasi-Constitutional Stake in EU Law in the Era of the Digital Omnibus’, European Law Blog, March 2026.

B. Lazarotto, ‘The Data Omnibus: The Good, the Bad, and the Ugly Behind the DGA and Data Act Rewrite’, MediaLaws, December 2025.

B. Lazarotto & S. Stalla-Bourdillon, ‘Search Queries and Anonymization: How to Read Article 6(11) of the DMA and the GDPR Together?’, European Law Blog, April 2024.

B. Lazarotto & G. Malgieri, ‘The Data Act: A (Slippery) Third Way Beyond the Personal/Non-Personal Data Dualism?’, European Law Blog, May 2023.

B. Lazarotto, ‘From Wellness Apps to Data Holders: The Role of Digital Health Apps in the European Health Data Space’, 4th Health, Ethics, Law and Technology Symposium, Brussels, Belgium, 23 April 2026.

B. Lazarotto, ‘Digital Omnibus Amendments to the Data and the Data Governance Acts’, European University Institute Digital Omnibus Talk, Florence, Italy / online, 19 March 2026.

B. Lazarotto, ‘The Legal Construction of Data Markets: Compatible with Personal Data Protection?’, UPCAST Workshop, KU Leuven, Belgium, 8–9 December 2025.

B. Lazarotto, ‘The Interaction Between EU Data Laws and the GDPR’, Special Topics in Digital Law, Data, and AI, Instituto Brasileiro de Ensino, Desenvolvimento e Pesquisa (IDP), online, 12 November 2025.

B. Lazarotto, ‘A Tale of 3 Cities: Rethinking Data Governance in Smart City Public-Private Partnerships’, Privacy Law Scholars Conference Europe (PLSC-E), Leiden, Netherlands, 23–24 October 2025.

B. Lazarotto, ‘The EU’s Data Governance Gamble: Regulation, Reality and the Road Ahead’, Brussels Privacy Hub Webinar, 21 October 2025.

B. Lazarotto, ‘Intervenability in Data Spaces: A Layered and Multi-Dimensional Concept’, Data for Policy 2025 – Europe, The Hague, Netherlands, 12–13 June 2025.

B. Lazarotto, ‘The Right to Data Portability: A Holistic Analysis of the GDPR, DMA and the Data Act’, Speed Seminar, NOVA University Lisbon, Portugal, 12 March 2025.

B. Lazarotto, ‘The Incipient Latin American Approach to AI Governance: Highlighting Data Governance Issues Through Emerging Supervisory Authorities’, Internet Governance Forum (IGF), Riyadh, Saudi Arabia, 18 December 2024.

B. Lazarotto, ‘The Impact of EU AI Regulation on Latin American AI Governance: The Rise of AI Authorities?’, Privacy Law Scholars Conference Latin America, 11 December 2024.

B. Lazarotto & P. Trigo Kramcsák, ‘Smart City Data: Resolving Public-Private Tensions in Joint Controllership’, Digital Legal Talks: AI and the Judiciary, Utrecht, Netherlands, 28–29 November 2024.

B. Lazarotto, ‘Impact of EU AI Regulation on Latin American AI Governance: The Rise of AI Authorities?’, European Privacy Law Scholars Conference, Amsterdam, Netherlands, 24–25 October 2024.

B. Lazarotto & P. R. Trigo Kramcsák, ‘Another Data Dilemma in Smart Cities: The GDPR’s Joint Controllership Tightrope Within Public-Private Collaborations’, 12th Annual Privacy Forum (APF), Karlstad, Sweden, 4–5 September 2024.

B. Lazarotto, ‘Regulation of Digital Infrastructure in the EU: From Networks to Platforms’, Webinar (chaired by L. Belli), Fundação Getulio Vargas, Rio de Janeiro, Brazil / online, 25 July 2024.

B. Lazarotto, ‘The Impact of EU AI Regulation on Latin American AI Governance: Emerging AI Authorities?’, CPDP Latam, Rio de Janeiro, Brazil, 17–18 July 2024.

B. Lazarotto & P. Trigo Kramcsák, ‘Another Data Dilemma in AI-Powered Smart Cities: The GDPR’s Joint Controllership Tightrope Within Public-Private Partnerships’, TILTing Perspectives, Tilburg, Netherlands, 8–10 July 2024.

B. Lazarotto, ‘Data Spaces: Balancing the Act of Sharing or Protecting Mixed Data Sets’, TILTing Perspectives, Tilburg, Netherlands, 8–10 July 2024.

B. Lazarotto, ‘The EU’s Digital Future: Can “Smart Governments” Be Reconciled with the Protection of Fundamental Rights?’, TILTing Perspectives, Tilburg, Netherlands, 8–10 July 2024.

B. Lazarotto, ‘Another Data Dilemma in Smart Cities: The GDPR’s Joint Controllership Tightrope Within Public-Private Partnerships’, LAILEC 2024 Research Colloquium, Leuven, Belgium, 7 June 2024.

B. Lazarotto, ‘AI in the Urban Landscape: Navigating Data Governance with Multiple Stakeholders’, Computers, Privacy and Data Protection (CPDP) 2024, Brussels, Belgium, 23 May 2024.

B. Lazarotto & P. Trigo Kramcsák, ‘Another Data Dilemma in Smart Cities: The GDPR’s Joint Controllership Tightrope Within Public-Private Collaborations’, BILETA 2024, Dublin, Ireland, 17–19 April 2024.

B. Lazarotto, ‘Measuring Data Access and Re-Use in the European Legal Framework for Data, from the GDPR to the Proposed Data Act: The Case of Vehicle Data’, Data Ethics and Governance, Brussels, Belgium, 15 January 2024.

B. Lazarotto, ‘The Role of Technology in Citizens’ Right to Good Administration: Examining the Impact of Smart Governments’, Public Governance and Emerging Technologies, Utrecht, Netherlands, 11–12 January 2024.

B. Lazarotto, ‘Unlocking Data Sharing Dilemmas: A Comparative Analysis of Business-to-Government Data Sharing Regulations’, Global Data Law Conference Series: Comparative Data Law, Munich, Germany, 7–8 December 2023.

B. Lazarotto, ‘The History of Datafication and the Rise of the Concept of “Smart”‘, 4S Annual Meeting, Honolulu, Hawaii, USA, 8–12 November 2023.

B. Lazarotto, ‘The Smart Government Paradox: A Critical Reflection on the EU Constitutional and Data Law Landscape in Light of Techno-Solutionism’, Beyond Data Protection Conference, Utrecht, Netherlands, 21–22 September 2023.

B. Lazarotto, ‘The Underuse of Personal Data, Its Opportunity Costs, and EU Policies’, CPDP 2023, Brussels, Belgium, 24–26 May 2023.

B. Lazarotto, ‘The Right to Data Portability: A Holistic Analysis of GDPR, DMA and the Data Act’, BILETA 2023, 13 April 2023.

B. Lazarotto & P. De Hert, ‘Should the State Be Smart?’, Norface Governance Online Lecture Series, University of Luxembourg, 1 March 2023.

B. Lazarotto, ‘The Implications of the Proposed Data Act for B2G Data Sharing in Smart Cities’, Digital Legal Talks 2022, Utrecht, Netherlands, 24 November 2022.

B. Lazarotto, ‘General Aspects of the Data Act: Focus on Business-to-Government Data Sharing’, International Conference “Perspectives of Business Law”, Bucharest, Romania, 18 November 2022.

B. Lazarotto, ‘The Use of Private Databases by States for Surveillance Purposes and Its Implications for Individuals’ Fundamental Rights’, Surveillance & Society Conference, Rotterdam, Netherlands, 3 June 2022.

Organized Workshops & Webinars

B. Lazarotto, ‘AI Ethics Training’, workshop, Sphera Media Lab, Brussels, Belgium, 6 November 2025.

B. Lazarotto & P. R. Trigo Kramcsák, ‘From Theory to Practice: How Would You Change the GDPR?’, workshop, Brussels Privacy Symposium 2025, Brussels, Belgium, 14 October 2025.

B. Lazarotto & P. R. Trigo Kramcsák, ‘Should We Be Able to Give Consent to ChatGPT?’, workshop, Brussels Privacy Symposium 2024, Brussels, Belgium, 8 October 2024.

B. Lazarotto & L. Belli (with N. Zingales & T. Lohninger), ‘Regulation of Digital Infrastructure in the EU: From Networks to Platforms’, webinar, Fundação Getulio Vargas, Rio de Janeiro, Brazil / online, 25 July 2024.

B. Lazarotto, ‘B2B Data Sharing Within the Data Act’, workshop, CPDP 2024, Brussels, Belgium, 22 May 2024.

B. Lazarotto, ‘Right to Data Portability: Making Sense of the GDPR, DMA, and Data Act Overlaps’, workshop, Brussels Privacy Symposium 2023, Brussels, Belgium, 14 November 2023.

B. Lazarotto, ‘Repairability and AI Workshop with OHME’, workshop leader, FARI – AI for the Common Good Institute, Brussels, Belgium, 13 June 2023.

‘Privacy and Tech Laws in Latin America: An Interview with Bárbara Lazarotto and Luz Orozco’, expert interview, Computers & Law, UK, 18 August 2025.

B. Lazarotto, B. Botero & L. H. Orozco y Villa, ‘Technology & Privacy Laws Around the World – Episode 6: Latin America’, SCL Podcast, 2 June 2025.

I. van Zeeland & B. Lazarotto, ‘Toezicht op digitale platformen en Trump? Hoe Europa haar regels onafhankelijk kan blijven controleren’, expert commentary, Knack Data News, Belgium, 29 January 2025.

‘Western Big Tech Treats African Employees as “Testing Ground”, Expert Says’, expert interview, Sputnik Global, 22 March 2023.

‘Meta Appeals Against Kenyan Court’s Decision Allowing Company to Be Sued in Country’, expert interview, Sputnik Global, 22 February 2023.

Sciences Po Paris 

‘Data Governance in Urban Environments’, École d’Urbanisme, 2026–present.

‘Data et Digital: Digital Legal Matters and Perspectives’, École du Management et de l’Impact, 2025–present.

‘Thinking Like a Lawyer’, Collège Universitaire, 2023–2024.

Guest Lectures 

Università Bocconi, Faculty of Law — ‘A Journey into Data Protection and Data Law in Latin America’, LLM in Law & Internet Technology, November 2024 & 2025.

Université Libre de Bruxelles (ULB) — Executive Master’s in Digital and IT Essentials, May 2025 & 2026.

Universidade Lusófona — ‘A (nova) regulação dos dados na UE: o caso da saúde’, March 2026.

BILETA / European Journal of Law and Technology Best Paper Prize, 2023.