Beatrice Ducci is a Privacy and Data Protection professional with a strong focus on the intersection between data protection, cybersecurity, and emerging technologies. She currently works as a Legal Risk Analyst in a cybersecurity environment, where she contributes to risk assessments and compliance frameworks aligned with GDPR and NIST standards, and collaborates with cross-functional teams on data protection and cyber risk governance. Alongside her core privacy work—such as DPIAs, RoPA management, and data subject rights handling—she has developed growing expertise in the regulatory implications of AI systems.
She has been actively involved in AI-related projects, supporting the assessment of AI-driven tools from a data protection and risk management perspective, with particular attention to transparency, accountability, and compliance with emerging EU frameworks such as the AI Act. She has also developed structured prompting skills to enhance risk analysis processes and has conducted preliminary evaluations of automated decision-making systems, focusing on legal and ethical safeguards. Her academic and professional work reflects a strong interest in AI governance and the responsible deployment of data-driven technologies.