Italy: Data Protection

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
EU KIDS Act: Brussels Rewrites The Rules For Digital Services For Minors
The European Commission's proposed EU Kids Act introduces sweeping new requirements for digital service providers, establishing a harmonised age threshold of 15 for social media access and mandating safety-by-design principles across online platforms. This comprehensive regulatory framework fundamentally reshapes how providers must verify ages, design interfaces, and protect minors in the digital space, with sanctions reaching up to 6% of worldwide annual turnover for non-compliance.
European Union Privacy
AN
Advant Nctm
Article
When AI Meets Children: Italy’s Garante Fines Character.AI Over Transparency And Safeguarding Failures
The Italian Data Protection Authority has issued a landmark decision against Character Technologies, Inc., examining how generative AI services must comply with GDPR requirements when processing personal data for model training and operation. The case establishes critical precedents for transparency obligations, age verification mechanisms, and the timing of data protection impact assessments for AI developers operating in the European Union.
European Union Privacy
GA
GVZH Advocates
Article
Pseudonymised, Not Anonymous: What The Italian Garante’s €7 Million IQVIA Fine Means For Health Data
The Italian data protection authority fined IQVIA Solutions Italy €7 million for treating patient records as anonymous when they were actually pseudonymised personal data subject to GDPR. This decision demonstrates regulators' strict interpretation of what constitutes personal data, even as the EU considers narrowing this definition through the Digital Omnibus reforms.
Global Privacy
AP
Arnold & Porter
Article
Analysis Of Work-related Stress Using AI: A Warning From The Data Protection Authority
Italy's Data Protection Authority has issued a warning regarding an AI-powered plug-in system designed to analyze work-related stress through sentiment analysis of employee messages. The ruling addresses whether employers can access information about employees' emotional well-being and psychological stress, even when the stated purpose is preventive healthcare. This decision establishes important boundaries for workplace monitoring technologies that collect sensitive psychological data about workers.
Italy Employment
DL-Law Avvocati Giuslavoristi
Article
Italian Data Protection Authority: Corporate E-Mail And Former Employee's Right Of Access
The Italian Data Protection Authority has ruled against a company that denied a former employee complete access to their corporate email account, clarifying that work-related emails constitute personal data under GDPR. The decision addresses the boundaries of employee data access rights and establishes that employers cannot arbitrarily obscure or withhold work-related correspondence without specific legal justification.
Italy Privacy
DL-Law Avvocati Giuslavoristi
Article
Data Protection Authority: Obligations And Limits In Digital Forensics Activities
The Italian Data Protection Authority has ruled that digital forensics activities conducted during internal corporate investigations must comply with data protection regulations. Following an anonymous whistleblowing report, a company's forensic examination of a senior executive's email and storage was deemed unlawful due to failures in information provision, data processor appointment, and adherence to data minimisation principles.
Italy Privacy
DL-Law Avvocati Giuslavoristi
See more

Latest Videos

See more