Italy: Data Protection

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
When AI Meets Children: Italy’s Garante Fines Character.AI Over Transparency And Safeguarding Failures
The Italian Data Protection Authority has issued a landmark decision against Character Technologies, Inc., examining how generative AI services must comply with GDPR requirements when processing personal data for model training and operation. The case establishes critical precedents for transparency obligations, age verification mechanisms, and the timing of data protection impact assessments for AI developers operating in the European Union.
European Union Privacy
GA
GVZH Advocates
Article
Pseudonymised, Not Anonymous: What The Italian Garante’s €7 Million IQVIA Fine Means For Health Data
The Italian data protection authority fined IQVIA Solutions Italy €7 million for treating patient records as anonymous when they were actually pseudonymised personal data subject to GDPR. This decision demonstrates regulators' strict interpretation of what constitutes personal data, even as the EU considers narrowing this definition through the Digital Omnibus reforms.
Global Privacy
AP
Arnold & Porter
Article
Controllo Della Posta Elettronica: Illegittimita’ Del Trattamento Secondo Il Garante Della Privacy
Il Garante per la protezione dei dati personali ha sanzionato una società con €460.000 per aver violato la normativa sulla privacy nella gestione delle caselle di posta elettronica aziendale dei dipendenti. La decisione stabilisce che gli indirizzi email aziendali individualizzati e il loro contenuto costituiscono dati personali soggetti a garanzia di riservatezza, e che la conservazione sistematica dei messaggi richiede autorizzazione preventiva secondo lo Statuto dei lavoratori.
Italy Employment
DL-Law Avvocati Giuslavoristi
Article
Italian Data Protection Authority: Corporate E-Mail And Former Employee's Right Of Access
The Italian Data Protection Authority has ruled against a company that denied a former employee complete access to their corporate email account, clarifying that work-related emails constitute personal data under GDPR. The decision addresses the boundaries of employee data access rights and establishes that employers cannot arbitrarily obscure or withhold work-related correspondence without specific legal justification.
Italy Privacy
DL-Law Avvocati Giuslavoristi
Article
Data Protection Authority: Obligations And Limits In Digital Forensics Activities
The Italian Data Protection Authority has ruled that digital forensics activities conducted during internal corporate investigations must comply with data protection regulations. Following an anonymous whistleblowing report, a company's forensic examination of a senior executive's email and storage was deemed unlawful due to failures in information provision, data processor appointment, and adherence to data minimisation principles.
Italy Privacy
DL-Law Avvocati Giuslavoristi
See more

Latest Videos

See more