Italy: Data Protection

Subscribe
Privacy law and privacy regulation thought leadership, articles, podcasts, videos and webinars from expert sources across the legal world. Explore insights covering topics including GDPR, data protection, data privacy, and privacy protection.
Article
Pseudonymised, Not Anonymous: What The Italian Garante’s €7 Million IQVIA Fine Means For Health Data
The Italian data protection authority fined IQVIA Solutions Italy €7 million for treating patient records as anonymous when they were actually pseudonymised personal data subject to GDPR. This decision demonstrates regulators' strict interpretation of what constitutes personal data, even as the EU considers narrowing this definition through the Digital Omnibus reforms.
Global Privacy
AP
Arnold & Porter
Article
Controllo Della Posta Elettronica: Illegittimita’ Del Trattamento Secondo Il Garante Della Privacy
Il Garante per la protezione dei dati personali ha sanzionato una società con €460.000 per aver violato la normativa sulla privacy nella gestione delle caselle di posta elettronica aziendale dei dipendenti. La decisione stabilisce che gli indirizzi email aziendali individualizzati e il loro contenuto costituiscono dati personali soggetti a garanzia di riservatezza, e che la conservazione sistematica dei messaggi richiede autorizzazione preventiva secondo lo Statuto dei lavoratori.
Italy Employment
DL-Law Avvocati Giuslavoristi
Article
Monitoring Of Employees’ Work E-Mail Accounts: Unlawful Processing According To The Data Protection Authority
The Italian Data Protection Authority has ruled that an employer's systematic monitoring and retention of employee work email accounts constitutes unlawful data processing, imposing a substantial €460,000 fine. The case examines the boundaries between legitimate business interests and employee privacy rights, particularly regarding the confidentiality of work correspondence and the procedural requirements for workplace monitoring under Italian law.
Italy Employment
DL-Law Avvocati Giuslavoristi
Article
Data Protection Authority: Obligations And Limits In Digital Forensics Activities
The Italian Data Protection Authority has ruled that digital forensics activities conducted during internal corporate investigations must comply with data protection regulations. Following an anonymous whistleblowing report, a company's forensic examination of a senior executive's email and storage was deemed unlawful due to failures in information provision, data processor appointment, and adherence to data minimisation principles.
Italy Privacy
DL-Law Avvocati Giuslavoristi
Article
Digital Omnibus On AI: How The European Commission Intends To Change The Rules On AI
The European Commission's Digital Omnibus Package proposes significant amendments to the AI Act, introducing targeted simplification measures for high-risk AI systems, extending regulatory relief to small-to-medium companies, and clarifying the interaction between AI regulation and existing EU legislation. The European Parliament has already published proposed amendments, with final adoption expected by the end of 2026 and gradual implementation beginning in 2027.
European Union Technology
GA
Global Advertising Lawyers Alliance (GALA)
See more

Latest Videos

See more