GDPR implementation approaches full effectiveness in May 2018

The European Union's General Data Protection Regulation (GDPR) is approaching its full implementation date on May 25, 2018. This regulation aims to strengthen the responsibilities of data controllers and enhance the rights of individuals regarding their personal data.

In Italy, the government has moved to align national legislation with the EU framework. The existing Personal Data Protection Code will be repealed and replaced by the GDPR provisions and new harmonizing decrees. Because the regulation is self-executing, businesses, professionals, and public entities will face immediate obligations and potential significant sanctions for non-compliance.

In line with these privacy standards, organizations such as Confesercenti Nazionale are implementing privacy notices to inform users how their data is processed for website navigation and information requests, outlining rights such as data access, rectification, and erasure.