Italy approves draft decree for EU AI Act implementation

Italy’s Data Protection Authority (GPDP) has issued a favorable opinion on the draft legislative decree intended to implement the European AI Act within the country. The decree consists of 22 articles organized into two main titles.

The first title focuses on security, the protection of fundamental rights, and the prevention of crimes. It specifically addresses the use of artificial intelligence in biometric recognition, particularly by law enforcement agencies, while promoting responsible and informed AI usage. The second title establishes criminal and civil provisions for instances of illegality and introduces regulations for the financial and insurance sectors.

Under the proposed framework, the GPDP will serve as the market surveillance authority for high-risk AI systems, monitoring their application in sensitive areas such as justice, democratic processes, and fundamental rights. While approving the scheme, the Authority noted that certain aspects require further development, specifically requesting the power to issue guidelines and recommendations, clearer rules for applying sanctions, and involvement in the Italian AI experimentation space.