Italy's Privacy Authority sets deadline for email tracking pixel compliance

The Italian Data Protection Authority (Garante Privacy) has established a deadline of October 29, 2026, for entities to comply with new guidelines regarding the use of tracking pixels in email communications. The regulations focus on transparent information, valid consent, easy revocation of consent, and data minimization.

Tracking pixels are tiny, often invisible images embedded in emails that connect to a remote server. When a recipient opens an email, the pixel triggers a request to the server, allowing the sender to collect data such as the recipient's IP address, the time and date of opening, device characteristics, and how many times the message was viewed.

The new rules apply to businesses, digital platforms, email providers, and any party using monitoring tools in email exchanges. The authority emphasizes the principle of accountability, requiring data controllers to ensure personal data is protected while using these tools, which are also used for legitimate purposes like spam prevention and audience measurement.