[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

3 clusters · 9 sources · 29 days · First seen · Last updated

Italy GDPR enforcement rollout and sanction framework

Overview

In the months leading up to the 25 May 2018 deadline, Italy moved to replace its national data-protection code with the EU General Data Protection Regulation (GDPR). The government approved a delegated decree to align Italian law with the GDPR, outlining new duties and possible sanctions for organisations that process personal data.

Legal professionals and industry groups have actively prepared for the transition. The Italian Bar Association provided guidance for law firms, while the merchants’ association Confesercenti Bologna published a GDPR-compliant privacy notice detailing data-subject rights and contact information for its Data Protection Officer. Similarly, public and private actors have released specific compliance documents: the Comune di Fuscaldo issued a statement regarding the legal basis for processing municipal data, and DM Solutions srls, operator of the Amiatanews website, published a notice explaining its data-handling practices and its decision not to appoint a Data Protection Officer due to the absence of large-scale systematic monitoring.

The regulatory framework, built on the EU GDPR and the updated Italian Privacy Code, carries significant penalties for non-compliance. Violations can result in administrative fines of up to 20 million euros or 4% of a company’s total global turnover. Additionally, entities may face criminal liability under the Italian Privacy Code and civil lawsuits for damages. These obligations apply to all entities regardless of size, with sanctions calibrated to the specific risks of the data processing activities.

Entities

European Union · Garante per la protezione dei dati personali · GDPR

Timeline

  1. 26 days ago

    [TECHNOLOGY] 4 sources
    GDPR and privacy law violations carry heavy sanctions

    Violating GDPR and Italian privacy laws can lead to administrative fines up to 20 million euros, criminal liability, and civil lawsuits for damages, regardless of an organization's size.

  2. about 2 months ago

    [TECHNOLOGY] 2 sources
    Italian municipalities publish GDPR privacy notices

    DM Solutions and the Comune di Fuscaldo in Italy issued GDPR privacy notices detailing data collection, legal bases and citizen obligations under EU Regulation 2016/679.

  3. about 2 months ago

    [BUSINESS] 4 sources
    Italy prepares for GDPR enforcement as May 25 deadline approaches

    Italy readies for GDPR enforcement on May 25 2018, issuing a government decree, compliance guidance for law firms, and a GDPR‑aligned privacy notice from Confesercenti Bologna.

Sources

amiatanews.it · business.laleggepertutti.it · comune.fuscaldo.cs.it · confesercenti.it · easystudios.se · obec-zhor.cz · qdpnews.it · veb.it · versari.it

This summary has been updated 1 time: see revision history