Back to Map
🇮🇹

Italy

Personal Data Protection Code (Codice Privacy)

Europe🟢 Comprehensive
Compliance Score
86%
12 Addressed
2 Partial
0 None

Authority

Italian Data Protection Authority (Garante Privacy)

Overview

Italy's Privacy Code, complemented by GDPR, provides a comprehensive framework. The Garante Privacy is an active regulator that enforces compliance and issues guidance.

14-Topic Coverage Analysis

Data Protection Authority
Addressed
Consent Requirements
Addressed
Data Subject Rights
Addressed
Cross-Border Transfer
Addressed
Breach Notification
Addressed
DPO Requirements
Addressed
Children's Data
Addressed
Penalties & Enforcement
Addressed
Sector-Specific Rules
Partial
Cookie/Tracking
Addressed
AI & Automated Decisions
Addressed
Data Localisation
Partial
Significant Data Fiduciary
Addressed
Government Data
Addressed

? Frequently Asked Questions

What is the primary data protection law in Italy?+
Italy is governed by the Personal Data Protection Code (Codice Privacy). The law is enforced by the Italian Data Protection Authority (Garante Privacy). According to our analysis, the country has a Comprehensive level of data protection framework.
Does Italy require a Data Protection Officer (DPO)?+
Yes, under the Personal Data Protection Code (Codice Privacy), organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in Italy?+
Partially. While Personal Data Protection Code (Codice Privacy) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Italy?+
Under the Personal Data Protection Code (Codice Privacy), organizations must notify the Italian Data Protection Authority (Garante Privacy) and affected individuals without undue delay in the event of a personal data breach.