Italy

Inquiry into rules on methodologies for measuring content disseminated by digital platforms (Resolution no. 199/25/CONS)

On 25 March 2026, the Italian Communications Regulatory Authority (AGCOM) adopted Resolution No. 87/26/CONS, concluding the inquiry into audience measurement in the digital ecosystem opened under Resolution No. 199/25/CONS. The inquiry examined methodologies for measuring content distributed by digital platforms and operators whose content is consumed exclusively in digital environments and that are not yet included within a Joint Industry Committee (JIC). The inquiry involved 27 parties acro...

Italy proposes governance model on AI and work

" AI and Work: Managing transformation, Multiplying Opportunities " was the theme of today's work which took place at the Tempio di Vibia Sabina e Adriano, headquarters of the Rome Chamber of Commerce, as well as at the INPS and INAIL headquarters at Palazzo Wedekind and Palazzo Brasini, respectively. The Ministry of Labour and Social Policies supported the event in association with the National Social Security Institute and the National Institute for Insurance against Accidents at Work.

Data Protection Authority and National Labour Inspectorate investigation into Amazon over alleged unlawful worker monitoring and data processing

On 24 February 2026, the Italian Data Protection Authority (GPDP) issued provision no. 107 against Amazon after a joint investigation with the National Labour Inspectorate and the Financial Guard’s Special Privacy and Technological Fraud Unit. The investigation focused on Amazon’s logistics hubs in Passo Corese and Castel San Giovanni, following inspections in February 2026. The GPDP found that managers had recorded sensitive information about employees in a free-text field of the XX platform...

Italy, India, Kenya sign landmark AI cooperation agreement to advance development in Africa

Primary source (ict.go.ke) dated 21 February 2026 in IT. See linked source for full text.

R.G. n. 1244/2025

Lawyer appeared before the T. Siracusa. False Quotes: Case Law | Counsel attributed a quoted maxim to Cass. civ., sez. III, 11 aprile 2006, n. 8379 which the Tribunal determined is not present in the authentic ruling; opposing party produced the true text. Outcome: Monetary sanction.

R.G. n. 1244/2025

False Quotes: Case Law | Counsel attributed a quoted maxim to Cass. civ., sez. III, 11 aprile 2006, n. 8379 which the Tribunal determined is not present in the authentic ruling; opposing party produced the true text. || False Quotes: Case Law | Counsel quoted a purported textual passage attributed to Cass. civ., sez. III, 4 febbraio 2000, n. 1216 that the court found does not appear in that decision; opposing party produced the authentic text disproving the quote. || False Quotes: Case Law | Counsel cited a purported passage on litisconsorzio as from Cass. civ., sez. I, 3 ottobre 2003, n. 14795; the court found the quoted passage does not correspond to that decision. || False Quotes: Case Law | Counsel quoted a passage on creditor's free choice attributed to Cass. civ., sez. III, 5 marzo 2004, n. 4553 which the Tribunal verified is not contained in that ruling.

R.G. n. 1244/2025

Competition and Market Authority proceedings against Mistral AI addressing unfair commercial practices

On 17 February 2026, the Competition and Market Authority (AGCM) closed its investigation into Mistral AI regarding its AI service “Le Chat” and the risk of so-called “hallucinations,” where AI outputs may be inaccurate or misleading. The investigation, opened in June 2025, examined whether Mistral adequately informed users about this risk. Mistral, a French start-up founded in April 2023, argued that Italian consumer law applied only after it actively promoted the service to Italian users fr...

N. 4203/2025 R.G.

Lawyer appeared before the TO Verona. Fabricated: Exhibits & Submissions | The introductory pleading included an extraneous chatbot prompt indicating generative-AI drafting; court relied on this text to find insufficiently controlled AI use and imposed aggravated procedural sanctions. Outcome: Monetary Sanction.

N. 4203/2025 R.G.

Fabricated: Exhibits & Submissions | The introductory pleading included an extraneous chatbot prompt indicating generative-AI drafting; court relied on this text to find insufficiently controlled AI use and imposed aggravated procedural sanctions.

N. 4203/2025 R.G.

Data Protection Authority investigation into e-Campus Online University over allegations of unlawful biometric data processing

On 29 January 2026, the Data Protection Authority ruled that the processing of biometric data by e-Campus Online University for student attendance verification was unlawful and imposed an administrative fine of EUR 50’000. The case followed a report that the university used a facial recognition system to identify participants and verify attendance during online teaching qualification courses. The Authority found that the consent obtained from students was not freely given, citing an imbalance...

Communications Regulatory Authority list of general interest services pursuant to resolution no. 250/25/CONS

On 19 January 2026, the Communications Regulatory Authority (AGCOM) adopted the list of audiovisual and radio media services of general interest distributed online in accordance with resolution no. 250/25/CONS. The list implements the guidelines regarding the prominence of general interest services, which aim to ensure that specific media content remains accessible and visible to the public on digital interfaces. The list is organised into five distinct categories: services provided by the pu...

South Korea and Italy agree to strengthen cooperation in AI, chips

Primary source (governo.it) dated 19 January 2026 in IT. See linked source for full text.

Garante issues warning relating to deepfake risks of Grok, ChatGPT, Clothoff and other similar services

Deepfake, il Garante avverte: a rischio diritti e libertà fondamentali Dopo il blocco di Clothoff, l’Autorità richiama l’attenzione sull’uso di Grok e altri servizi analoghi

Competition Authority investigation into Meta's decision to pre-install its AI service on WhatsApp assessing its compliance with Treaty of Functioning of European Union

On 22 December 2025, the Competition Authority ordered Meta to suspend the application of the new business solution terms for WhatsApp insofar as those terms would produce effects in Italy. WhatsApp's business solution terms, introduced on 15 October 2025, restrict access for third-party AI service providers whose primary functionality is AI chatbots or assistants. The Authority concluded the terms are likely to limit production, outlets, or technical development in the AI ​​Chatbot services ...

Warning to users of artificial intelligence services regarding deepfakes

On 18 December 2025, the Guarantor for the Protection of Personal Data (GPDP) issued a warning to users of artificial intelligence services regarding the generation of content using third-party voices or images via artificial intelligence technologies (deepfakes). The GPDP noted that such content potentially qualifies as personal data under Article 4(1) of Regulation (EU) 2016/679 (GDPR) and may constitute biometric data where processed for unique identification. The GPDP found that such proc...

Italy antitrust watchdog may curb Meta as WhatsApp AI probe widens

According to the Authority, the new WhatsApp Business Solution Terms, introduced on 15 October 2025, and the integration of new Meta AI interaction tools or features into WhatsApp may limit production, market access or technical developments in the AI Chatbot services market.

Ric. n. 3054/2025

Lawyer used Unidentified in proceedings before the TAR Lombardia. Fabricated: Case Law | Il ricorso riportava numerosi riferimenti a pronunce giudiziarie non pertinenti o non note; il Collegio segnala che molte massime e richiami risultavano apparentemente inventati dagli strumenti di IA. Outcome: Costs of 1,500 EUR, referral to the bar.

Ric. n. 3054/2025

Fabricated: Case Law | Il ricorso riportava numerosi riferimenti a pronunce giudiziarie non pertinenti o non note; il Collegio segnala che molte massime e richiami risultavano apparentemente inventati dagli strumenti di IA.

Ric. n. 3054/2025

Artificial Intelligence authority governance in Bill on Provisions and delegation to the Government on Artificial Intelligence (Bill No. 1146)

On 10 October 2025, the Bill on Provisions and Delegation to the Government on Artificial Intelligence (AI) enters into force. The Bill specifies the institutions empowered to oversee compliance. The Agency for Digital Italy (AgID) and the National Cybersecurity Agency (ACN) as the National Authorities for AI to ensure the implementation of the European Union AI Act (Regulation (EU) 2024/1689). AgID is tasked with promoting AI innovation and overseeing the evaluation, accreditation, and monit...

Data localisation measures in Bill on Provisions and delegation to the Government on Artificial Intelligence (Bill No. 1146)

On 10 October 2025, the Bill on Provisions and Delegation to the Government on Artificial Intelligence (AI) enters into force. The Bill requires public procurement platforms to prioritise AI suppliers that process and store strategic data within national data centres, ensuring disaster recovery, business continuity, and high security and transparency standards. Collaborative research between businesses, research bodies, and technology transfer centres is also promoted to commercialise AI rese...

Italy's AI bill enters into force

Primary source (giurisprudenzapenale.com) dated 10 October 2025 in IT. See linked source for full text.

Communications Authority investigation into Meta over alleged failure to adequately compensate GEDI publishing group

On 10 July 2025, the Italian Communications Authority (AGCOM) issued an order setting the fair compensation Meta must pay for using GEDI publishing group’s journalistic content on Facebook. The decision, adopted under Regulation No. 3/23/CONS after the parties failed to reach an agreement, rejected both sides’ financial proposals and determined compensation based on Meta’s advertising revenues linked to GEDI content, net of redirect traffic benefits. A rate of up to 70% was applied, with the ...

Lawsuit relating to the compatibility of Italian Copyright compensation rules for digital platforms with European Union's copyright directive (Regional Administrative Court for Lazio v Meta Platforms Ireland) (Case No. C-797/23)

On 10 July 2025, the Advocate General of the Court of Justice of European Union issued an opinion on the Italian implementation of Article 15 of Directive (EU) 2019/790 on Copyright in the Digital Single Market. The Directive grants press publishers exclusive rights for the online use of their publications by information society service providers (ISSPs) including Meta Platforms Ireland. The Advocate General found that Italy’s obligations requiring ISSPs to negotiate with publishers, disclose...

Data Protection Authority investigation into Replika over alleged violations of GDPR provisions pertaining to legal basis for data processing and insufficient age verification

On 10 April 2025, the Italian Data Protection Authority (DPA) announced that it had fined Luka, the provider of the artificial intelligence chatbot Replika, EUR 5 million for violating the General Data Protection Regulation (GDPR). The DPA identified three main violations. First, Luka failed to properly identify valid legal bases for its various data processing operations, including those related to developing its large language model Replika. The privacy policy contained only vague reference...

Italian Data Protection Authority source on deepfake-related enforcement and policy

Official source record dated 1 October 2025 for Italy concerning Italian DPA temporarily restricts deepfake nude app ClothOff from processing of Italian personal data. See the linked garanteprivacy.it source for the authoritative text, procedural context, and implementation details.

National Cybersecurity Agency's determination on methods and procedures under Network and Information Security Directive (Resolution 333017/2025)

On 30 September 2025, the determination on compliance with the national competent authority under the Network and Information Security (NIS) Directive entered into force, except for the provision setting out the procedure and deadlines for continuous updating and confirmation of NIS entity and user information. The determination specifies the deadlines, methods, and procedures for the use and access to the Agency's digital platform, as well as additional information that entities must provide...

Italy finally approves AI bill, covering privacy, oversight and child access

Primary source (senato.it) dated 17 September 2025 in IT. See linked source for full text.

Data protection authorities adopted joint statement on building trustworthy data governance frameworks to encourage development of innovative and privacy-protecting AI

Primary source (pcpd.org.hk) dated 17 September 2025 in IT. See linked source for full text.

R.G.L. n. 1018/2025

Lawyer used Unidentified in proceedings before the Tribunale di Torino. Outcome: Monetary sanction.

R.G.L. n. 1018/2025

R.G.L. n. 1018/2025

Data Protection Authority investigation into dissemination of private audio involving unlawful processing of personal data

On 20 August 2025, the Italian Data Protection Authority issued Provision No. 479, imposing urgent measures under Article 58(2)(f) of the General Data Protection Regulation (GDPR) to address the unlawful dissemination of a private audio recording on the YouTube channel “Falsissimo” and its subsequent circulation on Instagram. The action followed a complaint under Article 77 GDPR seeking removal and de-indexing of the content across multiple platforms, including YouTube, TikTok, Instagram, Fac...

Data Protection Authority investigation into Lusha Systems over alleged unauthorised processing of contact data

On 8 April 2025, the Italian Data Protection Authority announced an investigation into Lusha Systems over the unauthorised processing of contact data. The investigation focuses on concerns that it collects and sells personal contact details, including email addresses and phone numbers, of individuals residing in Italy, including institutional figures, without appropriate consent. The Authority has requested Lusha to clarify, within twenty days, the volume and source of data processed, the met...

Italy Competition Authority investigates into Meta's integration of Meta AI in WhatsApp

Da marzo 2025 Meta, in posizione dominante nel mercato dei servizi di comunicazione via app, ha deciso di pre-installare il proprio servizio di intelligenza artificiale sull’app Whatsapp. In tal modo Meta potrebbe “imporre” ai propri utenti l’utilizzo dei propri servizi di chatbot e assistenza AI

Law on protection of minors in digital dimension (Act No. 1136)

On 7 October 2025, the Italian Data Protection Authority (DPA) appeared before the 8th Committee of the Senate on the updated text adopted for Senate Bill No. 1136 on the protection of minors in the digital environment. The revised text allows the activation of social media and video-sharing accounts only for persons over 15 years of age and assigns the DPA the responsibility for verifying and sanctioning infringements in accordance with Articles 56(2), 58(2), and 83 of Regulation (EU) 2016/6...

Di Rocco Isabelle - Corte di Cassazione, Sez. Pen. 3, Sent. n. 25455/2025

Judge appeared before the Corte di Cassazione. Misrepresented: Case Law | The Corte di appello invoked 'principi di legittimità' not actually affirmed by the Corte di Cassazione; Supreme Court found the lower court referred to legal principles that were not established by this Court. Outcome: Quashed and remanded.