Inquiry into rules on methodologies for measuring content disseminated by digital platforms (Resolution no. 199/25/CONS)

On 25 March 2026, the Italian Communications Regulatory Authority (AGCOM) adopted Resolution No. 87/26/CONS, concluding the inquiry into audience measurement in the digital ecosystem opened under Resolution No. 199/25/CONS. The inquiry examined methodologies for measuring content distributed by digital platforms and operators whose content is consumed exclusively in digital environments and that are not yet included within a Joint Industry Committee (JIC). The inquiry involved 27 parties acro...

Official materialContent ModerationOfficial source · agcom.it ↗

03 MAR 2026 · Policy / Guidance

Italy proposes governance model on AI and work

" AI and Work: Managing transformation, Multiplying Opportunities " was the theme of today's work which took place at the Tempio di Vibia Sabina e Adriano, headquarters of the Rome Chamber of Commerce, as well as at the INPS and INAIL headquarters at Palazzo Wedekind and Palazzo Brasini, respectively. The Ministry of Labour and Social Policies supported the event in association with the National Social Security Institute and the National Institute for Insurance against Accidents at Work.

Secondary evidenceHuman Rights & Ethics ·Labor & WorkforceIssuing institution: Issuing authority not identified

24 FEB 2026 · Other

Data Protection Authority and National Labour Inspectorate investigation into Amazon over alleged unlawful worker monitoring and data processing

On 24 February 2026, the Italian Data Protection Authority (GPDP) issued provision no. 107 against Amazon after a joint investigation with the National Labour Inspectorate and the Financial Guard’s Special Privacy and Technological Fraud Unit. The investigation focused on Amazon’s logistics hubs in Passo Corese and Castel San Giovanni, following inspections in February 2026. The GPDP found that managers had recorded sensitive information about employees in a free-text field of the XX platform...

Official materialNational StrategyOfficial source · garanteprivacy.it ↗

21 FEB 2026 · International Agreement

Italy, India, Kenya sign landmark AI cooperation agreement to advance development in Africa

Primary source (ict.go.ke) dated 21 February 2026 in IT. See linked source for full text.

Primary legal sourceTrade & Investment ·Logistics & InfrastructureOfficial source · ict.go.ke ↗

20 FEB 2026 · Court Case

R.G. n. 1244/2025

Lawyer appeared before the T. Siracusa. False Quotes: Case Law | Counsel attributed a quoted maxim to Cass. civ., sez. III, 11 aprile 2006, n. 8379 which the Tribunal determined is not present in the authentic ruling; opposing party produced the true text. Outcome: Monetary sanction.

Court: T. SiracusaParty: Lawyer

Fine: 2000 EUR

Secondary evidenceJudicial & Law Enforcement ·Generative AI ·Liability & AccountabilityIssuing institution: T. Siracusa

17 FEB 2026 · Other

Competition and Market Authority proceedings against Mistral AI addressing unfair commercial practices

On 17 February 2026, the Competition and Market Authority (AGCM) closed its investigation into Mistral AI regarding its AI service “Le Chat” and the risk of so-called “hallucinations,” where AI outputs may be inaccurate or misleading. The investigation, opened in June 2025, examined whether Mistral adequately informed users about this risk. Mistral, a French start-up founded in April 2023, argued that Italian consumer law applied only after it actively promoted the service to Italian users fr...

Secondary evidenceConsumer ProtectionIssuing institution: Issuing authority not identified

10 FEB 2026 · Court Case

N. 4203/2025 R.G.

Lawyer appeared before the TO Verona. Fabricated: Exhibits & Submissions | The introductory pleading included an extraneous chatbot prompt indicating generative-AI drafting; court relied on this text to find insufficiently controlled AI use and imposed aggravated procedural sanctions. Outcome: Monetary Sanction.

Court: TO VeronaParty: Lawyer

Fine: 1800 EUR

Secondary evidenceJudicial & Law Enforcement ·Generative AI ·Liability & AccountabilityIssuing institution: TO Verona

29 JAN 2026 · Other

Data Protection Authority investigation into e-Campus Online University over allegations of unlawful biometric data processing

On 29 January 2026, the Data Protection Authority ruled that the processing of biometric data by e-Campus Online University for student attendance verification was unlawful and imposed an administrative fine of EUR 50’000. The case followed a report that the university used a facial recognition system to identify participants and verify attendance during online teaching qualification courses. The Authority found that the consent obtained from students was not freely given, citing an imbalance...

Official materialNational StrategyOfficial source · garanteprivacy.it ↗

19 JAN 2026 · Executive Order

Communications Regulatory Authority list of general interest services pursuant to resolution no. 250/25/CONS

On 19 January 2026, the Communications Regulatory Authority (AGCOM) adopted the list of audiovisual and radio media services of general interest distributed online in accordance with resolution no. 250/25/CONS. The list implements the guidelines regarding the prominence of general interest services, which aim to ensure that specific media content remains accessible and visible to the public on digital interfaces. The list is organised into five distinct categories: services provided by the pu...

Primary legal sourceContent ModerationOfficial source · agcom.it ↗

19 JAN 2026 · Other

South Korea and Italy agree to strengthen cooperation in AI, chips

Primary source (governo.it) dated 19 January 2026 in IT. See linked source for full text.

Secondary evidenceDefense & National SecurityIssuing institution: Issuing authority not identified

08 JAN 2026 · Other

Garante issues warning relating to deepfake risks of Grok, ChatGPT, Clothoff and other similar services

Deepfake, il Garante avverte: a rischio diritti e libertà fondamentali Dopo il blocco di Clothoff, l’Autorità richiama l’attenzione sull’uso di Grok e altri servizi analoghi

Official materialDeepfakes ·Data Privacy & Protection ·Online Safety & Child ProtectionOfficial source · garanteprivacy.it ↗

22 DEC 2025 · International Agreement

Competition Authority investigation into Meta's decision to pre-install its AI service on WhatsApp assessing its compliance with Treaty of Functioning of European Union

On 22 December 2025, the Competition Authority ordered Meta to suspend the application of the new business solution terms for WhatsApp insofar as those terms would produce effects in Italy. WhatsApp's business solution terms, introduced on 15 October 2025, restrict access for third-party AI service providers whose primary functionality is AI chatbots or assistants. The Authority concluded the terms are likely to limit production, outlets, or technical development in the AI Chatbot services ...

Secondary evidenceCompetitionIssuing institution: Issuing authority not identified

18 DEC 2025 · Other

Warning to users of artificial intelligence services regarding deepfakes

On 18 December 2025, the Guarantor for the Protection of Personal Data (GPDP) issued a warning to users of artificial intelligence services regarding the generation of content using third-party voices or images via artificial intelligence technologies (deepfakes). The GPDP noted that such content potentially qualifies as personal data under Article 4(1) of Regulation (EU) 2016/679 (GDPR) and may constitute biometric data where processed for unique identification. The GPDP found that such proc...

Official materialNational StrategyOfficial source · garanteprivacy.it ↗

26 NOV 2025 · Other

Italy antitrust watchdog may curb Meta as WhatsApp AI probe widens

According to the Authority, the new WhatsApp Business Solution Terms, introduced on 15 October 2025, and the integration of new Meta AI interaction tools or features into WhatsApp may limit production, market access or technical developments in the AI Chatbot services market.

Secondary evidenceAntitrust & CompetitionIssuing institution: Issuing authority not identified

14 OCT 2025 · Court Case

Ric. n. 3054/2025

Lawyer used Unidentified in proceedings before the TAR Lombardia. Fabricated: Case Law | Il ricorso riportava numerosi riferimenti a pronunce giudiziarie non pertinenti o non note; il Collegio segnala che molte massime e richiami risultavano apparentemente inventati dagli strumenti di IA. Outcome: Costs of 1,500 EUR, referral to the bar.

Court: TAR LombardiaParty: Lawyer

Fine: 1500 EUR

Secondary evidenceJudicial & Law Enforcement ·Generative AI ·Liability & AccountabilityIssuing institution: TAR Lombardia

10 OCT 2025 · Law / Act

Artificial Intelligence authority governance in Bill on Provisions and delegation to the Government on Artificial Intelligence (Bill No. 1146)

On 10 October 2025, the Bill on Provisions and Delegation to the Government on Artificial Intelligence (AI) enters into force. The Bill specifies the institutions empowered to oversee compliance. The Agency for Digital Italy (AgID) and the National Cybersecurity Agency (ACN) as the National Authorities for AI to ensure the implementation of the European Union AI Act (Regulation (EU) 2024/1689). AgID is tasked with promoting AI innovation and overseeing the evaluation, accreditation, and monit...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

10 OCT 2025 · Law / Act

Data localisation measures in Bill on Provisions and delegation to the Government on Artificial Intelligence (Bill No. 1146)

On 10 October 2025, the Bill on Provisions and Delegation to the Government on Artificial Intelligence (AI) enters into force. The Bill requires public procurement platforms to prioritise AI suppliers that process and store strategic data within national data centres, ensuring disaster recovery, business continuity, and high security and transparency standards. Collaborative research between businesses, research bodies, and technology transfer centres is also promoted to commercialise AI rese...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

10 OCT 2025 · Law / Act

Italy's AI bill enters into force

Primary source (giurisprudenzapenale.com) dated 10 October 2025 in IT. See linked source for full text.

Secondary evidenceDeepfakes ·Copyright & Ip ·CybersecurityIssuing institution: Issuing authority not identified

07 OCT 2025 · Other

Communications Authority investigation into Meta over alleged failure to adequately compensate GEDI publishing group

On 10 July 2025, the Italian Communications Authority (AGCOM) issued an order setting the fair compensation Meta must pay for using GEDI publishing group’s journalistic content on Facebook. The decision, adopted under Regulation No. 3/23/CONS after the parties failed to reach an agreement, rejected both sides’ financial proposals and determined compensation based on Meta’s advertising revenues linked to GEDI content, net of redirect traffic benefits. A rate of up to 70% was applied, with the ...

Official materialContent ModerationOfficial source · agcom.it ↗

07 OCT 2025 · Law / Act

Law on protection of minors in digital dimension (Act No. 1136)

On 7 October 2025, the Italian Data Protection Authority (DPA) appeared before the 8th Committee of the Senate on the updated text adopted for Senate Bill No. 1136 on the protection of minors in the digital environment. The revised text allows the activation of social media and video-sharing accounts only for persons over 15 years of age and assigns the DPA the responsibility for verifying and sanctioning infringements in accordance with Articles 56(2), 58(2), and 83 of Regulation (EU) 2016/6...

Primary legal sourceConsumer ProtectionOfficial source · garanteprivacy.it ↗

06 OCT 2025 · Other

Data Protection Authority investigation into CamHub over alleged illegal collection and dissemination of videos

On 6 October 2025, the Italian Data Protection Authority issued a notice against ICF Technology, which manages the CamHub website. The authority stated that the website, currently blocked in Italy, streams sexually explicit videos, including private chat rooms. It also stated that collecting and sharing videos illegally recorded from cameras in private Italian homes violates European and national privacy laws. It warned that reactivating the site without the explicit consent of the data subje...

Official materialNational StrategyOfficial source · garanteprivacy.it ↗

01 OCT 2025 · Policy / Guidance

Italian Data Protection Authority source on AI governance

Official source record dated 10 January 2025 for Italy concerning Data Protection Authority investigation into AI/Robotics Venture Strategy 3 over unlawful processing of personal data through ClothOff "deep nude" service. See the linked garanteprivacy.it source for the authoritative text, procedural context, and implementation details.

Official materialNational StrategyOfficial source · garanteprivacy.it ↗

30 SEP 2025 · Executive Order

National Cybersecurity Agency's determination on methods and procedures under Network and Information Security Directive (Resolution 333017/2025)

On 30 September 2025, the determination on compliance with the national competent authority under the Network and Information Security (NIS) Directive entered into force, except for the provision setting out the procedure and deadlines for continuous updating and confirmation of NIS entity and user information. The determination specifies the deadlines, methods, and procedures for the use and access to the Agency's digital platform, as well as additional information that entities must provide...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

17 SEP 2025 · Other

Italy finally approves AI bill, covering privacy, oversight and child access

Primary source (senato.it) dated 17 September 2025 in IT. See linked source for full text.

Secondary evidenceGenerative AI ·Cybersecurity ·Copyright & IpIssuing institution: Issuing authority not identified

17 SEP 2025 · Standard / Framework

Data protection authorities adopted joint statement on building trustworthy data governance frameworks to encourage development of innovative and privacy-protecting AI

Primary source (pcpd.org.hk) dated 17 September 2025 in IT. See linked source for full text.

Official materialData Privacy & Protection ·Generative AI ·SandboxOfficial source · pcpd.org.hk ↗

16 SEP 2025 · Court Case

R.G.L. n. 1018/2025

Lawyer used Unidentified in proceedings before the Tribunale di Torino. Outcome: Monetary sanction.

Court: Tribunale di TorinoParty: Lawyer

Fine: 1500 EUR

Secondary evidenceJudicial & Law Enforcement ·Generative AI ·Liability & AccountabilityIssuing institution: Tribunale di Torino

20 AUG 2025 · Other

Data Protection Authority investigation into dissemination of private audio involving unlawful processing of personal data

On 20 August 2025, the Italian Data Protection Authority issued Provision No. 479, imposing urgent measures under Article 58(2)(f) of the General Data Protection Regulation (GDPR) to address the unlawful dissemination of a private audio recording on the YouTube channel “Falsissimo” and its subsequent circulation on Instagram. The action followed a complaint under Article 77 GDPR seeking removal and de-indexing of the content across multiple platforms, including YouTube, TikTok, Instagram, Fac...

Official materialNational StrategyOfficial source · garanteprivacy.it ↗

30 JUL 2025 · Other

Italy Competition Authority investigates into Meta's integration of Meta AI in WhatsApp

Da marzo 2025 Meta, in posizione dominante nel mercato dei servizi di comunicazione via app, ha deciso di pre-installare il proprio servizio di intelligenza artificiale sull’app Whatsapp. In tal modo Meta potrebbe “imporre” ai propri utenti l’utilizzo dei propri servizi di chatbot e assistenza AI

Secondary evidenceAntitrust & Competition ·Generative AIIssuing institution: Issuing authority not identified

10 JUL 2025 · Court Case

Lawsuit relating to the compatibility of Italian Copyright compensation rules for digital platforms with European Union's copyright directive (Regional Administrative Court for Lazio v Meta Platforms Ireland) (Case No. C-797/23)

On 10 July 2025, the Advocate General of the Court of Justice of European Union issued an opinion on the Italian implementation of Article 15 of Directive (EU) 2019/790 on Copyright in the Digital Single Market. The Directive grants press publishers exclusive rights for the online use of their publications by information society service providers (ISSPs) including Meta Platforms Ireland. The Advocate General found that Italy’s obligations requiring ISSPs to negotiate with publishers, disclose...

Court recordContent ModerationOfficial source · curia.europa.eu ↗

10 JUL 2025 · Court Case

Di Rocco Isabelle - Corte di Cassazione, Sez. Pen. 3, Sent. n. 25455/2025

Misrepresented: Case Law | The Corte di appello invoked 'principi di legittimità' not actually affirmed by the Corte di Cassazione; Supreme Court found the lower court referred to legal principles that were not established by this Court. || Misrepresented: Case Law | The Corte di appello cited sentences of this Court with incorrect case numbers ('sentenze ... inesatte nel numero riportato'); the defence could not locate the cited pronouncements despite searches.

Court: Corte di CassazioneParty: Judge

Secondary evidenceHarms: Hallucination in legal filingsIssuing institution: Corte di Cassazione

19 MAY 2025 · Other

Data Protection Authority investigation into Luka's processing of personal data for development and training of Replika chatbot compliance with General Data Protection Regulation

On 19 May 2025, the Italian Data Protection Authority (DPA) opened an investigation into Luka, the provider of the artificial intelligence chatbot Replika. The DPA will assess Luka’s compliance with the General Data Protection Regulation (GDPR) regarding its processing of personal data for the purposes of training its generative AI chatbot. The investigation builds upon previous investigations of Replika by the Italian DPA, requesting that Luka provide information on the life cycle of its dat...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

19 MAY 2025 · Other

Garante fines AI company Replika's developer $5.6 million

VEDI ANCHE Provvedimento del 10 aprile 2025 Provvedimento del 22 giugno 2023 Comunicato stampa del 3 febbraio 2023 Provvedimento del 2 febbraio 2023

Official materialData Privacy & Protection ·Online Safety & Child ProtectionOfficial source · garanteprivacy.it ↗

18 APR 2025 · Other

Non-discriminatory digital services taxes in United States - Italy joint leaders' statement to strengthen strategic alliance across security, economic, and technological issues

On 18 April 2025, the United States and Italy adopted a joint statement to strengthen strategic alliance across security, economic, and technological issues. The statement applies to digital technology firms engaged in cross-border trade and investment between the two regions. The statement affirmed the need for a non-discriminatory environment in the taxation of digital services, aimed at maintaining favourable conditions for investment by technology companies.

Official materialNational StrategyOfficial source · whitehouse.gov ↗

18 APR 2025 · Executive Order

Data protection provision in Communications Regulatory Authority's Regulation for the Protection of Minors in the Digital Environment (Resolution no. 96/25/CONS)

On 18 April 2025, the Italian Communications Regulatory Authority (AGCOM) adopted Resolution 96/25/CONS, implementing Law No. 159/2023. The Resolution stipulates that platforms offering content in Italy are obligated to verify the age of users using certified third parties, through a two-step process involving identification and authentication. Verification may be conducted via applications such as digital identity wallets and must be applied per session. The Resolution delineates the respons...

Primary legal sourceNational StrategyOfficial source · agcom.it ↗

11 APR 2025 · Other

Competition Authority investigation against Google over alleged unfair commercial practices

On 4 November 2025, the Italian Competition Authority (AGCM) accepted Google's commitments and closed proceeding PS12714. Under the ruling, Google must revise the consent request circulated under Article 5(2) of Regulation (EU) 2022/1925, provide clearer information regarding the implications of consent on the use of personal data across its services, as well as allowing users to give consent only to specific services. Google must also send the updated request to new, passive, and active user...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

10 APR 2025 · Law / Act

Data Protection Authority investigation into Replika over alleged violations of GDPR provisions pertaining to legal basis for data processing and insufficient age verification

On 10 April 2025, the Italian Data Protection Authority (DPA) announced that it had fined Luka, the provider of the artificial intelligence chatbot Replika, EUR 5 million for violating the General Data Protection Regulation (GDPR). The DPA identified three main violations. First, Luka failed to properly identify valid legal bases for its various data processing operations, including those related to developing its large language model Replika. The privacy policy contained only vague reference...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

08 APR 2025 · Other

Data Protection Authority investigation into Lusha Systems over alleged unauthorised processing of contact data

On 8 April 2025, the Italian Data Protection Authority announced an investigation into Lusha Systems over the unauthorised processing of contact data. The investigation focuses on concerns that it collects and sells personal contact details, including email addresses and phone numbers, of individuals residing in Italy, including institutional figures, without appropriate consent. The Authority has requested Lusha to clarify, within twenty days, the volume and source of data processed, the met...

Official materialNational StrategyOfficial source · garanteprivacy.it ↗

07 APR 2025 · Working Paper

Data Protection Authority assessment of "Pay or ok" model

On 4 July 2025, the Italian Data Protection Authority closes the public consultation on the implementation of Pay or Ok systems compatibility with data protection regulations. The consultation aims to gather information on whether requiring users to consent to broad commercial profiling by numerous entities, as an alternative to paying a fee, can truly be considered free and informed consent. It also invites suggestions for less privacy-invasive alternatives to the current binary choice model...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

31 MAR 2025 · Executive Order

Communications Regulatory Authority enforcement against rebranded copyright-infringing website

On 31 March 2025, the Italian Communications Regulatory Authority (AGCOM) issued Determination No. 54/25/DDA ordering the blocking of the website ilgeniodellostreaming.delivery. The website was found to be a rebranded version of ilgeniodellostreaming.press, which had previously been blocked for distributing copyrighted content owned by Vision Distribution S.p.A. Following a complaint submitted by FAPAV on behalf of the rights holder, AGCOM confirmed that the domain name had been changed to ci...

Primary legal sourceContent ModerationOfficial source · agcom.it ↗

20 MAR 2025 · Other

Italy Senate passes AI bill

Primary source (senato.it) dated 20 March 2025 in IT. See linked source for full text.

Secondary evidenceData Privacy & Protection ·Copyright & IpIssuing institution: Issuing authority not identified