Italian DPA Adopts Proactive Approach For Protecting Consumer Data

Il Garante della Privacy ha sanzionato una società per aver negato a un ex dipendente l'accesso completo alla casella e-mail aziendale, chiarendo che anche le comunicazioni di lavoro costituiscono dati personali dell'assegnatario. La decisione stabilisce limiti precisi alle pratiche di oscuramento preventivo e definisce quando il diritto di accesso può essere legittimamente limitato.

Il Garante Privacy ha stabilito con provvedimento del 4 marzo 2026 che le attività di digital forensics nelle indagini interne aziendali costituiscono trattamento di dati personali soggetto alla normativa privacy.

Il Garante della Privacy avverte sui rischi dell'uso di sistemi AI per l'analisi dello stress lavorativo tramite sentiment analysis dei messaggi dei dipendenti, sottolineando la necessità di proteggere i dati personali e la dignità dei lavoratori.

The Italian Data Protection Authority has ruled against a company that denied a former employee complete access to their corporate email account, clarifying that work-related emails constitute personal data under GDPR. The decision addresses the boundaries of employee data access rights and establishes that employers cannot arbitrarily obscure or withhold work-related correspondence without specific legal justification.

The Italian Data Protection Authority has ruled that digital forensics activities conducted during internal corporate investigations must comply with data protection regulations. Following an anonymous whistleblowing report, a company's forensic examination of a senior executive's email and storage was deemed unlawful due to failures in information provision, data processor appointment, and adherence to data minimisation principles.

Data protection has become a critical risk issue for family offices, extending far beyond basic legal compliance.

An employee at Intesa Sanpaolo unlawfully accessed thousands of customer records over two years, leading to a €31.8 million fine from Italy's data protection authority. The ruling underscores that insider threats demand proactive, risk-based controls and that unauthorised access alone—even without data extraction—triggers serious breach notification obligations under GDPR.

Following numerous stop-and-go developments by the Regional Administrative Court (TAR) for Lazio, the Council of State, and the Court of Justice of the European Union regarding...

In today's digital economy, a growing number of organisations established outside the European Union (EU) are entering the EU market, by offering goods or services to individuals within the EU.

This is to inform you with complete transparency that we have detected an abusive access that has affected some of our systems, and may have affected some personal data.

The Senate's failure to achieve the 60-vote threshold on the Digital Asset Market Clarity Act leaves the timeline for comprehensive federal cryptocurrency regulation uncertain. Two key obstacles emerged: concerns over ethics provisions designed to prevent senior officials from profiting from digital ventures, and unresolved disputes over activity-based rewards and yield payments on stablecoins that banking groups warn could drain deposits from community banks.

How can multinational corporations effectively navigate the complex landscape of tax disputes across multiple European jurisdictions? This analysis examines strategic approaches and procedural considerations...

The SEC has proposed a comprehensive modernization of federal transfer agent rules that would expressly permit the use of blockchain technology as a master securityholder file. The proposal introduces technology-neutral language alongside new reporting requirements for distributed ledger technology usage and tokenized securities activity.

As federal climate disclosure rules face rescission and state-level mandates remain largely stalled, California's SB 253 greenhouse gas reporting requirement stands as the sole advancing framework, creating a fragmented compliance landscape where multistate companies must navigate divergent regulatory trajectories. With the SEC's 2024 climate rules stayed and proposed for elimination, and California's Air Resources Board finalizing implementation mechanics for November 2026 reporting deadlines, the operatio

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...

A federal court has struck down New York's Climate Change Superfund Act, which sought to recover $75 billion from fossil fuel companies based on historical emissions. The ruling found the Act preempted by the Clean Air Act, marking the first judicial decision on state climate superfund legislation and establishing that EPA's rescission of the endangerment finding does not alter preemption analysis.

The European Commission has adopted final Guidelines on exclusionary abuses of dominance under Article 102 TFEU, introducing a "workable effects approach" that narrows presumptions while expanding guidance on objective justifications and recognizing sustainability benefits as valid efficiencies for the first time. These Guidelines replace the 2008 Enforcement Priorities Guidance and are expected to significantly impact enforcement practices across EU Member States and beyond, particularly for digital market

In a recent PTAB decision, Director Squires addressed whether Microsoft's IPR petition should proceed despite Sandpiper CDN's discretionary denial request. The ruling hinged on two critical factors: the novelty of Microsoft's art citations and Sandpiper CDN's failure to disclose its own commonly assigned prior art during patent prosecution. This case provides important guidance on how patent owners' prosecution conduct can impact discretionary denial outcomes at the Patent Trial and Appeal Board.

The European Commission has proposed replacing the EU's three core procurement directives with a single, directly applicable Regulation that would fundamentally reshape how companies compete for public contracts across Member States. The reform introduces mandatory quality criteria thresholds, embeds ESG considerations as evaluation factors, and establishes new security and European-preference provisions that could restrict participation based on ownership, supply chain exposure, and strategic dependencies.

Early decisions about a start-up's legal structure can dramatically affect tax outcomes and financial returns as the company grows and reaches liquidity events. Understanding the Qualified Small Business Stock (QSBS) exemption and implementing proper structuring from the outset can significantly enhance returns for both founders and investors.