On 12th December 2017, the Article 29 Working Party ("WP29"), published its draft Guidelines on Consent under the General Data Protection Regulation 2016/679 ...

On February 22nd 2018, the Italian Data Protection Authority (called, the "Garante") has adopted decision n. 121 (the "Decision") which offers a description of the way in which the correct application of the provisions of the EU General Data Protection Regulation ("GDPR" or "Regulation") is going to be monitored and verified. Moreover, it contains further details on the information notice and general good practices when the processing is based on a legitimate interest.

On December 15th 2017, the Italian Data Protection Authority (called the "Garante") published the new "frequently asked questions" (FAQs) related to the Data Protection Officer (DPO) in the public sphere.

The Italian Court of Cassation, Criminal Section[1] has recently revised its previous interpretation of Article 167 of the new Privacy Code.

Regulatory sandboxes allow companies to test innovative technological products within a controlled real-world environment under a specific framework developed and monitored by one or more competent authorities, for a limited period of time.

Following the invalidation of the Privacy Shield on 16 July 2020 by the Court of Justice of the European Union, the situation with respect to Data transfers is becoming progressively complex.

On 12th December 2017, the Article 29 Working Party ("WP29") published the draft Guidelines on transparency under the General Data Protection Regulation 2016/679 ...

The recent Covid-19 pandemic has revolutionized the ways in which companies manage their workforce. With the beginning of "Phase Three" and the reopening of production activities, ...

The Italian State has decided to protect its critical operators, both public and private, by virtue of the "national cybernetic security".

On October 11, 2018, the Italian Data Protection Authority (hereafter referred to as "Garante") issued, pursuant to Article 35(4) GDPR, the list containing further processing activities

Following our previous articles published on July 30 and September 25, we conclude our brief analysis of the Whistleblowing Reporting System ..

In the last weeks of June, it can be noticed that two European Data Protection Authorities focused their attention on the subject of ‘Programmatic Advertising'; namely, the Information

Today the European Data Protection Board published its Frequently Asked Questions on the judgment of the Court of Justice of the European Union in Case C-311/18 – Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems, ...

After the official statements of the European Data Protection Board (EDPB) and several Supervisory Authorities (SAs), it is clear that at the moment there is no practical way for data to lawfully flow from the EU to the US.

European Commission, ENISA, CERT-EU and Europol – COVID-19 Joint Statement...

Cybersecurity Comparative Guide for the jurisdiction of Italy, check out our comparative guides section to compare across multiple countries

Under the European Commission Delegated Regulation (EU) 2024/1773, suppliers of Information and Communication Technology (ICT) services to financial entities are subject to stringent obligations...

In the evolving COVID-19 scenario in which business continuity also depends on adequate data protection and cybersecurity practices on the part of organizations