The Italian Code of Data Protection restricts the rights of the data subjects in the following cases (Article 2-undecies):

  • Money laundering
  • Support for victims of extortion demands
  • Activity of parliamentary commissions of inquiry
  • Activities carried out by a public entity
  • Carrying out defensive investigations or to exercise a right in court
  • Whistleblowing

Exercise of the data subjects’ rights of deceased persons

Article 2-terdecies of the Italian Data Protection Code allows other persons who have an interest (e.g., for family reasons) to exercise the data subjects’ rights of deceased persons – unless it is forbidden by law or in case of the direct offer of information society services – if the deceased expressed such a wish by a written declaration.