Specific data protection law and official guidelines in Italy

Legislation

The existing Italian Data Protection Code (il Codice in materia di protezione dei dati personali) has been amended due to the changes brought by the GDPR. Accordingly, the Legislative Decree has been published in May 2018 (Decreto legislativo 30 giugno 2003, n.196 recante il “Codice in materia di protezione dei dati personali”).

Guidelines of the supervisory authority

The guidelines and decisions of Garante that has been issued before the GDPR came into force are still effective. This fact may result in a legal uncertainty for the changed provisions.