The Italian privacy authority changed its approach on the retention of metadata of employees' emails, but the new position might not be a solution for companies that shall perform substantial activities to comply.
The Supreme Court set the limits in which a privacy breach can amount to a crime in Italy, narrowing down the scope in a regime with considerably high GDPR fines.