In a recent and thought-provoking decision, the Italian Data Protection Authority (Garante) sanctioned a securitization Special Purpose Vehicle (SPV) for failing to comply with several GDPR requirements โ most notably, for not appointing a Data Protection Officer (DPO).
Data Protection & Cybersecurity
Here you can read some articles on Italian and international privacy, cybersecurity and data protection issues drafted by either Giulio Coraggio or the other authors of GamingTechLaw.
11
25
15
The European Commission has recently published an updated version of the FAQs on the Data Act, offering further clarification on the concepts of inferred or derived data.
24
The NIS 2 Directive has been implemented in Italy through Legislative Decree No. 138/2024, which has expanded the scope of the regulation at the national level, and one of the first obligations imposed by the decree is the registration on the National Cybersecurity Agency (ACN) portal by the end of February 2025.
19
05
The European Data Protection Board (EDPB) recently published a report by a pool of experts on the enforcement of data subjects' privacy right in the context of AI-complex algorithms.
30
The Digital Operational Resilience Act (DORA) is now fully applicable as of January 17, 2025, bringing sweeping changes to cybersecurity in the financial sector.
30
18
The European Data Protection Boardโs Opinion 28/2024 represents a landmark effort by the EDPB to clarify how the GDPR applies to AI models.
01