The NIS Directive is applicable and obliges a number of companies to reinforce their cybersecurity plan beyond what already provided by the GDPR.

On 17 September 2025, the Italian Senate approved a landmark law on artificial intelligence (AI), making Italy the first EU country to enact a national law specifically regulating AI while aligning with the EU AI Act.