The decision of the Data Protection Authority regarding the retention of email metadata might have a severe impact on the cybersecurity strategy of businesses operating in Italy.
The Italian privacy authority changed its approach on the retention of metadata of employees' emails, but the new position might not be a solution for companies that shall perform substantial activities to comply.
DLA Piper decided to lodge a contribution to the consultation of the Italian data protection authority, the Garante, on the retention of metadata of employees' e-mails.
In a highly discussed (and criticized) move, Italian Privacy Authority (the Garante) has mandated a dramatic shift in email metadata retention policies relating to employees emailsโ metadata.