"Documento Programmatico sulla Sicurezza" not required anymore! The Italian Government has approved the law decree aimed at simplifying a number of regulatory obligations including privacy obligations.
As part of a broad package of regulations that are intended to reduce bureaucratic obligations for companies, governmental authorities and consumers the Italian Government has also removed the obligation to draft the so called "Documento Programmatico sulla Sicurezza" i.e. a Privacy Security Document listing the privacy measures adopted by companies processing sensitive data through electronic means. This represented a very burdensome obligation for companies given to the level of detail required and therefore this is a very good news for companies. However, entities active in the Italian market should not underestimate privacy-related obligations because of this change. Indeed very relevant sanctions which include criminal penalties are applicable in case of breach of Italian data protection regulations.
