The Italian communications authority has opened a public consultation that rewrites the only workable exemption from the gambling advertising ban.
NIS 2 Italy has moved from registration to enforcement. Entities listed in April 2025 have reached the 18-month deadline for the basic security measures this month, incident notification has been mandatory since January, and the annual cycle of declarations and updates now runs whether boards pay attention to it or not.
A cyber attack that disabled refrigeration in roughly 700 French supermarkets has turned the European reporting duties on connected products from a paper exercise into a live test, and it exposes three separate layers of liability that sit with three different parties: the manufacturer of the device, the operator of the site, and the maintenance contractor in between.
The NFL and the attorneys general of 39 states and the District of Columbia have filed briefs urging the US Supreme Court to hear New Jersey's petition against Kalshi, and with it the question of whether a prediction market is gambling. For prediction markets in Europe that question has already been answered, by national regulators acting on their own authority, and no ruling in Washington will reverse the answer.
The new tracking pixel rules adopted by the Italian data protection authority become binding on 29 October 2026, requiring prior consent for the invisible images that report when a marketing email is opened, and companies that have not rebuilt their consent, withdrawal and identifier design by that date will be exposed to an authority that can verify the breach from outside the company, simply by receiving one of their emails.
Italian AI Act enforcement now has a complete institutional machine behind it, because the second implementing law that Italy published on 8 October 2026 in the Italian Official Journal designates the authorities that will inspect and sanction, fixes the level of the fines, opens a national regulatory sandbox and restricts the use of artificial intelligence in decisions affecting employees.
Cyber Resilience Act reporting obligations are now live, but the difficult question for manufacturers is not simply whether they have to report a cyber incident. It is what happens after the report has been made, while the incident is still developing.
The Italian Administrative Supreme Court, the Consiglio di Stato, has changed the regulatory framework for gambling top-up shops in Italy, known as Punti Vendita Ricariche or PVRs.
When your own company’s AI agent is hacked, who is liable for what happens next? This is a question I expect to hear much more often as companies give AI agents access to internal systems, business applications, customer data and, increasingly, the ability to take actions without a human approving every step.
Gambling advertising in Italy remains one of the most closely regulated areas of the country's gambling market. The recent approval of the so-called Decree Accise by the Italian Senate has brought the issue back into focus, particularly because Parliament considered, and rejected, proposals that would have extended the rules to a much wider range of promotional activities.