Italian implementation of the GDPR is creating some confusion on privacy obligations, but the GDPR is already in place and fines might be already applicable.
When are images and in particular customers' pictures biometric data? And what are the obligations triggered under the GDPR at the age when the automation is meant to increase?
