Employee email monitoring can expose companies operating in Italy to heavy GDPR fines, even when it uncovers genuine misconduct.
30
Data Protection & Cybersecurity
Here you can read some articles on Italian and international privacy, cybersecurity and data protection issues drafted by either Giulio Coraggio or the other authors of GamingTechLaw.
24
16
13
25
09
01
AI sentiment analysis in the workplace raises critical questions under both the GDPR and the AI Act, as confirmed by a recent warning issued by the Italian Data Protection Authority against Myndoor S.r.l., a company offering a stress-detection plug-in for Slack and Teams corporate chats.
07
The new framework on NIS2 categorization in Italy introduces significant compliance obligations for entities falling within the scope of the Italian NIS2 regime. The purpose of the categorization exercise is to enable ACN to determine which additional cybersecurity measures will apply depending on the services provided by the relevant entity.
26
23
On 17 April 2026, the Italian Data Protection Authority, the Garante, adopted the Guidelines on the use of tracking pixels in email communications (available here), currently pending publication in the Official Gazette. Around one month earlier, on 12 March 2026, the French Privacy Authority, the CNIL had adopted its own Recommendation on the same subject (available here), following a public consultation launched in June 2025.