The GDPR is applicable to any business looking at the European Union, especially after the EDPB guidelines on the territorial scope.
29
Here you can read some articles on Italian and international privacy, cybersecurity and data protection issues drafted by either Giulio Coraggio or the other authors of GamingTechLaw.