The European Data Protection Board (EDPB) recently adopted Guidelines 04/2026 on administrative fines (published on 17 September 2026 and open for public consultation until 13 November 2026).
01
13
The new tracking pixel rules adopted by the Italian data protection authority become binding on 29 October 2026, requiring prior consent for the invisible images that report when a marketing email is opened, and companies that have not rebuilt their consent, withdrawal and identifier design by that date will be exposed to an authority that can verify the breach from outside the company, simply by receiving one of their emails.
02
16
13
25
11
On June 10, 2026, Italy's Council of Ministers approved two implementing decrees under Law No. 132/2025, making Italy the first EU Member State to operationalize a comprehensive national AI regulatory framework aligned with the EU AI Act (Regulation (EU) 2024/1689).
03
The Italian Data Protection Authority (the Garante) issued its first GDPR fine on, among others, the unlawful retention of metadata from employees’ emails and web browsing activities applying in Italy for the first time its highly discussed guidelines of 2024 on the use of metadata in workplace email systems.
31
24