The new tracking pixel rules adopted by the Italian data protection authority become binding on 29 October 2026, requiring prior consent for the invisible images that report when a marketing email is opened, and companies that have not rebuilt their consent, withdrawal and identifier design by that date will be exposed to an authority that can verify the breach from outside the company, simply by receiving one of their emails.