Intelligenza artificiale: Italia (2026)
Italy applies the EU AI Act as the baseline risk-based framework and became the first EU Member State to adopt a dedicated national AI law — Law No. 132/2025, in force since 10 October 2025 — which complements (rather than duplicates) the EU regulation by setting principles and sector-specific rules for healthcare, labour, public administration, justice, research, intellectual professions and protection of minors. Italy has designated AgID as the notifying authority and the Agenzia per la Cybersicurezza Nazionale (ACN) as the market surveillance authority and single point of contact with the EU, while the Garante Privacy retains GDPR powers over AI processing personal data. The law also delegates the Government to adopt implementing decrees and introduces criminal-law amendments, including a new offence for malicious deepfakes.
Struttura primaria
EU AI Act (Regulation (EU) 2024/1689) + Italian Law No. 132 of 23 September 2025 ('Disposizioni e deleghe al Governo in materia di intelligenza artificiale'), in force since 10 October 2025; national competent authorities: AgID (notifying authority) and ACN (market surveillance), with Garante per la protezione dei dati personali for data protection aspects.
Punti chiave
Linee guida della legge dell'UE sull'intelligenza artificiale
As an EU Member State, Italy applies Regulation (EU) 2024/1689 (AI Act), with its risk-based tiering (prohibited, high-risk, limited/minimal) and GPAI obligations rolling in through 2026-2027. Italian Law 132/2025 explicitly aligns with and supplements the EU framework.
National Law No. 132/2025
Published in Gazzetta Ufficiale No. 223 of 25 September 2025 and in force since 10 October 2025, the 28-article law sets principles (human-centric, transparency, non-discrimination, cybersecurity) and sector rules for healthcare, labour, public administration, justice, research, and intellectual professions, plus a legislative delegation to the Government for further decrees.
Competent authorities (AgID & ACN)
AgID (Agenzia per l'Italia Digitale) is designated as the notifying authority (promotion, notification, accreditation of conformity-assessment bodies); ACN (Agenzia per la Cybersicurezza Nazionale) is the market-surveillance authority with inspection and sanctioning powers, and single national contact point under Article 70 of the AI Act. Bank of Italy, CONSOB and IVASS supervise AI in financial-sector use cases.
Criminal law & deepfakes
The law amends the Penal Code: it introduces a new Article 612-quater criminalising the illicit dissemination of AI-generated or altered audio/visual deepfakes causing unjust harm (1-5 years imprisonment) and adds a general aggravating circumstance for crimes committed with AI assistance.
Sector rules: health, work, minors
AI in healthcare must preserve the physician's final decision and inform patients; secondary use of pseudonymised data for research is enabled with safeguards. Employers must inform workers of AI used in the workplace. Minors under 14 require parental consent to use AI services; the law also addresses AI in intellectual professions and in public administration.
Garante Privacy & GDPR interface
The Italian Data Protection Authority (Garante per la protezione dei dati personali) retains its full GDPR powers over AI systems processing personal data, has issued opinions on draft AI implementing legislation, and has actively enforced against AI providers (e.g. ChatGPT, DeepSeek), requiring legal bases for training data, DPIAs and transparency.
National AI Strategy 2024-2026
Italy's Strategy for Artificial Intelligence 2024-2026, coordinated by AgID and the Department for Digital Transformation, structures non-binding policy actions across four pillars — Research, Public Administration, Businesses and Education — complementing the binding EU/national rules.
La presente pagina è una traduzione fornita a titolo informativo; la versione inglese è quella ufficiale e non costituisce un parere legale.