Corporate controls and data protection: what balance?
A recent judgment of the Court of Pisa, No. 800 of 13 June 2026, addresses a topic of particular interest for companies: the delicate balance between the protection…
Practice
AI and the employment relationship: initial guidance from the implementing decrees and data protection implications
Following the preliminary approval by the Council of Ministers, on 10 June 2026, of the first draft legislative decrees implementing the enabling law on artificial intelligence (Law No.…
Video-surveillance and data protection: the Italian Data Protection Authority reaffirms transparency obligations
With Decision No. 167/2026 of 12 March 2026, the Italian Data Protection Authority (“Garante per la protezione dei dati personali”) once again addressed the issue of video surveillance,…
Management of corporate email after termination of employment: the Italian Data Protection Authority extends the right of access to all emails in the individual email account
“An employee may access the messages in their corporate email account and the documents stored on their computer after the termination of employment. Any limitations must be justified by specific…
Management of corporate email after termination of employment: the limits according to the Italian Data Protection Authority
The Italian Data Protection Authority (i.e. “Garante per la protezione dei dati personali”) has once again provided guidance on how employers should manage corporate email accounts after the…
Remote work and geolocation. How to design remote work arrangements in compliance with applicable regulations
“Employers may not geolocate employees working remotely.” This was the position expressed by the Italian Data Protection Authority (i.e. “Garante per la protezione dei dati personali”), which imposed…
GPS and company vehicles. Continuous tracking exposes the company to risk
On January 16, 2025, the Italian Data Protection Authority (i.e. “Garante per la protezione dei dati personali”) issued a decision, publicly disclosed through its institutional newsletter on March…
Video surveillance: presence of workers and monitoring of their activities essential requirements for breach of prohibition on remote monitoring
By judgment of 26 September 2023, no. 46188, the Italian Court of Cassation, Third Chamber, ruled on the components necessary for the offence referred to in Article 4…
Right to use holidays to avoid exceeding job retention period (comporto): limits and conditions
With Order No. 26697 of 21 September 2023, the Italian Court of Cassation ruled that an employer can deny the holidays requested by a worker to avoid exceeding…
EU-US Data Privacy Framework: new safeguards for the transfer of personal data to the USA
On 10 July 2023, the European Commission adopted an adequacy decision for the EU-US Data Privacy Framework ensuring that the United States of America guarantees an adequate level…