Binding law — in force
From 2025-10-10, Italian Law 132/2025 Art. 4(3) requires the information and communications on data processing connected with the use of AI systems to be given in clear and simple language, so that the user can know the risks and exercise the right to object to authorised processing of their personal data. Detect a privacy notice (informativa) that never mentions the AI processing next to the right to object.
it-law-132.ai-processing-information-and-objection · Law 132/2025, Art. 4(3) (plain-language information on AI data processing; right to object) · official source · jurisdictions: IT
The guard to add, and how far to trust this rule
Binding law — in force
Italian Law 132/2025 Art. 25(1)(b) inserted Art. 70-septies into the Copyright Law (633/1941): reproductions and extractions from works or other materials available online or in databases lawfully accessed, for text and data mining through AI models and systems, including generative AI, are permitted in conformity with Arts. 70-ter and 70-quater. Art. 70-quater(1) allows text and data mining only where the use has not been expressly reserved by the rightholders. Detect a crawler that collects web content for training with no robots.txt or TDM-reservation check.
it-law-132.ai-tdm-respects-rights-reservation · Law 132/2025, Art. 25(1)(b) (new Art. 70-septies of Law 633/1941: text and data mining by AI) · official source · jurisdictions: IT
The guard to add, and how far to trust this rule
Binding law — in force
From 2025-10-10, Italian Law 132/2025 Art. 7(3) gives the person concerned the right to be informed about the use of AI technologies in health care. Detect patient-facing consent or information material (consenso informato, informativa) in a product that uses AI in care but never mentions AI.
it-law-132.health-ai-patient-informed · Law 132/2025, Art. 7(3) (right to be informed of the use of AI) · official source · jurisdictions: IT
The guard to add, and how far to trust this rule
Binding law — in force
From 2025-10-10, Italian Law 132/2025 Art. 7(6) requires AI systems used in health care, and the data they use, to be reliable and periodically verified and updated to minimise the risk of errors and improve patient safety. Detect a health AI repository with no scheduled verification of the model's accuracy (evaluation job, monitoring or revalidation report).
it-law-132.health-ai-periodic-verification · Law 132/2025, Art. 7(6) (health AI and its data reliable, periodically verified and updated) · official source · jurisdictions: IT
The guard to add, and how far to trust this rule
Binding law — in force
From 2025-10-10, Italian Law 132/2025 Art. 7(5) makes AI systems in health care a support for prevention, diagnosis, treatment and therapeutic choice, leaving the decision always to the medical professional. Detect model output written to a clinical record (diagnosis, prescription, treatment plan, FHIR Condition, CarePlan or MedicationRequest) with no physician sign-off or draft status.
it-law-132.health-ai-physician-decides · Law 132/2025, Art. 7(5) (AI supports; the decision is always the physician's) · official source · jurisdictions: IT
The guard to add, and how far to trust this rule
Binding law — in force
From 2025-10-10, Italian Law 132/2025 Art. 4(4) makes access to AI technologies by children under fourteen, and the processing of their personal data that follows, subject to the consent of whoever exercises parental responsibility, in line with the GDPR and the Italian Data Protection Code. A child aged fourteen to seventeen may consent to the processing connected with AI use only if the information on that processing (Art. 4(3)) is easy to find and understand. Detect an AI route that knows the user's age or date of birth but calls the model with no parental-consent check.
it-law-132.minor-under-14-parental-consent · Law 132/2025, Art. 4(4) (parental consent for children under 14) · official source · jurisdictions: IT
The guard to add, and how far to trust this rule
Binding law — in force
From 2025-10-10, Italian Law 132/2025 Art. 13 limits AI in the intellectual professions to instrumental and support activities, with the professional's intellectual work prevailing, and requires the professional to communicate the information on the AI systems used to the client in clear, simple and exhaustive language. Detect a professional's engagement letter or client terms that never mention AI, in a practice product that uses it.
it-law-132.professional-ai-client-information · Law 132/2025, Art. 13(2) (professional informs the client of AI systems used) · official source · jurisdictions: IT
The guard to add, and how far to trust this rule
Binding law — in force
From 2025-10-10, Italian Law 132/2025 Art. 11(2) requires workplace AI to be safe, reliable and transparent and obliges the employer or principal to inform the worker of the use of AI in the cases and manner of D.Lgs. 152/1997 Art. 1-bis: before work starts, the aspects of the relationship the systems affect, their purposes, logic and functioning, the data and main parameters used to program or train them, the control measures and correction processes, and their accuracy, robustness, cybersecurity and potentially discriminatory impacts, in a transparent, structured, commonly used and machine-readable format, also to worker representatives. Detect an AI employment-decision or monitoring system with no worker information document.
it-law-132.workplace-ai-worker-information · Law 132/2025, Art. 11(2) (safe, transparent workplace AI; employer informs the worker) · official source · jurisdictions: IT
The guard to add, and how far to trust this rule
