ITALY—Government approves decree; Garante publishes guide

The government has approved a legislative decree by means of which the EU Cookies and Data Breach Notification Directive has been finally implemented. The opt-in regime has been introduced as mandatory rule. The data breach notification obligation is for now mandatory in the telecom and Internet service provider market only.

Garante publishes cloud computing guide

The Italian Data Protection Authority, the Garante, has released a practical guide on cloud computing risks and opportunities for citizens and operators. The guide stresses the need of strong contractual schemes and security measures to navigate safely in a cloud ambient.

Garante ruled on healthcare data again

With an ad hoc resolution, the Garante adopted a number of measures and prescriptions to rule the data processing carried out during clinical operations for RX and/or MR or by means of any other similar devices. Informative notice and consent must be collected unambiguously in order to provide a clear picture of purposes of data collection. Profile of security measures has been stressed as well.