Act 2003
Decreto legislativo 30 giugno 2003, n. 196 - Codice in materia di protezione dei dati personali (Personal Data Protection Code), as amended by Legislative Decree 101/2018
Plain-English summary
The national data protection code, adapted to the GDPR (Regulation (EU) 2016/679) by Legislative Decree 101/2018 of 10 August 2018. The Garante is the supervisory authority and publishes the code with its deontological rules.
Who it applies to
All industries
Topics
Data Protection & Privacy
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Personal data breach notification | Deadline Without undue delay and, where possible, within 72 hours | Garante per la protezione dei dati personali | official | |
The controller notifies the Garante without undue delay and, where possible, within 72 hours of becoming aware, unless the breach is unlikely to risk individuals' rights; late notices must give reasons. Notification goes through the Garante's online portal. Breaches posing a high risk must also be communicated to the individuals affected, and all breaches must be documented. |
||||
| No obligations match these filters. | ||||
Latest news
No related news yet. We publish updates as regulators act.