Southern Europe · EU Member State

Italy

EU AI Act Intelligence Brief

85 / 100

Ready

Updated 17 May 2026

Enforcement Outlook

Enforcement Posture

Active

Regulatory Clarity

Medium

SME Risk Exposure

Elevated

Implementation Pace

Advanced

Readiness Scorecard

🏛

Authority Status

Officially Designated

📋

Guidance

Extensive Guides

⚖️

Legislation

Enacted

🧪

Regulatory Sandbox

Planned

📈

Market Activity

High Activity

Data completeness

80%

Confidence: High Index reviewed: 17 May 2026

Who This Is For

Non-EU Market Entrant Compliance Advisor

Key Intelligence

Italy is the first EU member state to adopt a dedicated national AI law — Law No. 132/2025 comprising 28 articles entered into force October 2025, giving Italy a more explicit domestic governance framework than any peer jurisdiction

The Italian model centres on two authorities — AgID as notifying authority and ACN for market surveillance — simpler than France's 17-authority model but still layered with Garante privacy enforcement and sector-specific oversight

In April 2026 Italy became the first EU member state to adopt a national standard for AI professional roles (UNI 11621‑8:2026), translating the EU AI Act and Law No. 132/2025 into 12 formally defined, certifiable AI job profiles that strengthen practical implementation capacity across enterprises and the public sector

The Garante imposed a €20 million fine on Clearview AI and intervened against OpenAI, ChatGPT and DeepSeek — establishing Italy as one of the EU's most proactive early enforcers of AI-adjacent privacy law

Law No. 132/2025 introduces criminal penalties for generating or distributing deepfake content designed to mislead — unique in the EU, raising compliance stakes for generative AI deployers beyond administrative fines

AI systems accessible to under-14s require prior parental consent under Italian law for both system access and data processing — a compliance layer not present in most other member states, critical for any consumer-facing AI product

Only 8.2% of Italian enterprises use AI against a 70.2% SME basic digital intensity rate — the gap between digital capability and structured AI deployment is Italy's defining compliance risk profile

Supervisory Authority

AgID / ACN / Garante ↗

Status: Designated (Not Yet Operational)

Notes: Italy’s regulatory architecture remains confirmed: AgID is designated as notifying authority and ACN (National Cybersecurity Agency) as market surveillance authority, single point of contact and lead enforcement body under Law No. 132/2025, in force since 10 October 2025. The law is still described as the first dedicated national AI framework law within the EU and is designed not to introduce new obligations beyond the EU AI Act, while adding sector‑specific safeguards for healthcare, workplace, justice, public administration, intellectual professions and copyright. In April 2026, Italy also became the first EU Member State to adopt a national AI professional‑profiles standard (UNI 11621‑8:2026), which translates the EU AI Act and Law No. 132/2025 into 12 formal AI roles (from Chief AI Officer and AI Product Manager to AI Security Specialist and NLP Engineer) with defined competences, tasks and KPIs, giving enterprises, public administrations, universities and certification bodies a structured, certifiable basis for AI‑Act‑aligned roles and training pathways. Implementing decrees to confer full sanctioning powers and define algorithm‑training and data‑governance rules are due by October 2026 (12 months from the law’s entry into force) and remain outstanding as of May 2026, and the national regulatory sandbox is still in the “planned” phase rather than fully operational.

Website: https://www.acn.gov.it/portale/home ↗

Enforcement Actions 1

Country/Jurisdiction	Source URL	Legal Framework	Alleged Violation	Company/Entity	Authority	Details	Date Opened	Status	Potential Penalty
Italy	https://www.nortonrosefulbright.com/en/knowledge/publications/9bfedfea/italy-enacts-law-no-132-2025-on-artificial-intelligence-sector-rules-and-next-steps	Italian Law 132/2025 + AI Act	Unlawful dissemination of AI-generated/altered content (deepfakes)	X (formerly Twitter)	Multiple authorities	Italy's AI Act implementation law (Law 132/2025) entered into force Oct 10 2025. Creates new criminal offense for deepfake dissemination. X/Grok case may be prosecuted under this framework alongside other jurisdictions.	December 2025	Active	Up to €774685 + criminal penalties (1-5 years imprisonment)

Full Intelligence Brief

Italy Country Intelligence Briefing — EU AI Act Implementation

Complete supervisory architecture analysis
Enforcement trajectory & projections
National implementation choices & deviations
GDPR enforcement parallels
SME exposure & ecosystem dynamics

Free download

Get the Full Brief

PDF · Instant download · Updated May 2026