A 55,000-euro sanction over professional PEC records shows how registry transfers can become a privacy and compliance problem long before anyone talks about a breach.
The real obstacle is not a lack of interest in automation, but the integration debt hidden inside public-sector back office systems.
New enforcement rules around the AI Act and Italy’s AI law point to a future where traceability, evidence handling, and governance records become central to compliance.
A draft decree would create a national AI sandbox under AgID and ACN, turning Italy’s next AI move into a test of how regulation, access to market, and supervision can coexist.
A court annulment tied to AgID’s use of an external platform shows how verifiability, traceability, and source access can become legal-security requirements, not optional extras.
The Fascicolo Sanitario Elettronico concentrates medical data, access rights, and consent into one system, which is why its design choices matter as much as its public-service goals.
A national one-stop shop for protected data reuse may create new governance and security considerations around public-sector information flows, even without changing the data itself.
For Italian e-commerce, accessibility is moving from best practice to legal requirement, with the most sensitive parts of the buying journey now under scrutiny.
Italy’s public-sector AI procurement is being recast around governance, control, data protection, and sustainability, with the purchase treated as a lifecycle that must end cleanly as well as begin well.
With surprise enforcement, AGID’s 2025 regulation wipes out negotiation and exposes public administrations to fast-track fines, reputational damage, and personal risk.