DATA PROTECTION | Italian DPA approves code of conduct for software houses

On 14 October 2024, the Italian Data Protection Authority (DPA) approved Assosoftware’s code of conduct for the processing of personal data. The code of conduct is addressed to software houses involved in the development and production of business management software. The code, a first in the sector, establishes clear guidelines to ensure that personal data protection principles are embedded throughout the entire life cycle of management software. The initiative promotes compliance with the GDPR through privacy-by-design and by-default measures, covering activities from design, production, and testing to installation, maintenance, and updates. Given that these software tools may involve processing personal data on behalf of clients, the code addresses key obligations for software houses acting as data processors. The approval of this Code marks a significant step toward ensuring transparency, security, and GDPR compliance in the software management industry, offering a standardized framework to enhance trust in digital solutions among businesses, professionals, and public entities.

Newsletter n. 102 – December 2024