AI | Italian DPA issues Opinion on the Italian AI Bill

On 2 August 2024, the Italian Data Protection Authority (DPA) issued its opinion (Opinion) on the draft Italian Artificial Intelligence Bill (AI Bill), which aims to regulate the implementation of AI systems and models into Italian law. The AI Bill also allows the Italian Government to align national laws with the European AI Act. While the DPA expressed a generally favourable Opinion, it stressed that the AI Bill must be revised and expanded in several key areas to ensure stronger protection for citizens’ personal data. The DPA’s primary concerns focused on the regulation of data processing in areas such as research, healthcare, secondary data usage, labour, child protection and age verification. Notably, the DPA recommended including a general requirement that all AI-related data processing comply with existing data protection laws. Additionally, it called for greater oversight by the DPA in monitoring AI compliance, suggesting that the DPA be designated as the competent authority for supervising high-risk AI systems used in areas such as law enforcement, remote biometric identification, emotion recognition, border control, justice administration and democratic processes.

Newsletter n. 99 – August/September 2024