Updated 2025 guide on diritto all'oblio under Italian law: current regulations, rights, practical procedures and when to consult a professional.
The regulation of diritto all'oblio in Europe is centred on Regulation (EU) 2016/679 (GDPR), in force since 25 May 2018. In Italy, Legislative Decree 196/2003 (Privacy Code), updated by Leg. Decree 101/2018, integrates European provisions. The Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) is the national supervisory authority with inspection and sanctioning powers. The GDPR establishes fundamental principles: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity, confidentiality and accountability.
Organisations processing data in the context of diritto all'oblio must comply with precise obligations. First, identify the legal bases for processing (consent, contract, legal obligation, legitimate interest). The Record of Processing Activities (art. 30 GDPR) is mandatory for organisations with more than 250 employees or processing sensitive data. Other obligations include: clear privacy notices; appointment of a DPO where required; adequate technical measures (encryption, pseudonymisation); data breach notification procedure within 72 hours; DPIA for high-risk processing activities.
The GDPR grants data subjects a broad range of rights concerning diritto all'oblio: right of access to personal data (art. 15), rectification (art. 16), erasure and right to be forgotten (art. 17), restriction of processing (art. 18), data portability (art. 20), objection (art. 21) and protection against automated decision-making (art. 22). To exercise them, the data subject sends a written request to the controller, who must respond within 30 days (extendable by 60). If no response is received, a complaint may be lodged with the Garante or proceedings brought before the courts.
Violations of the GDPR concerning diritto all'oblio carry severe penalties: up to €10 million or 2% of global turnover for minor violations; up to €20 million or 4% for more serious ones (violation of fundamental principles, failure to respect data subjects' rights). The Italian Garante has already imposed significant sanctions on numerous public and private organisations. In addition to administrative sanctions, violations may give rise to civil liability in favour of the individuals harmed.
In the area of diritto all'oblio, cookie management is one of the most critical aspects for websites. The Garante's order of 10 June 2021 requires: free, specific, informed and unambiguous consent; rejection as easy as acceptance; no cookie walls; right to withdraw consent at any time. Technical cookies do not require consent. Anonymised analytics cookies are exempt if they do not allow identification. Profiling cookies always require explicit consent. The banner must offer 'accept all' and 'reject all' options with equal visual prominence.
To achieve compliance regarding diritto all'oblio, an organisation must: map its data (identify types, purposes, legal bases, retention and parties with access); prepare the Record of Processing Activities; update privacy notices and cookie banners; enter into Data Processing Agreements (DPA) with suppliers; train staff; implement technical security measures (encryption, backups, access controls). An external DPO or privacy law consultant can efficiently guide the compliance process.
When should I hire a lawyer in Italy?
You should consult a lawyer whenever a dispute involves significant financial stakes, when the other party is legally represented, when court proceedings are imminent, or when the matter involves criminal law or complex administrative procedures. Free or low-cost initial consultations are available through bar associations, consumer associations and trade unions.
What is legal aid (gratuito patrocinio) in Italy?
Legal aid (patrocinio a spese dello Stato, Presidential Decree 115/2002) allows those whose taxable income does not exceed €11,746.68 per year (2024 threshold) to obtain state-funded legal representation in civil, criminal, administrative and tax proceedings. Applications are submitted to the local Bar Council. Certain offences and proceedings are excluded.
How can I find a specialist lawyer in Italy?
You can search through the Bar Council (Consiglio dell'Ordine degli Avvocati) register in your city, the National Bar Council's online registry (Albo Unico Nazionale), or professional associations such as AIAF (family law), AIGA (young lawyers) or AIBE (business law). Many lawyers offer a free initial 30-minute consultation.
Are legal proceedings in Italy very expensive?
Costs depend on the complexity and duration of the case. Court fees (contributo unificato) are moderate and vary by value of the claim. Lawyer's fees are freely negotiated (no fixed tariff since 2012), though the Bar Council has published indicative guidelines. Costs may be recovered from the losing party if the court orders it. Legal aid covers costs for those who qualify.
Distribuzione controversie (%)
Il diritto è complesso per definizione. Ma alcune cose — i termini, le procedure, i costi — si possono capire senza una laurea. E capirle cambia tutto.
Il sistema giudiziario italiano prevede strumenti alternativi alla lite: mediazione civile obbligatoria per molte categorie, negoziazione assistita, arbitrato. In molti casi questi percorsi risolvono la questione in tempi e costi nettamente inferiori al giudizio ordinario.
Sai qual è il primo passo concreto da fare nella tua situazione specifica?
Un avvocato non è solo qualcuno che ti rappresenta in tribunale. È qualcuno che ti aiuta a non andarci — o ad andarci con le carte giuste.
Contact us for information on how to find a qualified professional.