{"id":342,"date":"2021-10-18T09:41:15","date_gmt":"2021-10-18T07:41:15","guid":{"rendered":"https:\/\/stage.usercentrics.com\/?post_type=knowledge&#038;p=15975"},"modified":"2025-06-26T14:41:12","modified_gmt":"2025-06-26T12:41:12","slug":"italian-dpa-announces-new-guidelines-and-deadlines","status":"publish","type":"knowledge","link":"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/","title":{"rendered":"Italian DPA announces new guidelines and tighter deadlines"},"content":{"rendered":"\n\n<p>The clock is ticking for businesses in Italy when it comes to <a href=\"https:\/\/usercentrics.com\/gdpr\/\">GDPR compliance<\/a>. On July 10, 2021, the Italian Data Protection Authority (\u2018Il Garante\u2019) announced its final guidelines on cookies and other tracking technologies. Organizations must achieve compliance within the stipulated six-month timeframe, where now two months have gone by. These guidelines refer to the implementation of the consent requirements of the ePrivacy Directive in Italian law (art. 122 of the Personal Data Protection Code). They are a welcome update to the 2014 Garante\u2019s guidelines.<\/p>\n<blockquote><p>Any company with headquarters in Italy, or which targets Italian data subjects, must ensure their cookie banner complies with the Italian DPA\u2019s cookie guidelines before the deadline.<\/p><\/blockquote>\n<p>This updated guidance follows updates to guidelines from other major DPAs across the EU. For example: <a href=\"https:\/\/usercentrics.com\/knowledge-hub\/cnil-opens-the-door-to-increased-compliance\/\">France\u2019s CNIL<\/a>, Ireland\u2019s DPC, <a href=\"https:\/\/www.aepd.es\/en\/areas\/data-protection-and-covid-19\" target=\"_blank\" rel=\"noopener\">Spain\u2019s AEPD<\/a> and <a href=\"https:\/\/www.datatilsynet.dk\/english\" target=\"_blank\" rel=\"noopener\">Denmark\u2019s Datatilsynet<\/a>. Although there are some common features amongst these guidelines, the most important issue to note is that <strong>these changes do not only affect the country where they have been set, but also organizations that process personal data of subjects in these countries<\/strong>. These guidelines set the tone for how compliant consent must be obtained.<\/p>\n<p>Usercentrics supports the Italian DPA\u2019s new guidelines and has updated our <a href=\"https:\/\/usercentrics.com\/\">Consent Management Platform<\/a> (CMP) accordingly. When the CMP is closed by clicking on the \u201cX\u201d on the first layer, only necessary cookies are loaded for the user. The corresponding configuration option will be available with the next Admin Interface released.<\/p>\n<p>In order to help you understand what has changed with the finalized guidelines, we have compiled the following list of key takeaways. Now you can begin to make sure that your website is compliant with the latest rules regarding cookies and the setting of tracking technologies in Italy as well as abroad.<\/p>\n\n\n<div id=\"uc-cta_69d037b6b504c\" class=\"uc-cta uc-cta--illustration uc-cta--primary uc-ctx--blue\">\n    <div class=\"uc-cta__inner container\">\n        <div class=\"uc-cta__content\">\n                            <div class=\"uc-cta__label like-label-m\">Events &#8211; TTT<\/div>\n                                        <div class=\"uc-cta__heading no-default-margin\">Not all privacy laws are the same. <\/div>\n                                        <div class=\"uc-cta__description\">\n                    <p>In fact, keeping up with global legislation can be complicated, trust us.That is why we started Tech That Talks. So check us out and join our bi-weekly panel discussion.   <\/p>\n                <\/div>\n                                                    <div class=\"uc-cta__buttons\">\n                    <a id=\"1458229a-f878-46f7-8e67-54791239d76b\" class=\"uc-button uc-button-size-m uc-button-contained  no-default-link-decoration\" href=\"https:\/\/usercentrics.com\/consented\/\" target=\"_blank\"><span>Sign up now!<\/span><\/a>                <\/div>\n                                            <\/div>\n                            <div class=\"uc-cta__section\">\n                                                                    <div class=\"uc-cta__section__img-wrapper\">\n                                <img loading=\"lazy\" decoding=\"async\" width=\"1\" height=\"1\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/08\/Icon-Headphone.png\" class=\"attachment-large size-large\" alt=\"Icon Headphone\" \/>                            <\/div>\n                                                            <\/div>\n            <\/div>\n<\/div>\n    <script type=\"module\">\n        new Uc_Cta(document.getElementById(\"uc-cta_69d037b6b504c\"));\n    <\/script>\n\n\n<h2 class=\"wp-block-heading\">Key Takeaways<\/h2>\n<p>These are the 7 points to watch out for.<\/p>\n<h3>1. Scrolling<\/h3>\n<p>The act of scrolling as consent has gotten a fresh review. The DPA follows the previously established position of the EDPB, stating that scrolling <strong>does not<\/strong> constitute valid consent.<\/p>\n<h3>2. Strictly necessary cookies<\/h3>\n<p><strong>A clear distinction between first- and third-party cookies has now been made.<\/strong> Like the ePrivacy Directive and as a result of Italian legislation, Garante\u2019s guidelines make a distinction between strictly necessary technical trackers and so-called \u201cprofiling\u201d trackers, used for purposes that are not absolutely required for the operation of a digital property. This means that legitimate interest cannot be considered a lawful ground to set cookies and other similar tracking technologies.<\/p>\n<h3>3. Consent is very necessary<\/h3>\n<p>As stated by the INPLP, \u201cif users do not give their prior consent, unlike in the current regulation, the owner of a website may only use technical cookies\u201d. This isn&#8217;t the case entirely for analytical cookies, where consent must only be requested if combined with other processing, or the data is transmitted to other third parties.<\/p>\n<h3>4. Choice is key<\/h3>\n<p><strong>The Italian DPA<\/strong> stresses the \u201cDuty to include\u201d certain information and icons in the footer of websites, where website providers must provide a link for users to re-assess their cookie preferences or to showcase the status of the user\u2019s consent choice. This allows for the option to change any user choice.<\/p>\n<h3>5. Information and transparency<\/h3>\n<p><strong>Clear and simple communication<\/strong> is key.<br \/>\nA privacy policy must state which cookies are being used and for which purposes, in a manner that is coherent and easy to understand.<\/p>\n<h3>6. Cookie banner<\/h3>\n<p>Use of a cookie banner is <strong>encouraged.<\/strong><\/p>\n<p>According to the INPLP the banner must also contain the following elements\/information:<\/p>\n<ul>\n<li>a button (usually an \u201cX\u201d in the top right corner) that enables the user to close the banner while maintaining the default settings, thus denying the installation of cookies other than technical ones<\/li>\n<li>a warning that closing the banner (e.g. by clicking on the X in the top right corner) will result in the default settings remaining in place and, therefore, the continuation of browsing in the absence of cookies other than technical ones<\/li>\n<li>minimum information advising the user that the site may implement profiling cookies or other tracking technologies after obtaining their consent<\/li>\n<li>a link to the extended privacy policy that is always accessible from the footer of any page on the site<\/li>\n<li>a button enabling the user to accept the implementation of all cookies (or other tracking technologies)<\/li>\n<li>a link to a specific area where it is possible to analytically select only the functionalities, third parties and cookies for which the user chooses to consent, and where it is also possible to modify previously made choices<\/li>\n<\/ul>\n<h3>7. Right to withdraw consent:<\/h3>\n<p>Users must be able to revoke their consent at <strong>any<\/strong> time.<\/p>\n<p>If you would like to learn more about the GDPR or other global privacy laws, don\u2019t forget to check out our extensive <a href=\"https:\/\/usercentrics.com\/resources\/\">knowledge hub<\/a> where our expert team of researchers compiles the latest in data privacy.<\/p>\n\n\n<h2 class=\"wp-block-heading\">How can your business comply?<\/h2>\n<p>We want to make sure you understand which types of data your company is collecting and why. <a href=\"https:\/\/usercentrics.com\/data-privacy-audit\/\">Our free web page audit<\/a> can show you which technologies your site sets and enable you to understand whether you use Analytical, Tracking, or Marketing cookies. Once you know, a <a href=\"https:\/\/usercentrics.com\/website-consent-management\/\">Consent Management Platform (CMP)<\/a> can help you collect, manage and store consent in order to be able to use the cookies and tracking technologies in a compliant manner.<\/p>\n<p>After the compliance period ends, the Italian DPA can enforce the new cookie guidance with warnings or fines of up to \u20ac20 million or 4 percent of annual global revenue.<\/p>\n\n\n<div id=\"uc-cta_69d037b6b5f23\" class=\"uc-cta uc-cta--illustration uc-cta--primary uc-ctx--blue\">\n    <div class=\"uc-cta__inner container\">\n        <div class=\"uc-cta__content\">\n                            <div class=\"uc-cta__label like-label-m\">DEMO<\/div>\n                                        <div class=\"uc-cta__heading no-default-margin\">Compliance made simple for you and your website<\/div>\n                                        <div class=\"uc-cta__description\">\n                    <p>Chat with one of our experts today and check out the Usercentrics Consent Management Platform, providing  you with an easy solution to help you being fully compliant.<\/p>\n                <\/div>\n                                                    <div class=\"uc-cta__buttons\">\n                    <a id=\"e25cd68f-e567-4ba6-a299-d7d1dff0a8d9\" class=\"uc-button uc-button-size-m uc-button-contained  no-default-link-decoration\" href=\"https:\/\/usercentrics.com\/iframe-page-form-homepage-demodesk\/?iframe=true\" target=\"\"><span>Get started!<\/span><\/a>                <\/div>\n                                            <\/div>\n                            <div class=\"uc-cta__section\">\n                                                                    <div class=\"uc-cta__section__img-wrapper\">\n                                <img loading=\"lazy\" decoding=\"async\" width=\"1\" height=\"1\" src=\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/08\/icon-Talk.png\" class=\"attachment-large size-large\" alt=\"icon Talk\" \/>                            <\/div>\n                                                            <\/div>\n            <\/div>\n<\/div>\n    <script type=\"module\">\n        new Uc_Cta(document.getElementById(\"uc-cta_69d037b6b5f23\"));\n    <\/script>\n\n\n<p>DISCLAIMER:<\/p>\n<p><em>A data protection-compliant implementation of a Consent Management Platform is ultimately at the discretion of the respective data protection officer or legal department.<\/em><\/p>\n<p><em>These explanations therefore do not constitute legal advice. They merely serve to support you with information about the current legal situation when implementing a Consent Management Platform solution. If you have any legal questions, you should consult a qualified attorney.<\/em><\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>How can you make sure to navigate data privacy correctly? This article provides you with the relevant information regarding GDPR in Italy.<\/p>\n","protected":false},"featured_media":2096,"template":"","meta":{"_acf_changed":false,"editor_notices":[],"footnotes":""},"tags":[],"magazine_issue":[],"magazine_tag":[],"resource_tag":[63,12,13],"class_list":["post-342","knowledge","type-knowledge","status-publish","has-post-thumbnail","hentry","resource_tag-legal-news","resource_tag-industry-news","resource_tag-regulations"],"acf":[],"yoast_head":"<title>Italian DPA announces new guidelines and tighter deadlines<\/title>\n<meta name=\"description\" content=\"The clock is ticking for businesses in Italy when it comes to GDPR compliance. Organizations must achieve compliance or face warnings and fines.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Italian DPA announces new guidelines and tighter deadlines\" \/>\n<meta property=\"og:description\" content=\"The clock is ticking for businesses in Italy when it comes to GDPR compliance. Organizations must achieve compliance or face warnings and fines.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/\" \/>\n<meta property=\"og:site_name\" content=\"Usercentrics - US\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/usercentrics\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-26T12:41:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/usercentrics.com\/wp-content\/uploads\/2021\/09\/Post-its.jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Italian DPA announces new guidelines and tighter deadlines\" \/>\n<meta name=\"twitter:description\" content=\"The clock is ticking for businesses in Italy when it comes to GDPR compliance. Organizations must achieve compliance or face warnings and fines.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/usercentrics.com\/wp-content\/uploads\/2021\/09\/Post-its.jpeg\" \/>\n<meta name=\"twitter:site\" content=\"@usercentrics\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/\",\"url\":\"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/\",\"name\":\"Italian DPA announces new guidelines and tighter deadlines\",\"isPartOf\":{\"@id\":\"https:\/\/usercentrics.com\/us\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/10\/Italian-DPA.svg?v=42566d45cf9c3351\",\"datePublished\":\"2021-10-18T07:41:15+00:00\",\"dateModified\":\"2025-06-26T12:41:12+00:00\",\"description\":\"The clock is ticking for businesses in Italy when it comes to GDPR compliance. Organizations must achieve compliance or face warnings and fines.\",\"breadcrumb\":{\"@id\":\"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":\"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/\"}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/#primaryimage\",\"url\":\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/10\/Italian-DPA.svg?v=42566d45cf9c3351\",\"contentUrl\":\"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/10\/Italian-DPA.svg?v=42566d45cf9c3351\",\"caption\":\"Italian DPA announces new guidelines and tighter deadlines\",\"copyrightNotice\":\"\u00a9 Copyright 2026 Usercentrics GmbH\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Usercentrics GmbH\"},\"creditText\":\"Image: Usercentrics GmbH\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Resources\",\"item\":\"https:\/\/usercentrics.com\/us\/resources\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\/\/usercentrics.com\/us\/knowledge-hub\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Italian DPA announces new guidelines and tighter deadlines\",\"item\":\"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/usercentrics.com\/us\/#website\",\"url\":\"https:\/\/usercentrics.com\/us\/\",\"name\":\"Usercentrics - US\",\"description\":\"Consent Management Platform (CMP) Usercentrics\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/usercentrics.com\/us\/?s={search_term_string}\"}}],\"inLanguage\":\"en-US\"}]}<\/script>","yoast_head_json":{"title":"Italian DPA announces new guidelines and tighter deadlines","description":"The clock is ticking for businesses in Italy when it comes to GDPR compliance. Organizations must achieve compliance or face warnings and fines.","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"Italian DPA announces new guidelines and tighter deadlines","og_description":"The clock is ticking for businesses in Italy when it comes to GDPR compliance. Organizations must achieve compliance or face warnings and fines.","og_url":"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/","og_site_name":"Usercentrics - US","article_publisher":"https:\/\/www.facebook.com\/usercentrics","article_modified_time":"2025-06-26T12:41:12+00:00","og_image":[{"url":"https:\/\/usercentrics.com\/wp-content\/uploads\/2021\/09\/Post-its.jpeg","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_title":"Italian DPA announces new guidelines and tighter deadlines","twitter_description":"The clock is ticking for businesses in Italy when it comes to GDPR compliance. Organizations must achieve compliance or face warnings and fines.","twitter_image":"https:\/\/usercentrics.com\/wp-content\/uploads\/2021\/09\/Post-its.jpeg","twitter_site":"@usercentrics","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/","url":"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/","name":"Italian DPA announces new guidelines and tighter deadlines","isPartOf":{"@id":"https:\/\/usercentrics.com\/us\/#website"},"primaryImageOfPage":{"@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/#primaryimage"},"image":{"@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/#primaryimage"},"thumbnailUrl":"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/10\/Italian-DPA.svg?v=42566d45cf9c3351","datePublished":"2021-10-18T07:41:15+00:00","dateModified":"2025-06-26T12:41:12+00:00","description":"The clock is ticking for businesses in Italy when it comes to GDPR compliance. Organizations must achieve compliance or face warnings and fines.","breadcrumb":{"@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/"}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/#primaryimage","url":"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/10\/Italian-DPA.svg?v=42566d45cf9c3351","contentUrl":"https:\/\/usercentrics.com\/us\/wp-content\/uploads\/sites\/7\/2021\/10\/Italian-DPA.svg?v=42566d45cf9c3351","caption":"Italian DPA announces new guidelines and tighter deadlines","copyrightNotice":"\u00a9 Copyright 2026 Usercentrics GmbH","creator":{"@type":"Organization","name":"Usercentrics GmbH"},"creditText":"Image: Usercentrics GmbH"},{"@type":"BreadcrumbList","@id":"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Resources","item":"https:\/\/usercentrics.com\/us\/resources\/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https:\/\/usercentrics.com\/us\/knowledge-hub\/"},{"@type":"ListItem","position":3,"name":"Italian DPA announces new guidelines and tighter deadlines","item":"https:\/\/usercentrics.com\/us\/knowledge-hub\/italian-dpa-announces-new-guidelines-and-deadlines\/"}]},{"@type":"WebSite","@id":"https:\/\/usercentrics.com\/us\/#website","url":"https:\/\/usercentrics.com\/us\/","name":"Usercentrics - US","description":"Consent Management Platform (CMP) Usercentrics","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/usercentrics.com\/us\/?s={search_term_string}"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/knowledge\/342","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/knowledge"}],"about":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/types\/knowledge"}],"version-history":[{"count":0,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/knowledge\/342\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/media\/2096"}],"wp:attachment":[{"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/media?parent=342"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/tags?post=342"},{"taxonomy":"magazine_issue","embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/magazine_issue?post=342"},{"taxonomy":"magazine_tag","embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/magazine_tag?post=342"},{"taxonomy":"resource_tag","embeddable":true,"href":"https:\/\/usercentrics.com\/us\/wp-json\/wp\/v2\/resource_tag?post=342"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}