Italy Garante

Italy's Garante per la Protezione dei Dati Personali (Data Protection Authority) is the independent regulatory body responsible for enforcing GDPR and Italian data protection laws. The Garante has issued significant guidance on AI systems, including restrictions on facial recognition and requirements for algorithmic transparency, making it a critical authority for organizations deploying AI in the EU. Companies operating in or serving Italian markets must monitor Garante decisions closely, as the authority actively investigates AI-related compliance violations and has broad enforcement powers.

1 item

EnforcementEU2026-07-29

Italy's Garante Fines Character.AI Operator €158,000 for Data Protection and Age-Control Failures, Signaling Broader EU Enforcement Risk for Consumer AI Platforms

Italy's data protection authority, the Garante, fined Character Technologies, the U.S.-based operator of the generative AI platform Character.AI, €158,000 for violations of data protection rules. The enforcement action centers on failures related to age verification, lawful basis for processing, and user data controls on a consumer-facing AI service. The decision is one of the first EU data protection enforcement actions to target a generative AI platform directly.

Character.AI Italy Garante GDPR enforcement age verification data protection consumer AI EU privacy