Text was translated by AI - Partially supervised. Can contains allucinations

LAW September 23, 2025, No. 132

Provisions and delegations to the Government regarding artificial intelligence. (25G00143)

Effective on: 1-11-2025

Chapter I

Principles and objectives

The Chamber of Deputies and the Senate of the Republic have approved;

THE PRESIDENT OF THE REPUBLIC

Promulgates

the following law:

Art. 1

Purpose and scope of application

This law sets out principles regarding research, experimentation, development, adoption and application of artificial intelligence systems and models. It promotes correct, transparent and responsible use, in an anthropocentric dimension, of artificial intelligence, aimed at seizing its opportunities.
It guarantees supervision of economic and social risks and of the impact on fundamental rights of artificial intelligence.
The provisions of this law are interpreted and applied in accordance with Regulation (EU) 2024/1689 of the European Parliament and of the Council, of 13 June 2024.

Art. 2

Definitions

For the purposes of this law, the following terms mean:
- a) artificial intelligence system: the system defined in Article 3, point 1), of Regulation (EU) 2024/1689;
- b) data: any digital representation of acts, facts or information and any collection of such acts, facts or information, also in the form of sound, visual or audiovisual recording;
- c) artificial intelligence models: the models defined in Article 3, point 63), of Regulation (EU) 2024/1689.
For what is not expressly provided, reference is made to the definitions of Regulation (EU) 2024/1689.

Art. 3

General principles

Research, experimentation, development, adoption, application and use of artificial intelligence systems and models for general purposes take place in compliance with fundamental rights and freedoms provided for by the Constitution, European Union law and the principles of transparency, proportionality, security, protection of personal data, confidentiality, accuracy, non-discrimination, gender equality and sustainability.
The development of artificial intelligence systems and models for general purposes takes place on data and through processes whose correctness, reliability, security, quality, appropriateness and transparency must be guaranteed and supervised, according to the principle of proportionality in relation to the sectors in which they are used.
Artificial intelligence systems and models for general purposes must be developed and applied in compliance with human autonomy and decision-making power, prevention of harm, knowability, transparency, explainability and the principles referred to in paragraph 1, ensuring human oversight and intervention.
The use of artificial intelligence systems must not prejudice the conduct of institutional and political life by democratic method and the exercise of the powers and functions of territorial institutions on the basis of the principles of autonomy and subsidiarity, nor must it prejudice the freedom of democratic debate from unlawful interference, caused by anyone, protecting the interests of state sovereignty as well as the fundamental rights of every citizen recognized by national and European law.
This law does not create new obligations compared to those provided for by Regulation (EU) 2024/1689 for artificial intelligence systems and artificial intelligence models for general purposes.
In order to ensure compliance with the rights and principles of this article, cybersecurity must be ensured as an essential precondition throughout the entire life cycle of artificial intelligence systems and models for general purposes, according to a risk-based and proportionate approach, as well as the adoption of specific security controls, also to ensure their resilience against attempts to alter their use, expected behavior, performance or security settings.
This law guarantees persons with disabilities full access to artificial intelligence systems and their related functionalities or extensions, on an equal basis and without any form of discrimination and prejudice, in accordance with the provisions of the United Nations Convention on the Rights of Persons with Disabilities, done in New York on 13 December 2006, ratified and implemented in Italy pursuant to Law 3 March 2009, No. 18.

Art. 4

Principles regarding information and confidentiality of personal data

The use of artificial intelligence systems in information takes place without prejudice to the freedom and pluralism of the media, freedom of expression and the objectivity, completeness, impartiality and fairness of information.
The use of artificial intelligence systems guarantees lawful, correct and transparent processing of personal data and compatibility with the purposes for which they were collected, in accordance with European Union law on personal data and protection of confidentiality.
Information and communications relating to data processing connected to the use of artificial intelligence systems are provided in clear and simple language, in order to guarantee the user knowledge of the related risks and the right to object to authorized processing of their personal data.
Access to artificial intelligence technologies by minors under fourteen years of age and the consequent processing of personal data require the consent of those exercising parental responsibility, in compliance with what is provided for by Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, and by the code on the protection of personal data, pursuant to Legislative Decree 30 June 2003, No. 196. A minor under eighteen years of age who has reached fourteen years of age may express their own consent for the processing of personal data connected to the use of artificial intelligence systems, provided that the information and communications referred to in paragraph 3 are easily accessible and understandable.

Art. 5

Principles regarding economic development

The State and other public authorities:
- a) promote the development and use of artificial intelligence as a tool to improve human-machine interaction, also through the application of robotics, in production sectors, productivity in all value chains and organizational functions, as well as a useful tool for starting new economic activities and supporting the national productive fabric, mainly consisting of micro-enterprises and small and medium-sized enterprises, in order to increase the competitiveness of the national economic system and the technological sovereignty of the Nation within the framework of the European strategy;
- b) favor the creation of an innovative, fair, open and competitive artificial intelligence market and innovative ecosystems;
- c) facilitate the availability and access to high-quality data for companies that develop or use artificial intelligence systems and for the scientific and innovation community;
- d) direct the e-procurement platforms of public administrations referred to in Article 1, paragraph 2, of Legislative Decree 30 March 2001, No. 165, so that, in the choice of suppliers of artificial intelligence systems and models, those solutions that guarantee the localization and processing of strategic data in data centers located in the national territory, whose disaster recovery and business continuity procedures are implemented in data centers located in the national territory, as well as models capable of ensuring high standards in terms of security and transparency in the methods of training and developing applications based on generative artificial intelligence, in compliance with competition law and the principles of non-discrimination and proportionality, can be favored;
- e) favor collaborative research between companies, research bodies and technology transfer centers in the field of artificial intelligence in order to encourage the economic and commercial enhancement of research results.

Art. 6

Provisions regarding national security and defense

The activities referred to in Article 3, paragraph 1, carried out for national security purposes with the purposes and methods of Law 3 August 2007, No. 124, by the bodies referred to in Articles 4, 6 and 7 of the same law, those of cybersecurity and resilience referred to in Article 1, paragraph 1, letters a) and b), of Legislative Decree 14 June 2021, No. 82, converted, with amendments, by Law 4 August 2021, No. 109, carried out by the National Cybersecurity Agency to protect national security in cyberspace, those carried out for national defense purposes by the Armed Forces as well as those carried out by the Police Forces aimed at preventing and combating, for national security purposes, the crimes referred to in Article 9, paragraph 1, letters b) and b-ter), of Law 16 March 2006, No. 146, are excluded from the scope of application of this law. The same activities are in any case carried out in compliance with fundamental rights and freedoms provided for by the Constitution and with what is provided for in Article 3, paragraph 4, of this law.
The development of artificial intelligence systems and models takes place in compliance with the conditions and purposes referred to in Article 3, paragraph 2. To the processing of personal data through the use of artificial intelligence systems carried out by the bodies referred to in Articles 4, 6 and 7 of Law No. 124 of 2007, the provisions of Article 58, paragraphs 1 and 3, of the code on the protection of personal data, pursuant to Legislative Decree 30 June 2003, No. 196, apply. To the processing of personal data through the use of artificial intelligence systems carried out by the National Cybersecurity Agency, the provisions of Article 13 of the aforementioned Legislative Decree No. 82 of 2021 apply.
By regulation adopted pursuant to Article 43 of Law No. 124 of 2007, the methods of application of the principles and provisions of this article to the activities referred to in Article 3, paragraph 1, of this law carried out by the bodies referred to in Articles 4, 6 and 7 of Law No. 124 of 2007, as well as to the same activities relating to artificial intelligence systems, functional to the activity of the bodies themselves and to the same activities carried out by other public subjects and private subjects exclusively for national security purposes, are defined.
Similarly, for the National Cybersecurity Agency, the procedure is carried out by regulation adopted according to the methods of Article 11, paragraph 4, of the aforementioned Legislative Decree No. 82 of 2021.

Chapter II

Sectoral provisions

Art. 7

Use of artificial intelligence in the health and disability sector

The use of artificial intelligence systems contributes to the improvement of the health system, to the prevention, diagnosis and treatment of diseases, in compliance with the rights, freedoms and interests of the person, also in matters of protection of personal data.
The introduction of artificial intelligence systems in the health system cannot select and condition access to healthcare services according to discriminatory criteria.
The data subject has the right to be informed about the use of artificial intelligence technologies.
This law promotes the development, study and dissemination of artificial intelligence systems that improve the living conditions of persons with disabilities, facilitate accessibility, independent mobility and autonomy, safety and the social inclusion processes of the same persons, also for the purpose of developing the life project referred to in Article 2, paragraph 1, letter n), of Legislative Decree 3 May 2024, No. 62.
Artificial intelligence systems in the health sector constitute a support in the processes of prevention, diagnosis, treatment and therapeutic choice, leaving the decision unaffected, which is always left to those practicing the medical profession.
Artificial intelligence systems used in the health sector and the related data used must be reliable, periodically verified and updated in order to minimize the risk of errors and improve patient safety.

Art. 8

Scientific research and experimentation in the creation of artificial intelligence systems in the health sector

The processing of data, including personal data, carried out by public and private non-profit subjects, by the Scientific Hospitalization and Care Institutes (IRCCS), pursuant to Legislative Decree 16 October 2003, No. 288, as well as by private subjects operating in the health sector within the scope of research projects in which public and private non-profit subjects or IRCCS participate, for scientific research and experimentation in the creation of artificial intelligence systems for the purposes of prevention, diagnosis and treatment of diseases, development of drugs, therapies and rehabilitation technologies, creation of medical devices, including prostheses and interfaces between the body and tools to support patient conditions, public health, personal safety, health and sanitary safety as well as the study of physiology, biomechanics and human biology also in non-health sectors, insofar as necessary for the purpose of creating and using databases and basic models, are declared to be of significant public interest in implementation of Articles 32 and 33 of the Constitution and in compliance with what is provided for in Article 9, paragraph 2, letter g), of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016.
For the same purposes, without prejudice to the obligation to provide information to the data subject, which can also be fulfilled through general information made available on the website of the data controller and without further consent of the data subject where initially provided for by law, the secondary use of personal data lacking direct identifying elements, also belonging to the categories indicated in Article 9 of Regulation (EU) 2016/679, by the subjects referred to in paragraph 1 is always authorized, except in cases where knowledge of the identity of the data subjects is unavoidable or necessary for the purpose of protecting their health.
Within the scope of paragraph 1 or for the purposes of Article 2-sexies, paragraph 2, letter v), of the code on the protection of personal data, pursuant to Legislative Decree 30 June 2003, No. 196, processing for the purposes of anonymization, pseudonymization or synthesis of personal data, also belonging to the particular categories referred to in Article 9, paragraph 1, of the same Regulation (EU) 2016/679, is always permitted, subject to information to the data subject pursuant to Article 13 of Regulation (EU) 2016/679. The aforementioned processing is also permitted aimed at the study and research on athletic gestures, movements and performance in sporting activities in all its forms, in compliance with the general principles of this law and the rights of economic exploitation of data relating to competitive activities that belong to those who organize them.
The National Agency for Regional Health Services (AGENAS), after the opinion of the Guarantor for the protection of personal data, taking into account international standards and the state of the art and technique, may establish and update guidelines for the procedures for anonymization of personal data, referred to in paragraph 3, and for the creation of synthetic data, also by categories of data and purposes of processing.
The processing of data referred to in paragraphs 1 and 2 must be communicated to the Guarantor for the protection of personal data with the indication of all the information provided for in Articles 24, 25, 32 and 35 of Regulation (EU) 2016/679, as well as with the express indication, where present, of the subjects identified pursuant to Article 28 of the same Regulation (EU) 2016/679, and can be started thirty days after the aforementioned communication if they have not been the subject of a blocking measure ordered by the Guarantor for the protection of personal data.
The inspection, prohibitory and sanctioning powers of the Guarantor for the protection of personal data remain unaffected.

Art. 9

Provisions regarding the processing of personal data

The processing of personal data, including special data as defined in Article 9 of Regulation (EU) 2016/679, with the maximum simplified methods allowed by the aforementioned regulation for research and experimentation purposes, also through artificial intelligence and machine learning systems, including the establishment and use of special experimentation spaces for research purposes, also through the secondary use of personal data, is governed by a decree of the Minister of Health to be issued within one hundred and twenty days from the date of entry into force of this law, after hearing the Guarantor for the protection of personal data, research bodies, healthcare facilities as well as the authorities and operators of the sector.

Art. 10

Provisions regarding the electronic health record, surveillance systems in the health sector and governance of digital health

To Legislative Decree 18 October 2012, No. 179, converted, with amendments, by Law 17 December 2012, No. 221, after Article 12, the following is inserted:
«Art. 12-bis (Artificial intelligence in the health sector). - 1. In order to guarantee advanced tools and technologies in the health sector, with one or more decrees of the Minister of Health, in agreement with the Political Authority delegated for technological innovation and digital transition and with the Authority delegated for the security of the Republic and for cybersecurity, after hearing the Permanent Conference for relations between the State, the regions and the autonomous provinces of Trento and Bolzano, artificial intelligence solutions having a support function for the purposes of Article 12, paragraph 2, are regulated. With the decrees referred to in the first period, the subjects who, in the exercise of their functions, access the artificial intelligence solutions according to the methods defined therein are identified.

2. For the support of care purposes, and in particular for territorial assistance, an artificial intelligence platform is established. The design, creation, commissioning and ownership of the platform referred to in the first period are attributed to AGENAS as the National Agency for Digital Health. The platform referred to in the first period provides support services:
- a) to healthcare professionals for taking charge of the assisted population with non-binding suggestions;
- b) to doctors in daily clinical practice with non-binding suggestions;
- c) to users for access to health services of Community Houses.
3. Following an agreement in the Permanent Conference for relations between the State, the regions and the autonomous provinces of Trento and Bolzano, AGENAS, with its own provision, specifies the support services referred to in paragraph 2.

4. The platform referred to in paragraph 2 is fed with the data strictly necessary for the provision of the services referred to in the same paragraph 2, transmitted by the relevant data controllers.

AGENAS is the controller of the data collected and generated within the platform.

5. After the opinion of the Ministry of Health, the Guarantor for the protection of personal data and the National Cybersecurity Agency, AGENAS, with its own provision, having assessed the impact of the processing, specifies the types of data processed and the operations carried out within the platform, as well as the technical and organizational measures to guarantee an adequate level of security for the risk and to protect the fundamental rights and interests of the data subject, in compliance with the provisions of Regulation (EU) 2016/679».
The implementation of this article must not result in new or greater burdens on public finance. AGENAS carries out the activities referred to in this article with the human, instrumental and financial resources available under current legislation.

Art. 11

Provisions on the use of artificial intelligence in matters of work

Artificial intelligence is used to improve working conditions, protect the psychophysical integrity of workers, increase the quality of work performance and the productivity of people in compliance with European Union law.
The use of artificial intelligence in the workplace must be safe, reliable, transparent and cannot take place in contrast with human dignity or violate the confidentiality of personal data. The employer or the client is required to inform the worker of the use of artificial intelligence in the cases and with the methods referred to in Article 1-bis of Legislative Decree 26 May 1997, No. 152.
Artificial intelligence in the organization and management of the employment relationship guarantees respect for the inviolable rights of the worker without discrimination based on sex, age, ethnic origin, religious belief, sexual orientation, political opinions and personal, social and economic conditions, in compliance with European Union law.

Art. 12

Observatory on the adoption of artificial intelligence systems in the world of work

In order to maximize the benefits and contain the risks deriving from the use of artificial intelligence systems in the workplace, the Observatory on the adoption of artificial intelligence systems in the world of work is established at the Ministry of Labor and Social Policies, with the task of defining a strategy on the use of artificial intelligence in the workplace, monitoring the impact on the labor market and identifying the work sectors most affected by the advent of artificial intelligence. The Observatory promotes the training of workers and employers in the field of artificial intelligence.
The Observatory is chaired by the Minister of Labor and Social Policies or by his representative. By decree of the Minister of Labor and Social Policies, to be adopted within ninety days from the date of entry into force of this law, the members, the methods of operation, as well as the further tasks and functions of the Observatory itself are established. The members of the Observatory are not entitled to compensation, attendance fees, expense reimbursements or other emoluments of any kind.
The establishment and functioning of the Observatory are provided for within the framework of the human, instrumental and financial resources available under current legislation.

Art. 13

Provisions regarding intellectual professions

The use of artificial intelligence systems in intellectual professions is aimed solely at the exercise of instrumental activities and support for the professional activity and with prevalence of the intellectual work object of the provision of services.
To ensure the trust relationship between professional and client, information regarding the artificial intelligence systems used by the professional is communicated to the recipient of the intellectual service with clear, simple and exhaustive language.

Art. 14

Use of artificial intelligence in public administration

Public administrations use artificial intelligence in order to increase the efficiency of their activity, reduce the time for defining procedures and increase the quality and quantity of services provided to citizens and businesses, ensuring interested parties knowledge of its functioning and traceability of its use.
The use of artificial intelligence takes place as an instrumental function and support for decision-making activity, in compliance with the autonomy and decision-making power of the person who remains the sole responsible for the measures and procedures in which artificial intelligence has been used.
Public administrations adopt technical, organizational and training measures aimed at guaranteeing responsible use of artificial intelligence and developing the cross-cutting skills of users.
Public administrations provide for the fulfillment of the obligations provided for in this article with the human, instrumental and financial resources available under current legislation.

Art. 15

Use of artificial intelligence systems in judicial activity

In cases of use of artificial intelligence systems in judicial activity, every decision on the interpretation and application of the law, on the evaluation of facts and evidence and on the adoption of measures is reserved for the judge.
The Ministry of Justice regulates the uses of artificial intelligence systems for the organization of services relating to justice, for the simplification of judicial work and for accessory administrative activities.
Until the complete implementation of Regulation (EU) 2024/1689, the experimentation and use of artificial intelligence systems in ordinary judicial offices are authorized by the Ministry of Justice, after hearing the National Authorities referred to in Article 20.
The Minister of Justice, in the preparation of the programmatic guidelines on the training of judges referred to in Article 12, paragraph 1, letter a), of Legislative Decree 30 January 2006, No. 26, promotes teaching activities on the subject of artificial intelligence and on the uses of artificial intelligence systems in judicial activity, aimed at basic and advanced digital training, the acquisition and sharing of digital skills, as well as raising awareness on benefits and risks, also within the regulatory framework referred to in paragraphs 2 and 3 of this article.
For the same purposes as the first period, the Minister also provides for the training of administrative staff.

Art. 16

Delegation to the Government regarding data, algorithms and mathematical methods for training artificial intelligence systems

The Government is delegated to adopt, within twelve months from the date of entry into force of this law, one or more legislative decrees to define an organic discipline regarding the use of data, algorithms and mathematical methods for training artificial intelligence systems without further obligations, in the areas subject to Regulation (EU) 2024/1689, compared to what is already established therein.
The drafts of the legislative decrees referred to in paragraph 1 are adopted on the proposal of the President of the Council of Ministers and the Minister of Justice and are subsequently transmitted to the Chambers for the expression of the opinion of the competent parliamentary commissions. Sixty days after the date of transmission, the decrees may be issued even in the absence of opinions. If said deadline expires in the thirty days preceding the deadline for the exercise of the delegation or subsequently, the latter is extended by sixty days.
In exercising the delegation referred to in paragraph 1, the Government adheres to the following guiding principles and criteria:
- a) identify cases for which it appears necessary to lay down the legal regime for the use of data, algorithms and mathematical methods for training artificial intelligence systems, as well as the rights and obligations incumbent on the party intending to proceed with the aforementioned use;
- b) provide for protection measures, of a compensatory or injunctive nature, and identify a sanctioning apparatus in the event of violation of the provisions introduced pursuant to letter a);
- c) attribute to the specialized sections in company matters the disputes relating to the discipline introduced pursuant to letters a) and b).

Art. 17

Amendment to the code of civil procedure

In Article 9, second paragraph, of the code of civil procedure, after the words: «forced execution» the following are inserted: «, for cases that have as their object the functioning of an artificial intelligence system».

Art. 18

Use of artificial intelligence for the strengthening of national cybersecurity

In Article 7, paragraph 1, of Legislative Decree 14 June 2021, No. 82, converted, with amendments, by Law 4 August 2021, No. 109, after letter m-ter) the following is inserted:
«m-quater) promotes and develops every initiative, also through the conclusion of collaboration agreements with private parties, by whatever name, as well as public-private partnerships, aimed at enhancing artificial intelligence as a resource for the strengthening of national cybersecurity».

Chapter III

National strategy, national authorities and promotion actions

Art. 19

National strategy for artificial intelligence and Coordination Committee for guidance activities on bodies, organizations and foundations operating in the field of digital innovation and artificial intelligence

The national strategy for artificial intelligence is prepared and updated by the structure of the Presidency of the Council of Ministers competent for technological innovation and digital transition, in agreement with the National Authorities for artificial intelligence referred to in Article 20, after hearing the Minister of Enterprises and Made in Italy for industrial policy and incentive profiles, the Minister of University and Research for profiles relating to higher education and research and the Minister of Defense for aspects relating to artificial intelligence systems usable in a dual key, and is approved at least biennially by the Interministerial Committee for Digital Transition (CITD) referred to in Article 8, paragraph 2, of Legislative Decree 1° March 2021, No. 22, converted, with amendments, by Law 22 April 2021, No. 55.
The strategy referred to in paragraph 1 favors collaboration between public administrations and private subjects regarding the development and adoption of artificial intelligence systems, coordinates the activity of public administration in this matter, promotes research and the dissemination of knowledge in the field of artificial intelligence and directs measures and incentives aimed at entrepreneurial and industrial development of artificial intelligence.
The strategy referred to in paragraph 1 takes into account the principles of international humanitarian law, for the purpose of developing and promoting artificial intelligence systems that protect human rights.
The structure of the Presidency of the Council of Ministers competent for technological innovation and digital transition provides for the coordination and monitoring of the implementation of the strategy referred to in paragraph 1, availing itself of the Agency for Digital Italy, in agreement, for aspects of competence, with the National Cybersecurity Agency and after hearing the Bank of Italy, the National Commission for Companies and the Stock Exchange (CONSOB) and the Institute for the Supervision of Insurance (IVASS) as market supervisory authorities. The results of the monitoring are transmitted annually to the Chambers.
In Article 8, paragraph 3, first period, of Legislative Decree 1° March 2021, No. 22, converted, with amendments, by Law 22 April 2021, No. 55, after the words: «of enterprises and made in Italy» the following are inserted: «, of university and research» and the following words are added at the end: «as well as by the Authority delegated for the security of the Republic and for cybersecurity, if appointed».
The Coordination Committee for guidance activities on bodies, organizations and foundations operating in the field of digital innovation and artificial intelligence is established, chaired by the President of the Council of Ministers or the delegated Political Authority and composed of the Minister of Economy and Finance, the Minister of Enterprises and Made in Italy, the Minister of University and Research, the Minister of Health, the Minister for Public Administration, the Authority delegated for the security of the Republic and for cybersecurity and the Political Authority delegated for technological innovation and digital transition or their delegates. Representatives of the National Authorities referred to in Article 20 as well as other subjects interested in the topics dealt with may be invited to the meetings of the Committee. For participation in the Committee, no compensation, attendance fees, expense reimbursements or other emoluments of any kind are due.
The Committee referred to in paragraph 6, to ensure the best implementation of the strategy referred to in paragraph 1, performs coordination functions for the guidance and promotion action of research, experimentation, development, adoption and application activities of artificial intelligence systems and models carried out by national public or private entities subject to supervision or recipients of public funding, including public or private foundations supervised or financed by the State, operating in the field of digital innovation and artificial intelligence. The entities, organizations and foundations referred to in the previous period are identified by the same Committee. The Committee also performs coordination functions for guidance activities on digital skills and artificial intelligence training policies carried out by the same entities.
The establishment and functioning of the Committee referred to in paragraph 6 must not result in new or greater burdens for public finance. The competent administrations provide for this within the framework of the human, financial and instrumental resources available under current legislation.

Art. 20

National authorities for artificial intelligence

In order to guarantee the application and implementation of national and European Union legislation on artificial intelligence, the Agency for Digital Italy (AgID) and the National Cybersecurity Agency (ACN) are designated as National Authorities for artificial intelligence, without prejudice to the attribution to the Bank of Italy, CONSOB and IVASS of the role of market supervisory authorities pursuant to and in accordance with what is provided for in Article 74, paragraph 6, of Regulation (EU) 2024/1689. Consequently, in compliance with the principles of this law and without prejudice to the functions already respectively attributed:
- a) AgID is responsible for promoting innovation and the development of artificial intelligence, without prejudice to what is provided for in letter b). AgID also provides for defining the procedures and exercising the functions and tasks regarding notification, evaluation, accreditation and monitoring of the subjects responsible for verifying the conformity of artificial intelligence systems, in accordance with national and European Union legislation;
- b) ACN, also for the purpose of ensuring the protection of cybersecurity, as defined in Article 1, paragraph 1, of Legislative Decree 14 June 2021, No. 82, converted, with amendments, by Law 4 August 2021, No. 109, is responsible for the supervision, including inspection and sanctioning activities, of artificial intelligence systems, in accordance with national and European Union legislation. ACN is also responsible for promoting and developing artificial intelligence with regard to cybersecurity profiles;
- c) AgID and ACN, each within their respective competence, ensure the establishment and joint management of experimentation spaces aimed at creating artificial intelligence systems in compliance with national and European Union legislation, after hearing the Ministry of Defense for aspects relating to artificial intelligence systems usable in a dual key and the Ministry of Justice for models and artificial intelligence systems applicable to judicial activity. What is provided for in Article 36, paragraphs from 2-bis to 2-novies, of Legislative Decree 30 April 2019, No. 34, converted, with amendments, by Law 28 June 2019, No. 58, remains unaffected, as regards the experimentation of artificial intelligence systems intended to be placed on the market, put into service or used by financial institutions.
Without prejudice to the attribution to the Bank of Italy, CONSOB and IVASS of the role of market supervisory authorities pursuant to and in accordance with what is provided for in Article 74, paragraph 6, of Regulation (EU) 2024/1689, AgID is designated as the notifying authority pursuant to Article 70 of the same regulation and ACN is designated as the market supervisory authority and single point of contact with the institutions of the European Union pursuant to the same Article 70.
The National Authorities for artificial intelligence referred to in paragraph 1 ensure coordination and collaboration with other public administrations and independent authorities, as well as every appropriate connection between them for the exercise of the functions referred to in this article. For this latter purpose, a Coordination Committee is established at the Presidency of the Council of Ministers, composed of the directors general of the two aforementioned Agencies and the head of the Department for Digital Transformation of the Presidency of the Council of Ministers itself. Top representatives of the Bank of Italy, CONSOB and IVASS participate in the aforementioned Committee when issues of their respective competence are discussed. The members of the Committee are not entitled to compensation, attendance fees, expense reimbursements or other emoluments of any kind.
The powers, tasks and functions of the Guarantor for the protection of personal data and of the Authority for Guarantees in Communications, as Coordinator of Digital Services pursuant to Article 15 of Legislative Decree 15 September 2023, No. 123, converted, with amendments, by Law 13 November 2023, No. 159, remain unaffected.
In Article 8, paragraph 2, first period, of Legislative Decree 14 June 2021, No. 82, converted, with amendments, by Law 4 August 2021, No. 109, after the words: «Presidency of the Council of Ministers» the following are added: «as well as the Agency for Digital Italy (AgID)».

Art. 21

Experimental application of artificial intelligence to services provided by the Ministry of Foreign Affairs and International Cooperation

The expenditure of 300,000 euros annually for each of the years 2025 and 2026 is authorized for the implementation of experimental projects aimed at applying artificial intelligence to services provided by the Ministry of Foreign Affairs and International Cooperation to citizens and businesses.
The expenses deriving from paragraph 1, equal to 300,000 euros annually for each of the years 2025 and 2026, are covered by a corresponding reduction in the allocation of the special current fund entered, for the purposes of the three-year budget 2025-2027, within the framework of the program «Reserve and special funds» of the mission «Funds to be distributed» of the forecast state of the Ministry of Economy and Finance for the year 2025, partially using the provision relating to the Ministry of Foreign Affairs and International Cooperation for this purpose.

Art. 22

Support measures for young people and sport

In Article 5, paragraph 1, letter d), of Legislative Decree 27 December 2023, No. 209, the following words are added at the end: «, or have carried out research, including applied research, in the field of artificial intelligence technologies».
In the personalized teaching plan (PDP) adopted by the secondary school institution within the scope of its autonomy, for students with high cognitive potential, activities aimed at acquiring further skills through learning experiences at higher education institutions can be included, derogating from what is provided for in Article 6 of the regulation pursuant to the decree of the Minister of Education, University and Research 22 October 2004, No. 270, regarding the prior possession of the title, in consistency with the outgoing profile of the course of study. The educational credits acquired within the scope of the activities referred to in the first period are assessed within the training paths of higher education undertaken after obtaining the title referred to in the same first period.
The State favors accessibility to artificial intelligence systems for the improvement of psychophysical well-being through sports activity, also for the purpose of developing innovative solutions aimed at greater inclusion in the sports field of persons with disabilities. In compliance with the general principles of this law, artificial intelligence systems can also be used for the organization of sports activities.

Art. 23

Investments in the sectors of artificial intelligence, cybersecurity and quantum computing

In line with the national strategy referred to in Article 19, in order to support the development of companies operating in the sectors of artificial intelligence and cybersecurity and of the enabling technologies for them, including quantum technologies and telecommunication systems, also through the creation of technology transfer poles and acceleration programs operating in the same sectors, availing itself of the operation of the asset management company referred to in Article 1, paragraph 116, of Law 30 December 2018, No. 145, investment, in the form of equity and quasi-equity, in venture capital directly or indirectly of:
- a) small and medium-sized enterprises (SMEs) with high development potential and innovative, having operational headquarters in Italy, operating in the sectors of artificial intelligence and cybersecurity and of the enabling technologies for them, including quantum technologies and telecommunication systems, with particular reference to 5G and its evolutions, mobile edge computing, open architectures based on software solutions, Web 3, signal processing, also in relation to the security and integrity profiles of electronic communication networks, and which are in the experimentation phase (seed financing), establishment phase (start up financing), start-up phase (early-stage financing) or product development phase (expansion, scale up financing);
- b) companies, having operational headquarters in Italy, also different from those referred to in letter a), operating in the sectors and technologies referred to in the same letter a), with high development potential and highly innovative, in order to promote their development as national technological champions.
up to the total amount of one billion euros is authorized.
The investments referred to in paragraph 1 are made through the use of the resources of the Venture Capital Support Fund referred to in Article 1, paragraph 209, of Law 30 December 2018, No. 145, in accordance with the provisions of the decree of the Minister of Economic Development 27 June 2019, published in the Official Gazette No. 176 of 29 July 2019, both through the subscription, directly or indirectly, of shares or units in one or more venture capital funds specially established and managed by the asset management company referred to in paragraph 1, and through co-investment by other venture capital funds established and managed by the same asset management company. The implementing legislation of the aforementioned decree of the Minister of Economic Development 27 June 2019 is updated to the provisions of this article, with adaptation for investments in the companies referred to in paragraph 1, letter b), not falling within the definition of SME.
In addition to the Ministry of Enterprises and Made in Italy as an investor, the structure of the Presidency of the Council of Ministers competent for technological innovation and digital transition and the National Cybersecurity Agency participate with their representatives in the governing bodies of the venture capital funds referred to in this article, by reason of their respective competences, in any case without compensation or allowances.

Art. 24

Delegations to the Government regarding artificial intelligence

The Government is delegated to adopt, within twelve months from the date of entry into force of this law, with the procedures referred to in Article 31 of Law 24 December 2012, No. 234, having acquired the opinions of the competent parliamentary commissions, of the Unified Conference referred to in Article 8 of Legislative Decree 28 August 1997, No. 281, and of the Guarantor for the protection of personal data, one or more legislative decrees for adapting national legislation to Regulation (EU) 2024/1689.
In exercising the delegation referred to in paragraph 1, the Government adheres, in addition to the general guiding principles and criteria referred to in Article 32 of Law 24 December 2012, No. 234, to the following specific guiding principles and criteria:
- a) attribute to the authorities referred to in Article 20, within the limits of the designation made pursuant to the same Article 20, all the supervision, inspection and sanctioning powers provided for by Regulation (EU) 2024/1689 for verifying compliance with the rules of the regulation itself and by the European Union legislation implementing the same regulation;
- b) make to the legislation in force, including that on banking, financial, insurance and payment services, the amendments, integrations and repeals necessary for the correct and complete adaptation to Regulation (EU) 2024/1689;
- c) resort to secondary legislation adopted by the authorities identified pursuant to Article 20, where appropriate and in compliance with the competences pertaining to them, within the scope and for the specific purposes provided for by Regulation (EU) 2024/1689 and by the European Union legislation implementing the same regulation;
- d) attribute to the authorities referred to in Article 20 the power to impose the sanctions and other administrative measures provided for in Article 99 of Regulation (EU) 2024/1689 for the violation of the rules of the regulation itself and of the implementing acts, in compliance with the edictal limits and procedures provided for by the same Article 99 and by the national provisions governing the imposition of sanctions and the application of other administrative measures by the aforementioned authorities;
- e) provision of literacy and training paths regarding the use of artificial intelligence systems;
- f) provision, by professional orders and the most representative trade associations, as well as by the aggregative forms of associations referred to in Article 3 of Law 14 January 2013, No. 4, of literacy and training paths, for professionals and operators of the specific sector, on the use of artificial intelligence systems; provision of the possibility of recognizing fair compensation modulable on the basis of the responsibilities and risks connected to the use of artificial intelligence systems;
- g) enhancement, within school curricula, of the development of scientific, technological, engineering and mathematical skills linked to STEM disciplines, as well as artistic ones, in order to promote the choice by students, also through targeted personalized orientation activities, of higher education training paths relating to the aforementioned disciplines;
- h) provision of a specific discipline for the use of artificial intelligence systems for police activity;
- i) provision, in university courses and institutions of higher artistic, musical and choreographic education (AFAM), as well as in higher technological education paths offered by higher technological institutes (ITS Academy), consistently with their respective cultural and professional profiles, of training activities for the technical understanding and conscious use also from a legal point of view of technologies, also with reference to artificial intelligence systems as defined by European legislation, as well as for the correct interpretation of the production of such systems in terms of predictions, contents, recommendations or decisions;
- l) enhancement of research and technology transfer activities in the field of artificial intelligence carried out by universities, AFAM institutions, ITS Academies and public research bodies, through provisions aimed at pursuing the following objectives:
  1. 1) facilitate the involvement of the university and research system in the promotion, implementation and use of regulatory experimentation spaces in collaboration with the productive world;
  2. 2) encourage support activities and simplify collaboration tools between the university and research system and ITS Academies and the National Authorities referred to in Article 20;
- m) definition of the supervision powers of the market supervisory authority which give the authority the powers to require providers and potential providers to transmit information, to carry out remote or on-site inspections, also without notice, and to carry out checks on the conduct of tests in real conditions and on the related high-risk artificial intelligence systems;
- n) adaptation of the sanctioning framework, also derogating from the criteria and limits provided for in Article 32, paragraph 1, letter d), of Law 24 December 2012, No. 234, and to Law 24 November 1981, No. 689, including the definition of the enforcement measures applicable pursuant to Regulation (EU) 2024/1689, as well as the applicable procedure for the imposition of sanctions or the application of enforcement measures, also in consistency with what is provided for in Article 17, paragraph 4-quater, of Legislative Decree 14 June 2021, No. 82, converted, with amendments, by Law 4 August 2021, No. 109.
The Government is also delegated to adopt, within twelve months from the date of entry into force of this law, one or more legislative decrees to adapt and specify the discipline of cases of unlawful creation and use of artificial intelligence systems.
The drafts of the legislative decrees referred to in paragraph 3 are adopted on the proposal of the President of the Council of Ministers and the Minister of Justice, in agreement with the Minister of the Interior, and are subsequently transmitted to the Chambers for the expression of the opinion of the competent parliamentary commissions. Sixty days after the date of transmission, the decrees may be issued even in the absence of opinions. If said deadline expires in the thirty days preceding the deadline for the exercise of the delegation or subsequently, the latter is extended by sixty days.
In exercising the delegation referred to in paragraph 3, the Government adheres to the following guiding principles and criteria:
- a) provision of measures, also precautionary, aimed at inhibiting the spread and removing content generated unlawfully also with artificial intelligence systems, assisted by a system of effective, proportionate and dissuasive sanctions;
- b) introduction of autonomous criminal offenses, punishable intentionally or negligently, focused on the failure to adopt or failure to adapt security measures for the production, circulation and professional use of artificial intelligence systems, when from such omissions derives concrete danger for life or public or individual safety or for the security of the State;
- c) specification of the criteria for attribution of criminal liability of natural persons and administrative liability of entities for offenses relating to artificial intelligence systems, taking into account the actual level of control of the aforementioned systems by the agent;
- d) in cases of civil liability, provision of protection measures for the injured party, also through specific regulation of the criteria for distribution of the burden of proof, taking into account the classification of artificial intelligence systems and the related obligations as identified by Regulation (EU) 2024/1689;
- e) regulation of the use of artificial intelligence systems in preliminary investigations, in compliance with the guarantees relating to the right of defense and the personal data of third parties, as well as the principles of proportionality, non-discrimination and transparency;
- f) amendment, for the purpose of coordination and rationalization of the system, of the substantive and procedural legislation in force, in compliance with the principles and criteria set out in letters a), b), c), d) and e).
The implementation of this article must not result in new or greater burdens on public finance. The competent administrations provide for the related fulfillments with the human, instrumental and financial resources available under current legislation.

Chapter IV

Provisions for the protection of users and regarding copyright

Art. 25

Protection of the copyright of works generated with the aid of artificial intelligence

The following amendments are made to Law 22 April 1941, No. 633:
- a) in Article 1, first paragraph, after the words: «works of the mind» the following is inserted: «human» and after the words: «form of expression» the following are added: «, also where created with the aid of artificial intelligence tools, provided they constitute the result of the intellectual work of the author»;
- b) after Article 70-sexies the following is inserted:
  «Art. 70-septies. - 1. Without prejudice to what is provided for by the Berne Convention for the Protection of Literary and Artistic Works, ratified and implemented pursuant to Law 20 June 1978, No. 399, reproductions and extractions from works or other materials contained online or in databases to which there is legitimate access, for the purpose of extracting text and data through models and artificial intelligence systems, including generative ones, are permitted in compliance with the provisions of Articles 70-ter and 70-quater».

Chapter V

Criminal provisions

Art. 26

Amendments to the criminal code and further criminal provisions

The following amendments are made to the criminal code:
- a) in Article 61, after number 11-novies) the following is added:
  «11-decies) having committed the offense through the use of artificial intelligence systems, when the latter, due to their nature or the methods of use, constituted an insidious means, or when their use in any case hindered public or private defense, or aggravated the consequences of the crime»;
- b) in Article 294 the following paragraph is added at the end:
  «The penalty is imprisonment from two to six years if the deception is carried out through the use of artificial intelligence systems»;
- c) after Article 612-ter the following is inserted:
  «Art. 612-quater (Unlawful dissemination of content generated or altered with artificial intelligence systems). - Whoever causes unjust damage to a person, by transferring, publishing or otherwise disseminating, without their consent, images, videos or voices falsified or altered through the use of artificial intelligence systems and capable of inducing deception as to their genuineness, is punished with imprisonment from one to five years. The offense is punishable at the complaint of the injured person. However, proceedings are ex officio if the fact is connected with another offense for which proceedings must be ex officio or if it is committed against a person incapable, due to age or infirmity, or a public authority by reason of the functions exercised».
In Article 2637 of the civil code, the following period is added at the end: «The penalty is imprisonment from two to seven years if the fact is committed through the use of artificial intelligence systems».
In Article 171, first paragraph, of Law 22 April 1941, No. 633, after letter a-bis) the following is inserted: «a-ter) reproduces or extracts text or data from works or other materials available online or in databases in violation of Articles 70-ter and 70-quater, also through artificial intelligence systems».
In Article 185, paragraph 1, of the consolidated text of provisions on financial intermediation, pursuant to Legislative Decree 24 February 1998, No. 58, the following period is added at the end: «The penalty is imprisonment from two to seven years and a fine from twenty-five thousand euros to six million euros if the fact is committed through the use of artificial intelligence systems».

Chapter VI

Financial and final provisions

Art. 27

Financial invariance clause

The implementation of this law, with the exception of Article 21, must not result in new or greater burdens on public finance. The interested public administrations provide for the fulfillment of the provisions of this law with the human, instrumental and financial resources available under current legislation.

Art. 28

Final provisions

In Article 7, paragraph 1, of Legislative Decree 14 June 2021, No. 82, converted, with amendments, by Law 4 August 2021, No. 109, letter z) is replaced by the following:
«z) for the purposes of this article, may conclude collaboration agreements, by whatever name, with private subjects, establish and participate in public-private partnerships in the national territory, as well as, subject to authorization of the President of the Council of Ministers, in consortia, foundations or companies with public and private subjects, Italian or from countries belonging to the European Union. On the basis of the national interest and subject to authorization of the President of the Council of Ministers, it may also participate in consortia, foundations or companies with public and private subjects from NATO countries or from non-European countries with which cooperation or partnership agreements have been signed for the development of artificial intelligence systems».
The following amendments are made to Law 28 June 2024, No. 90:
- a) in Article 1, paragraph 1, the words: «referred to in Article 1, paragraph 3-bis, of Legislative Decree 21 September 2019, No. 105, converted, with amendments, by Law 18 November 2019, No. 133, as amended by Article 3 of this law» are replaced by the following: «adopted with technical determination of the director general of the National Cybersecurity Agency»;
- b) in Chapter I, after Article 15 the following is added:
  «Art. 15-bis (Coordination provisions). - 1. Any reference to Legislative Decree 18 May 2018, No. 65, is to be understood as referring to the corresponding provisions of Legislative Decree 4 September 2024, No. 138, from the date on which the latter become effective».

This law, bearing the State seal, shall be included in the Official Collection of the normative acts of the Italian Republic. It is obligatory for anyone to observe it and ensure it is observed as state law.

Dated at Rome, 23 September 2025

MATTARELLA

Meloni, President of the Council of Ministers

Nordio, Minister of Justice

Seen, the Keeper of the Seal: Nordio

```

IusOnDemand srl Milano, viale dei Mille 4, tel:+39 0245489591 - spataro@iusondemand.com - privacy e cookie e privacy policies - Legals - P.IVA IT04446030969 Milan - Italy - Europe - Gloxa è ® 362020000086461