AI Regulatory Registry

Reg. (UE) 2024/1689

Artificial Intelligence Act

Reg. (UE) 2016/679

General Data Protection Regulation (GDPR)

Dir. (UE) 2016/680

Law Enforcement Directive (LED)

Dir. 2002/58/CE (mod. 2009/136/CE)

ePrivacy Directive

Dir. (UE) 2022/2555

Network and Information Security Directive (NIS2)

Dir. (UE) 2022/2557

Critical Entities Resilience Directive (CER)

Reg. (UE) 2024/2847

Cyber Resilience Act (CRA)

Reg. (UE) 2019/881

Cybersecurity Act

Reg. (UE) 2022/2554

Digital Operational Resilience Act (DORA)

Dir. (UE) 2024/2853

Product Liability Directive (PLD recast)

Reg. (UE) 2023/2854

Data Act

Reg. (UE) 2022/868

Data Governance Act (DGA)

Dir. (UE) 2019/1024

Open Data Directive

Reg. (UE) 2022/2065

Digital Services Act (DSA)

Reg. (UE) 2022/1925

Digital Markets Act (DMA)

Dir. (UE) 2019/790

Copyright in the Digital Single Market Directive

Reg. (UE) 2025/327

European Health Data Space (EHDS)

Dir. (UE) 2019/882

European Accessibility Act

Dir. 2005/29/CE

Unfair Commercial Practices Directive (UCPD)

Reg. (UE) 2023/988

General Product Safety Regulation (GPSR)

Reg. (UE) 2017/745

Medical Devices Regulation (MDR)

Reg. (UE) 2017/746

In Vitro Diagnostic Medical Devices Regulation (IVDR)

Reg. (UE) 2023/1230

Machinery Regulation

Reg. (UE) 2024/1183

eIDAS 2.0 Regulation

Reg. (UE) 2021/821

EU Dual-Use Export Control Regulation

Dir. 2000/43/CE

Racial Equality Directive

Dir. 2000/78/CE

Employment Equality Directive

Dir. (UE) 2019/1937

Whistleblower Protection Directive

Dir. (UE) 2022/2464

Corporate Sustainability Reporting Directive (CSRD)

Reg. impl. (UE) 2024/482

EUCC — EU Common Criteria Cybersecurity Certification Scheme

Reg. impl. (UE) 2024/2690

NIS2 Implementing Regulation — Technical Requirements

Reg. (UE) 2018/1725

Regulation on the protection of personal data by EU institutions

Dec. impl. (UE) 2021/914

Standard Contractual Clauses (SCC) for international data transfers

Dec. impl. (UE) 2023/1795

EU-US Data Privacy Framework Adequacy Decision

Reg. delegato (UE) 2023/2772

European Sustainability Reporting Standards (ESRS)

L. 23/9/2025, n. 132

Italian AI Law

D.Lgs. 4/9/2024, n. 138

NIS2 Transposition Decree

L. 28/6/2024, n. 90

National Cybersecurity Strengthening Law

D.L. 21/9/2019, n. 105 conv. L. 133/2019

National Cybersecurity Perimeter Decree

L. 4/8/2021, n. 109 (conv. D.L. 82/2021)

National Cybersecurity Agency Establishment Law

DPCM 14/4/2021, n. 81

DPCM 81/2021 — PSNC Incident Notification and Security Measures

DPCM 4/6/2025, n. 111

DPCM 111/2025

D.Lgs. 30/6/2003, n. 196 coord. D.Lgs. 101/2018

Italian Personal Data Protection Code (Privacy Code)

D.Lgs. 10/8/2018, n. 101

GDPR National Adaptation Decree

L. 20/5/1970, n. 300 (Art. 4)

Workers' Statute — Art. 4 (Remote monitoring)

D.Lgs. 27/6/2022, n. 104

Transparent Working Conditions Decree

D.Lgs. 10/3/2023, n. 24

Italian Whistleblowing Decree

D.Lgs. 8/6/2001, n. 231

Administrative Liability of Legal Entities Decree (D.Lgs. 231/2001)

D.Lgs. 8/11/2021, n. 177

Italian Copyright DSM Transposition Decree

D.Lgs. 31/3/2023, n. 36

Public Contracts Code

L. 22/4/1941, n. 633

Italian Copyright Law (LDA)

D.Lgs. 6/9/2005, n. 206

Italian Consumer Code

D.Lgs. 7/3/2005, n. 82

Digital Administration Code (CAD)

D.Lgs. 9/7/2003, n. 215

Italian Racial Equality Decree

D.Lgs. 9/7/2003, n. 216

Italian Employment Equality Decree

D.Lgs. 11/4/2006, n. 198

Equal Opportunities Code

DPCM 30/7/2020, n. 131

PSNC Regulation (DPCM 131/2020)

DPR 5/2/2021, n. 54

PSNC ICT Verification Procedure (DPR 54/2021)

DPCM 15/6/2021

PSNC ICT Categories (DPCM 15/6/2021)

DM 15/12/2025, n. 173

Establishment of the AI in the Workplace Observatory (DM MLPS 173/2025)

DM 17/12/2025, n. 180

Guidelines on AI in the Workplace (DM MLPS 180/2025)

MLPS, 2026

First document towards the AI in the Workplace Observatory

COM(2025) 836 final — proc. 2025/0359(COD)

Digital Omnibus on AI

COM(2025) 837 final — proc. 2025/0360(COD)

Digital Legislation Omnibus

COM(2022) 496 — proc. 2022/0303(COD)

AI Liability Directive (AILD) — WITHDRAWN

COM(2017) 10 — proc. 2017/0003(COD)

ePrivacy Regulation — WITHDRAWN

N/A — in sviluppo

CEN-CENELEC JTC 21 Harmonised Standards for the AI Act

N/A

EDPB Work Programme 2026–2027

Opinion 28/2024

Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models

Guidelines 07/2020 v2.0

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Guidelines 4/2019 v2.0

Guidelines 4/2019 on Article 25 Data Protection by Design and by Default

WP248rev.01

Guidelines on Data Protection Impact Assessment (DPIA — Art. 35 GDPR)

WP251rev.01

Guidelines on Automated individual decision-making and Profiling (Art. 22 GDPR)

Guidelines 9/2022 v2.0

Guidelines 9/2022 on personal data breach notification under GDPR

Recommendations 01/2020 v2.0

Recommendations 01/2020 on measures that supplement transfer tools

Guidelines 05/2021 v2.0

Guidelines 05/2021 on the Interplay between Art. 3 and Chapter V of the GDPR

Guidelines 05/2022

Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement

EDPB Support Pool of Experts Report

EDPB Support Pool of Experts — AI Privacy Risks & Mitigations for LLMs

EDPS Guidance on Generative AI v2

EDPS Guidance on Generative AI — Strengthening data protection in a rapidly changing digital era (v2)

C(2025) 5053

Commission Guidelines on the definition of an artificial intelligence system

C(2025) 5052

Commission Guidelines on prohibited artificial intelligence (AI) practices

Guidelines GPAI

Commission Guidelines on general-purpose AI — key concepts and scope

Code of Practice GPAI (Art. 56 AI Act)

Code of Practice for general-purpose AI models (GPAI)

Explanatory Notice Art. 53(1)(d) AI Act

Explanatory Notice and Template — Public summary of training content

N/A

Navigating the AI Act — Official FAQ

N/A

AI Literacy — Questions & Answers (Art. 4 AI Act)

N/A

Repository of AI Literacy Practices

N/A

Q&A on Code of Practice for GPAI

N/A

Q&A Guidelines GPAI providers

N/A

Standardisation of the AI Act

N/A

Understanding the standardisation of the AI Act — FAQ

N/A

Guidelines and Code of Practice on transparent AI systems (Art. 50)

N/A

AI Pact — Voluntary initiative for early compliance

Code of Practice GPAI — Chapter 1

Code of Practice GPAI — Chapter 1: Transparency

Code of Practice GPAI — Chapter 2

Code of Practice GPAI — Chapter 2: Copyright

Code of Practice GPAI — Chapter 3

Code of Practice GPAI — Chapter 3: Safety & Security

N/A

Code of Practice GPAI — Landing Page

Template Art. 53(1)(d) AI Act

Template — Public summary of training content

ENISA NIS2 Technical Implementation Guidance v1.0

ENISA NIS2 Technical Implementation Guidance v1.0

ENISA Report

ENISA — Cybersecurity of AI and Standardisation

ACN Determinazione n. 379907/2025

ACN Determination 379907/2025 — NIS2 Baseline Security Measures

ACN Determinazione NIS — Specifiche di base

ACN NIS Baseline Specifications

ACN Linee guida gestione incidenti

ACN — Guidelines on the cybersecurity incident management process

ISO/IEC 42001:2023

Artificial Intelligence Management System (AIMS)

ISO/IEC 23894:2023

Artificial Intelligence — Guidance on risk management

ISO/IEC 22989:2022

Artificial Intelligence — Concepts and terminology

ISO/IEC 38507:2022

Governance of IT — Governance implications of the use of AI by organizations

ISO/IEC 27001:2022

Information Security Management Systems (ISMS)

ISO/IEC 27701:2025

Privacy Information Management System (PIMS) — 2nd edition

ISO/IEC 27036-1

Cybersecurity — Supplier relationships — Part 1: Overview and concepts

ISO/IEC 27036-2

Cybersecurity — Supplier relationships — Part 2: Requirements

ISO/IEC 27036-3

Cybersecurity — Supplier relationships — Part 3: Guidelines for ICT supply chain security

ISO 19011:2018

Guidelines for auditing management systems

ISO/IEC 17024:2012

Conformity assessment — General requirements for bodies operating certification of persons

NIST AI 100-1

NIST AI Risk Management Framework 1.0

NIST AI 600-1

NIST AI 600-1 — Generative AI Profile for AI RMF

NIST SP 800-61r3

NIST SP 800-61r3 — Incident Response Recommendations and Considerations

NIST CSWP 29

NIST Cybersecurity Framework 2.0

NIST SP 800-53r5

NIST SP 800-53r5 — Security and Privacy Controls for Information Systems (Update 1)

NIST SP 800-218

NIST SP 800-218 — Secure Software Development Framework (SSDF) v1.1

NIST SP 800-218A

NIST SP 800-218A — SSDF Profile for Generative AI and Dual-Use Foundation Models

NIST SP 800-161r1

NIST SP 800-161r1 — Cybersecurity Supply Chain Risk Management (C-SCRM, Update 1)

OWASP Top 10 for LLM 2025

OWASP Top 10 for LLM Applications 2025

OWASP Top 10 for Agentic AI 2026

OWASP Top 10 for Agentic AI Applications 2026

MITRE ATLAS

MITRE ATLAS — Adversarial Threat Landscape for Artificial-Intelligence Systems

HLEG Ethics Guidelines for Trustworthy AI

Ethics Guidelines for Trustworthy AI (HLEG)

ALTAI

ALTAI — Assessment List for Trustworthy Artificial Intelligence (self-assessment)

Provv. 112/2023 — Docweb 9870832

Temporary restriction on OpenAI processing (ChatGPT block)

Provv. 755/2024 — Docweb 10085455

Sanctioning measure against OpenAI (€15M fine)

Provv. 329/2024 — Docweb 10020316

Measure on web scraping for generative AI training purposes

Docweb 10130115

Sanctioning measure against Luka Inc. for Replika (€5M fine)

Docweb 9852214

Temporary restriction on Luka Inc. for Replika (initial block)

Docweb 10013893

Prescriptive measure against Luka Inc. for Replika

Docweb 9751362

Sanctioning measure against Clearview AI (€20M fine)

Docweb 9996508

Italian DPA signal to Parliament and Government on AI

Determinazione AgID n. 17/2025

Start of consultation for AI adoption guidelines in public administration

Bozza Linee guida adozione IA PA

Draft guidelines for AI adoption in public administration

Allegato — Valutazione d'impatto IA

AI Impact Assessment (AgID guidelines annex)

Determinazione AgID n. 43/2026

Start of consultation for AI development and procurement guidelines in PA

Bozza Linee guida sviluppo IA PA

Draft guidelines for AI systems development in public administration

Strumento A — Termini e definizioni (sviluppo)

Tool A — Terms and definitions for AI development in PA

Strumento B — Training, validazione, fine-tuning e RAG

Tool B — Training, validation, fine-tuning and RAG

Bozza Linee guida procurement IA PA

Draft guidelines for AI procurement in public administration

Strumento A — Termini e definizioni (procurement)

Tool A — Terms and definitions for AI procurement in PA

Strumento B — Schema di capitolato tecnico

Tool B — Technical specification template for AI procurement

Strumento C — Esempio LCOAI

Tool C — AI Life Cycle Ownership Example (LCOAI)

Strategia Italiana per l'IA 2024-2026

Italian Strategy for Artificial Intelligence 2024-2026

Piano Triennale per l'Informatica nella PA 2024-2026

Three-Year Plan for IT in Public Administration 2024-2026

Aggiornamento 2026 del Piano Triennale 2024-2026

2026 Update to the Three-Year Plan for IT in PA

Portale Osservatorio IA nel mondo del lavoro

Observatory on AI Adoption in the World of Work — Portal