AI Regulatory Registry

Artificial Intelligence Act

General Data Protection Regulation (GDPR)

Law Enforcement Directive (LED)

ePrivacy Directive

Network and Information Security Directive (NIS2)

Critical Entities Resilience Directive (CER)

Cyber Resilience Act (CRA)

Cybersecurity Act

Digital Operational Resilience Act (DORA)

Product Liability Directive (PLD recast)

Data Act

Data Governance Act (DGA)

Open Data Directive

Digital Services Act (DSA)

Digital Markets Act (DMA)

Copyright in the Digital Single Market Directive

European Health Data Space (EHDS)

European Accessibility Act

Unfair Commercial Practices Directive (UCPD)

General Product Safety Regulation (GPSR)

Medical Devices Regulation (MDR)

In Vitro Diagnostic Medical Devices Regulation (IVDR)

Machinery Regulation

eIDAS 2.0 Regulation

EU Dual-Use Export Control Regulation

Racial Equality Directive

Employment Equality Directive

Whistleblower Protection Directive

Corporate Sustainability Reporting Directive (CSRD)

EUCC — EU Common Criteria Cybersecurity Certification Scheme

NIS2 Implementing Regulation — Technical Requirements

Regulation on the protection of personal data by EU institutions

Standard Contractual Clauses (SCC) for international data transfers

EU-US Data Privacy Framework Adequacy Decision

European Sustainability Reporting Standards (ESRS)

Italian AI Law

NIS2 Transposition Decree

National Cybersecurity Strengthening Law

National Cybersecurity Perimeter Decree

National Cybersecurity Agency Establishment Law

DPCM 81/2021 — PSNC Incident Notification and Security Measures

DPCM 111/2025

Italian Personal Data Protection Code (Privacy Code)

GDPR National Adaptation Decree

Workers' Statute — Art. 4 (Remote monitoring)

Transparent Working Conditions Decree

Italian Whistleblowing Decree

Administrative Liability of Legal Entities Decree (D.Lgs. 231/2001)

Italian Copyright DSM Transposition Decree

Public Contracts Code

Italian Copyright Law (LDA)

Italian Consumer Code

Digital Administration Code (CAD)

Italian Racial Equality Decree

Italian Employment Equality Decree

Equal Opportunities Code

PSNC Regulation (DPCM 131/2020)

PSNC ICT Verification Procedure (DPR 54/2021)

PSNC ICT Categories (DPCM 15/6/2021)

Establishment of the AI in the Workplace Observatory (DM MLPS 173/2025)

Guidelines on AI in the Workplace (DM MLPS 180/2025)

First document towards the AI in the Workplace Observatory

Digital Omnibus on AI

Digital Legislation Omnibus

AI Liability Directive (AILD) — WITHDRAWN

ePrivacy Regulation — WITHDRAWN

CEN-CENELEC JTC 21 Harmonised Standards for the AI Act

EDPB Work Programme 2026–2027

Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Guidelines 4/2019 on Article 25 Data Protection by Design and by Default

Guidelines on Data Protection Impact Assessment (DPIA — Art. 35 GDPR)

Guidelines on Automated individual decision-making and Profiling (Art. 22 GDPR)

Guidelines 9/2022 on personal data breach notification under GDPR

Recommendations 01/2020 on measures that supplement transfer tools

Guidelines 05/2021 on the Interplay between Art. 3 and Chapter V of the GDPR

Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement

EDPB Support Pool of Experts — AI Privacy Risks & Mitigations for LLMs

EDPS Guidance on Generative AI — Strengthening data protection in a rapidly changing digital era (v2)

Commission Guidelines on the definition of an artificial intelligence system

Commission Guidelines on prohibited artificial intelligence (AI) practices

Commission Guidelines on general-purpose AI — key concepts and scope

Code of Practice for general-purpose AI models (GPAI)

Explanatory Notice and Template — Public summary of training content

Navigating the AI Act — Official FAQ

AI Literacy — Questions & Answers (Art. 4 AI Act)

Repository of AI Literacy Practices

Q&A on Code of Practice for GPAI

Q&A Guidelines GPAI providers

Standardisation of the AI Act

Understanding the standardisation of the AI Act — FAQ

Guidelines and Code of Practice on transparent AI systems (Art. 50)

AI Pact — Voluntary initiative for early compliance

Code of Practice GPAI — Chapter 1: Transparency

Code of Practice GPAI — Chapter 2: Copyright

Code of Practice GPAI — Chapter 3: Safety & Security

Code of Practice GPAI — Landing Page

Template — Public summary of training content

ENISA NIS2 Technical Implementation Guidance v1.0

ENISA — Cybersecurity of AI and Standardisation

ACN Determination 379907/2025 — NIS2 Baseline Security Measures

ACN NIS Baseline Specifications

ACN — Guidelines on the cybersecurity incident management process

Artificial Intelligence Management System (AIMS)

Artificial Intelligence — Guidance on risk management

Artificial Intelligence — Concepts and terminology

Governance of IT — Governance implications of the use of AI by organizations

Information Security Management Systems (ISMS)

Privacy Information Management System (PIMS) — 2nd edition

Cybersecurity — Supplier relationships — Part 1: Overview and concepts

Cybersecurity — Supplier relationships — Part 2: Requirements

Cybersecurity — Supplier relationships — Part 3: Guidelines for ICT supply chain security

Guidelines for auditing management systems

Conformity assessment — General requirements for bodies operating certification of persons

NIST AI Risk Management Framework 1.0

NIST AI 600-1 — Generative AI Profile for AI RMF

NIST SP 800-61r3 — Incident Response Recommendations and Considerations

NIST Cybersecurity Framework 2.0

NIST SP 800-53r5 — Security and Privacy Controls for Information Systems (Update 1)

NIST SP 800-218 — Secure Software Development Framework (SSDF) v1.1

NIST SP 800-218A — SSDF Profile for Generative AI and Dual-Use Foundation Models

NIST SP 800-161r1 — Cybersecurity Supply Chain Risk Management (C-SCRM, Update 1)

OWASP Top 10 for LLM Applications 2025

OWASP Top 10 for Agentic AI Applications 2026

MITRE ATLAS — Adversarial Threat Landscape for Artificial-Intelligence Systems

Ethics Guidelines for Trustworthy AI (HLEG)

ALTAI — Assessment List for Trustworthy Artificial Intelligence (self-assessment)

Temporary restriction on OpenAI processing (ChatGPT block)

Sanctioning measure against OpenAI (€15M fine)

Measure on web scraping for generative AI training purposes

Sanctioning measure against Luka Inc. for Replika (€5M fine)

Temporary restriction on Luka Inc. for Replika (initial block)

Prescriptive measure against Luka Inc. for Replika

Sanctioning measure against Clearview AI (€20M fine)

Italian DPA signal to Parliament and Government on AI

Start of consultation for AI adoption guidelines in public administration

Draft guidelines for AI adoption in public administration

AI Impact Assessment (AgID guidelines annex)

Start of consultation for AI development and procurement guidelines in PA

Draft guidelines for AI systems development in public administration

Tool A — Terms and definitions for AI development in PA

Tool B — Training, validation, fine-tuning and RAG

Draft guidelines for AI procurement in public administration

Tool A — Terms and definitions for AI procurement in PA

Tool B — Technical specification template for AI procurement

Tool C — AI Life Cycle Ownership Example (LCOAI)

Italian Strategy for Artificial Intelligence 2024-2026

Three-Year Plan for IT in Public Administration 2024-2026

2026 Update to the Three-Year Plan for IT in PA

Observatory on AI Adoption in the World of Work — Portal