On 28 April 2017 the Italian DPA published guidance on the GDPR and its implementation (the "Guidance"). The Guidance deals with the legal grounds for data processing, information notices, data subjects' rights, data controllers and data processors, accountability, and cross-border transfers of data.

To the extent that organisations handle personal data in Italy, they should make use of the Guidance in their preparations for the GDPR.

A link to the Italian DPA's Guidance can be accessed here.