Netcrook
Privacy, Regulation & Compliance / Europe
Energy Sales Calls Enter a Narrower Legal Zone
Italy’s new limits on phone-based offers for electricity and gas do not automatically cancel older marketing consents, leaving lawful calling dependent on how rules, exceptions, and records are interpreted.
Europe Puts Platform Algorithms on Notice
An Italian draft decree tied to an EU platform-work directive adds rules on algorithmic transparency, human oversight, and personal-data protection, turning automated management into a compliance issue with security consequences.
Europe Just Turned AI Compliance Into an Engineering Problem
The EU’s AI Omnibus is now in force, and its real effect is not just legal simplification - it pushes vendors and deployers toward a more operational model of AI security, documentation, and oversight.
Italy’s Privacy Regulator Hits a Data Broker Where It Hurts: the Value of Contact Data
A 2 million euro sanction against Lusha underscores how professional profiles, email addresses, and phone numbers can become a regulated security asset, not just a sales input.
Italy Turns Supplier Risk Into a Security Discipline Under NIS2
ACN’s updated FAQs show how NIS2 supply-chain obligations are being translated from legal text into day-to-day controls for regulated organizations.
Italy’s AI Rules Are Moving from Policy to Pressure
AG 421 is pushing Italy toward an operational AI oversight model, but the hardest questions still sit in the seams between human control, staff competence, and fast-changing compliance duties.
The Click That Turned Into a Compliance Problem
An AGCM sanction tied to clickbaiting shows how sensational headlines, page architecture, personal data, and ad monetization can move digital publishing from taste into regulatory risk.
When AI Enters the Exit Interview, the Real Battle Is Over Proof
As companies turn to algorithmic tools for reorganization, the hard question is no longer whether software can rank workers - it is whether every dismissal can still be explained, reviewed, and challenged.
The Checkout Counter Is Becoming a Compliance Engine - and That Changes the Risk
As POS systems and telematic cash registers are linked more tightly, the fiscal upside is clear, but so are the questions around liability, intermediaries, privacy, competition, and merchants who act in good faith.
When a 15-Year Line Is Not Enough: Europe’s Child-Safety Problem Is Bigger Than Social Media
France’s move on social-network access for teens has revived a harder question: if the risk lives in games, chatbots, and betting too, what exactly does a single age gate solve?
Cyber Pressure Stays High as NIS2 Starts Acting Like a Security Control
Italy’s cyber environment is still under strain in early 2026, but the move to regular incident notification is beginning to shape how defenders see, sort, and answer risk.
When the Warning Lights Move Faster Than the Patch Cycle
Italy’s financial supervisor is pressing supervised institutions to treat AI as an operational risk problem, not a slow compliance exercise, as the gap between vulnerability discovery and exploitation keeps narrowing.
When a Credit Score Becomes a Regulated Decision, Energy Firms Lose the Luxury of Opaque Algorithms
Privacy sanctions in the energy sector are turning automated credit scoring into a governance test, where data quality, transparency, and the right to challenge a decision matter as much as the score itself.
Brussels Turns AI Transparency Into a Compliance Test
The European Commission has issued new guidance to help providers and users meet AI Act transparency duties, pushing AI disclosure from policy language into product and deployment practice.
France’s Under-15 Social Media Rule Exposes the Real Battle: Proving Age Without Oversharing
The policy is simple on paper, but enforcing it means building age controls that are accurate, privacy-preserving, and hard to game.
When Cyber Suppliers Become a Compliance Surface
Italy’s NIS2 debate around article 17 turns security vendors, test labs, and threat-intelligence partners into a governed information-sharing channel, not just a procurement relationship.
When a Public Sanction Turns Into Health Data
The EU court’s C-474/24 ruling shows why context, not just labels, can decide whether an online record becomes sensitive health information.
Resilience Is the New Audit: Why Security Is Being Measured by Survival
The move from compliance to operational capability is forcing organizations to prove they can keep working when a real crisis hits, not just when paperwork looks complete.
Italy’s Registry Shift: When Citizen Data Stops Moving on Paper and Starts Moving by API
ANPR access through PDND is turning a once-manual administrative routine into a governed digital lookup, with efficiency gains matched by sharper demands on identity, logging, and purpose control.
Italy’s Health Record Expansion Turns Private Clinics Into High-Trust Data Gateways
The move to bring non-accredited private outpatient clinics into FSE 2.0 is chiefly a compliance-and-integration challenge, but it also raises the stakes for document integrity, selective disclosure, and privacy logging.