Country Overview
Italy became the first EU member state to pass its own comprehensive national AI law, Law No. 132/2025, which entered into force in October 2025 and layers sector-specific rules — for healthcare, employment, justice and the professions — plus new AI copyright provisions on top of the EU AI Act baseline. Implementing decrees are due by October 2026; two received preliminary Council of Ministers approval in June 2026, with final adoption still pending parliamentary committee and Data Protection Authority (Garante) review. The law designates the Agency for Digital Italy (AgID) as notifying authority and the National Cybersecurity Agency (ACN) as market-surveillance authority and single EU contact point — the two national competent authorities under both the Italian law and the EU AI Act.
These national arrangements now sit alongside a further EU milestone: from 2 August 2026 the European Commission's supervision and enforcement powers over general-purpose AI (GPAI) providers took effect, carrying fines of up to €15M or 3% of global turnover under Article 101, while Article 50 transparency duties (chatbot disclosure, AI-content and deepfake labelling) began to apply; most high-risk (Annex III) obligations were meanwhile postponed to 2027–2028. Separately, Undersecretary Alessio Butti has framed the law as a 'digital sovereignty' matter; the reported €1 billion national AI figure appears to correspond to Article 23 of Law 132/2025, which draws on the state Venture Capital Support Fund managed by CDP Venture Capital. The law's copyright provisions add new AI-specific text-and-data-mining exceptions and require substantial human creative contribution for AI-assisted works to receive copyright protection; legal commentators note that the precise boundary of the TDM exception — in particular whether it extends to commercial model training or is limited to research/non-commercial use — remains contested and not yet fully settled in practice.
At a Glance
Overall AI policy direction
First-mover national law, layered atop EU baseline
3
Major AI companies
3
Research institutions
3
Live debates
- Latest development
- August 4, 2026
- Regulatory approach
- National AI Law (132/2025) plus sector rules, layered atop the EU AI Act
- Major AI companies
- Generative Bionics, Axyon AI, Lexroom.ai
- Major cloud providers
- Microsoft Azure, AWS, Google Cloud
- Leading research institutions
- Italian Institute of Technology (IIT), AI4I, CNR (National Research Council)
- Key ministries
- Agency for Digital Italy (AgID), National Cybersecurity Agency (ACN), Italian Data Protection Authority (Garante)
- Government involvement
- High — first EU state with its own comprehensive AI statute, framed as digital sovereignty
- Industrial strategy
- Article 23 of Law 132/2025 earmarks up to €1B via the CDP Venture Capital-managed Venture Capital Support Fund; AI4I industrial AI institute in Turin; IT4LIA EuroHPC AI Factory in Bologna
- International partnerships
- Agreement signed for a new UNU AI and big-data institute in Bologna; parliamentary ratification still pending as of mid-2026
- Primary policy focus
- Sector-specific rules (healthcare, employment, justice) plus stricter AI copyright provisions
Current Direction
Tightening
Italy moved first among EU states to legislate its own comprehensive national AI law rather than rely on the EU AI Act alone, and is now working through implementing decrees — due by October 2026 — that will help determine how strictly its national copyright and sector rules end up being enforced. From 2 August 2026 the EU's GPAI supervision and enforcement powers came into application on top of this national framework, and the Garante has continued an unusually active run of AI privacy enforcement, so the near-term direction is towards firmer, more operational oversight even as most high-risk AI Act obligations were pushed to 2027–2028.
Recent Developments
The Council of Ministers definitively approved two legislative decrees implementing the EU AI Act under Law 132/2025 (4 August 2026), following their June preliminary approval. The decrees regulate police use of AI (real-time biometric identification only in exceptional cases with prior judicial authorization, and a ban on mass scraping for biometric databases), AI in education, national authority powers and civil liability -- and introduce new criminal offences, including failure to adopt adequate safety measures or human oversight for high-risk AI systems where this endangers life or public safety, making Italy among the first EU states to attach criminal penalties to AI Act compliance failures.
Major2026-08-04The EU AI Act's general-purpose AI (GPAI) supervision and enforcement powers take effect (fines up to €15M or 3% of global turnover under Article 101; Article 50 transparency duties on chatbot disclosure and AI-content/deepfake labelling begin to apply). The European Commission's AI Office is the central enforcer, while at national level Italy's ACN acts as market-surveillance authority and single EU contact point and AgID as notifying authority under Law 132/2025.
2026-08-02The Garante (Data Protection Authority) fines Character Technologies, owner of the Character.AI companion-chatbot platform, roughly €158,000 (about $180,000) for failing to adequately inform users, protect minors, run a timely data-protection impact assessment and appoint an EU representative, and orders stronger age-verification and default-private profiles for minors — continuing a run of Italian AI enforcement that in 2025 also targeted Replika, DeepSeek and the 'Clothoff' deepfake-nudification app.
2026-07-09The EuroHPC Joint Undertaking inaugurates LISA (Leonardo Improved Supercomputing Architecture), an AI-dedicated upgrade partition to the CINECA-hosted Leonardo supercomputer in Bologna — reportedly the first EuroHPC partition designed from the ground up for AI workloads, adding up to roughly 65 petaFLOPS — alongside the IT4LIA EuroHPC AI Factory and the new SOL quantum system.
2026-06-11Two implementing decrees for Italy's national AI law received preliminary Council of Ministers approval (covering the powers of the national authorities plus education/training, and the use of AI in policing plus civil and criminal liability); final adoption remains pending parliamentary committee and Data Protection Authority (Garante) review ahead of the October 2026 deadline.
UNU signs agreements with the Italian government to establish a new AI and big-data institute in Bologna; as of mid-2026, parliamentary ratification and full operational status were still pending.
2026Italy's AI investment push is anchored in Article 23 of Law 132/2025, which earmarks up to €1 billion from the state Venture Capital Support Fund managed by CDP Venture Capital; reporting indicates more than €300M has been allocated to over 150 startups, with further investment planned. Undersecretary Alessio Butti has framed the effort as a matter of digital sovereignty.
Italy becomes the first EU member state to enact its own comprehensive national AI law (Law No. 132/2025), in force from 10 October 2025.
Major2025-10-10SourceMcDermott Will & Emery
Policy and Regulation
National AI Law (Law No. 132/2025)
First comprehensive national AI law among EU member states, adding sector-specific rules for healthcare, employment, justice and the professions, plus new AI copyright provisions — including text-and-data-mining exceptions — that legal commentators generally view as stricter than the EU baseline, though the exact scope remains debated.
Implementing decrees for Law 132/2025
Due by 10 October 2026; two received preliminary Council of Ministers approval in June 2026 (one on the powers of the national authorities and AI in education/training, one on AI in policing and civil/criminal liability), with final adoption still pending parliamentary committee and Data Protection Authority (Garante) review. The delegated decrees are expected to set Italy-specific high-risk lists and thresholds, conformity-assessment and accreditation procedures, sanction scales and sector rules.
EU AI Act (as applied in Italy)
The EU AI Act is the substantive baseline that Law 132/2025 builds on. From 2 August 2026 the Commission's supervision and enforcement powers over general-purpose AI providers took effect — including the power to request documentation, evaluate models, order mitigations and impose fines of up to €15M or 3% of global turnover (Article 101) — and Article 50 transparency duties began to apply. Most high-risk (Annex III) obligations were postponed to 2027–2028. AgID (notifying authority) and ACN (market surveillance and single EU contact point) are Italy's designated national competent authorities, coordinating with the EU AI Office.
Official text ↗Research Ecosystem
Italian AI research spans institutions including the Italian Institute of Technology (IIT), the National Research Council (CNR/ICAR), and AI4I — a government-established industrial AI institute in Turin — alongside the CINI AIIS lab network.
Major AI Companies
Generative Bionics
IIT-spinout humanoid robotics company (founded 2024), having raised a €70M round.
Axyon AI
Modena-based Italian fintech/AI asset-management company.
Lexroom.ai
Milan-based Italian legal-tech AI company that has scaled quickly, raising a €16M Series A (2025) and a €42.9M Series B (2026) and now serving thousands of law firms.
Cloud Infrastructure
- Frontier AI
- No domestic frontier developer
- Compute
- Strong public HPC — the CINECA-hosted Leonardo (Bologna), now with the AI-dedicated LISA partition and the IT4LIA EuroHPC AI Factory
- Chip access
- Import-reliant; no domestic advanced-AI-chip fabrication (Leonardo runs on NVIDIA GPUs)
Microsoft Azure
Widely used cloud provider for Italian enterprise AI workloads; Italy-specific market-share data is not reliably available.
AWS
Major cloud provider with a data-centre presence in Italy.
Google Cloud
Cloud provider used across Italian research and enterprise AI.
Leading Universities
Italian Institute of Technology (IIT)
Leading Italian research institute, incubator of Generative Bionics and other AI/robotics spinouts.
AI4I
Government-established industrial AI institute based in Turin.
CNR (National Research Council)
Italy's national research council, including the ICAR AI research institute.
Think Tanks
Government Institutions
Agency for Digital Italy (AgID)
Designated notifying authority under Law 132/2025 — accredits and oversees conformity-assessment bodies — and custodian of the Italian Strategy for Artificial Intelligence 2024–2026.
National Cybersecurity Agency (ACN)
Designated national market-surveillance authority under Law 132/2025 and the AI Act, and Italy's single point of contact with the EU institutions.
Italian Data Protection Authority (Garante)
Reviews the pending implementing decrees under Law 132/2025 and has been one of Europe's most active AI privacy enforcers — actions against Replika, DeepSeek and 'Clothoff' in 2025 and a fine on Character.AI's owner in July 2026.
Notable Gaps
Cloud market share data
No Italy-specific cloud market-share source could be confirmed for Azure, AWS or Google Cloud; only approximate global figures are available, so provider dominance percentages are omitted pending better sourcing.
Key People
People and Organisations to Follow
Current Debates
GovernmentTDM copyright restriction scope contested by industry vs. rightsholders
Italy's national law narrows text-and-data-mining exceptions for AI training compared with the EU baseline, and is generally regarded by legal commentators as stricter — though the precise boundary between permitted research/non-commercial use and commercial model training remains contested and, per some analyses, ambiguous.
▾
TDM copyright restriction scope contested by industry vs. rightsholders
Italy's national law narrows text-and-data-mining exceptions for AI training compared with the EU baseline, and is generally regarded by legal commentators as stricter — though the precise boundary between permitted research/non-commercial use and commercial model training remains contested and, per some analyses, ambiguous.
Some AI developers and legal commentators argue that a narrower TDM exception could make Italy a harder jurisdiction to train commercial models in compared to peers relying solely on the EU AI Act's copyright framework, though the exact scope of the exception is still being debated and may only be clarified through future guidance or litigation. Rightsholders and creative-industry groups have broadly welcomed a stricter default, arguing it better protects Italian creative and publishing industries.
GovernmentFirst-mover national AI law vs. EU harmonisation
As the first EU state with its own comprehensive AI law, Italy tests whether national add-ons atop the AI Act help or fragment the single market.
▾
First-mover national AI law vs. EU harmonisation
As the first EU state with its own comprehensive AI law, Italy tests whether national add-ons atop the AI Act help or fragment the single market.
The European Commission has generally pushed for harmonised AI Act implementation across member states; Italy's decision to legislate additional sector-specific and copyright rules raises the question of whether other states will follow suit (creating a patchwork within the EU itself) or whether Brussels will push back on national divergence.
GovernmentThe Garante as Europe's most active AI privacy enforcer
Even before the national AI law's enforcement machinery is fully operational, Italy's data-protection authority has arguably done more AI enforcement than any peer regulator — chiefly through GDPR rather than the AI Act itself.
▾
The Garante as Europe's most active AI privacy enforcer
Even before the national AI law's enforcement machinery is fully operational, Italy's data-protection authority has arguably done more AI enforcement than any peer regulator — chiefly through GDPR rather than the AI Act itself.
Across 2025–2026 the Garante limited DeepSeek's processing of Italian users' data, reaffirmed a ban and levied a reported €5M fine on Replika's developer, ordered a halt to the 'Clothoff' nudification app, and in July 2026 fined Character.AI's owner roughly €158,000 over child-safety and age-verification failings. Supporters see this as filling a gap while high-risk AI Act obligations are delayed to 2027–2028; critics note the actions rest largely on data-protection law rather than the new AI-specific framework, and question how consistently such enforcement can scale.
Knowledge Hub
Official documents
Think tank reports
Sources
Deliberately sourced beyond government publications. The bars below show each category’s actual share of this page’s citations — an internal editorial guideline rather than a rigorously derived target, so treat it as a rough steer, not a precise benchmark.
- Italy approves draft AI decrees aligning national rules with the EU AI ActThink tanksDLA Piper2026-06
- Butti on Italy's AI sovereignty investmentGovernmentWorld Technology Congress2026
- New UNU institute in Italy will drive global collaboration on AI and big dataResearchUnited Nations University2026
- Italy becomes the first in Europe to set national AI rulesThink tanksMcDermott Will & Emery2025-10
- Italy AI strategy reportResearchAI Watch, Joint Research Centre2026
- Enforcement of Chapter V under the EU AI Act (GPAI supervision from 2 August 2026)Expert commentaryEU Artificial Intelligence Act (artificialintelligenceact.eu)2026-08
- Character.AI fined in Italy over child privacy failuresNewsMLex2026-07
- Italy Fines Character.AI Owner Over Age-Check and Privacy FailuresNewsTechnology.org2026-07
- Inauguration of SOL, a new quantum computer, together with LISA: the upgrade of the Leonardo supercomputerGovernmentEuroHPC Joint Undertaking2026-06
- AI: Italy's implementing decrees for Law 132/2025 — governance, training, biometrics and liabilityExpert commentarynoze2026-06
- Italy's CDP to invest €1 billion in AI and cybersecurityNewsDigital Watch Observatory2026
- Consiglio dei Ministri del 4 agosto 2026GovernmentDipartimento per gli Affari Europei2026-08-04
- AI, Italy goes criminalNewsDecode392026-08-05