Newsletter

NicFab Newsletter Issue 12 | March 17, 2026 Privacy, Data Protection, AI, and Cybersecurity Welcome to Issue 12 of our weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity, and ethics. Every Tuesday, you’ll find a curated selection of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement, and technological innovation. In this issue ITALIAN DATA PROTECTION AUTHORITY EDPB - EUROPEAN DATA PROTECTION BOARD EDPS - EUROPEAN DATA PROTECTION SUPERVISOR EUROPEAN COMMISSION CNIL - FRENCH DATA PROTECTION AUTHORITY EUROPEAN PARLIAMENT DIGITAL MARKETS & PLATFORM REGULATION INTERNATIONAL DEVELOPMENTS ARTIFICIAL INTELLIGENCE CYBERSECURITY TECH & INNOVATION SCIENTIFIC RESEARCH Column – AI Act in a Nutshell | Part 12 – Article 16 From the NicFab Blog Featured Events and Meetings Conclusion ITALIAN DATA PROTECTION AUTHORITY # Data Protection Authority fines Intesa Sanpaolo €17.6 million The Data Protection Authority imposed a record fine of €17.6 million on Intesa Sanpaolo for unilaterally transferring 2.4 million customers to its subsidiary Isybank through unlawful profiling. The bank selected customers under 65 who used digital channels and had, without an adequate legal basis. ...

NicFab Newsletter Issue 11 | March 10, 2026 Privacy, Data Protection, AI, and Cybersecurity Welcome to issue 11 of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity and ethics. Every Tuesday you will find a curated selection of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement and technological innovation. In this issue ITALIAN DATA PROTECTION AUTHORITY EDPB - EUROPEAN DATA PROTECTION BOARD EDPS - EUROPEAN DATA PROTECTION SUPERVISOR CNIL - FRENCH AUTHORITY EUROPEAN PARLIAMENT COUNCIL OF THE EUROPEAN UNION INTERNATIONAL DEVELOPMENTS ARTIFICIAL INTELLIGENCE CYBERSECURITY TECH & INNOVATION SCIENTIFIC RESEARCH AI Act in Pills Events and Meetings Conclusion ITALIAN DATA PROTECTION AUTHORITY Italian DPA Monitors “Forest Family” Case, Emphasizes Minor Protection The Italian Data Protection Authority has issued a statement regarding the widely reported “forest family” case, emphasizing its commitment to monitoring situations involving minors’ data protection. The Authority expressed particular concern about cases that may expose children to significant media attention, highlighting the heightened vulnerability of minors in such circumstances. ...

NicFab Newsletter Issue 10 | March 3, 2026 Privacy, Data Protection, AI, and Cybersecurity Welcome to issue 10 of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity, and ethics. Every Tuesday, you will find a carefully selected list of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement, and technological innovation. In this issue ITALIAN DATA PROTECTION AUTHORITY EDPB - EUROPEAN DATA PROTECTION BOARD EDPS - EUROPEAN DATA PROTECTION SUPERVISOR EUROPEAN COMMISSION CNIL - FRENCH AUTHORITY EUROPEAN PARLIAMENT INTERNATIONAL DEVELOPMENTS ARTIFICIAL INTELLIGENCE CYBERSECURITY TECH & INNOVATION SCIENTIFIC RESEARCH AI Act in a Nutshell Events and meetings Conclusion ITALIAN DATA PROTECTION AUTHORITY Stop the filing of Amazon workers: the Authority prohibits unlawful processing The Privacy Authority has ordered Amazon Italia Logistica to immediately cease processing the personal data of over 1,800 workers at the Passo Corese center. The investigation revealed the systematic collection of sensitive information via a platform linked to the attendance system, accessible to numerous managers and stored for up to 10 years after the termination of employment. ...

NicFab Newsletter Issue 9 | February 24, 2026 Privacy, Data Protection, AI, and Cybersecurity Welcome to issue 9 of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity, and ethics. Every Tuesday, you will find a carefully selected list of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement, and technological innovation. In this issue ITALIAN DATA PROTECTION AUTHORITY EDPB - EUROPEAN DATA PROTECTION BOARD EDPS - EUROPEAN DATA PROTECTION SUPERVISOR EUROPEAN COMMISSION CNIL - FRENCH AUTHORITY EUROPEAN PARLIAMENT COUNCIL OF THE EUROPEAN UNION DIGITAL MARKETS & PLATFORM REGULATION INTERNATIONAL DEVELOPMENTS ARTIFICIAL INTELLIGENCE CYBERSECURITY TECH & INNOVATION SCIENTIFIC RESEARCH AI Act in a Nutshell - Part 9 Events and meetings reported Conclusion ITALIAN DATA PROTECTION AUTHORITY Sanction against eCampus for facial recognition: a warning for the education sector The Data Protection Authority imposed a €50,000 fine on eCampus University for the unlawful use of facial recognition systems during online teaching qualification courses. The violation affected more than 450 students per lesson, highlighting the extent of the impact on the rights of those concerned. ...

NicFab Newsletter Issue 8 | February 17, 2026 Privacy, Data Protection, AI, and Cybersecurity Welcome to issue 8 of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity, and ethics. Every Tuesday, you will find a curated selection of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement, and technological innovation. In this issue ITALIAN DATA PROTECTION AUTHORITY EDPB - EUROPEAN DATA PROTECTION BOARD EDPS - EUROPEAN DATA PROTECTION SUPERVISOR EUROPEAN COMMISSION CNIL - FRENCH AUTHORITY COUNCIL OF THE EUROPEAN UNION COURT OF JUSTICE EU DIGITAL MARKETS & PLATFORM REGULATION AI STANDARDS AND CERTIFICATIONS INTERNATIONAL DEVELOPMENTS ARTIFICIAL INTELLIGENCE CYBERSECURITY TECH & INNOVATION SCIENTIFIC RESEARCH AI Act in Pills From the NicFab Blog Events and Meetings Conclusion ITALIAN DATA PROTECTION AUTHORITY PODCAST “A proposito di privacy” - Workers’ Rights Featured in New Episode The Italian DPA’s latest podcast episode explores workplace privacy rights, drawing from their significant €5 million fine against a food delivery company in November 2024. The case highlighted algorithmic management systems that controlled rider schedules and order assignments while tracking location data beyond working hours without proper consent. ...

NicFab Newsletter Issue 7 | February 10, 2026 Privacy, Data Protection, AI, and Cybersecurity Welcome to issue 7 of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity and ethics. Every Tuesday you will find a curated selection of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement and technological innovation. In this issue EDPB - EUROPEAN DATA PROTECTION BOARD EDPS - EUROPEAN DATA PROTECTION SUPERVISOR EUROPEAN COMMISSION DIGITAL MARKETS & PLATFORM REGULATION INTERNATIONAL DEVELOPMENTS ARTIFICIAL INTELLIGENCE CYBERSECURITY TECH & INNOVATION SCIENTIFIC RESEARCH AI Act in Pills Events and Meetings Conclusion EDPB - EUROPEAN DATA PROTECTION BOARD Opinion 1/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Heineken Group The EDPB has issued its opinion on Heineken Group’s Controller Binding Corporate Rules (BCRs), marking another step in the approval process for these critical data transfer mechanisms. BCRs remain one of the most robust legal bases for international data transfers within corporate groups, particularly following the uncertainty created by the Schrems II decision. ...

NicFab Newsletter Issue 6 | February 3, 2026 Privacy, Data Protection, AI, and Cybersecurity Welcome to issue 6 of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity, and ethics. Every Tuesday, you will find a curated selection of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement, and technological innovation. In this issue ITALIAN DATA PROTECTION AUTHORITY EDPB - EUROPEAN DATA PROTECTION BOARD EDPS - EUROPEAN DATA PROTECTION SUPERVISOR EUROPEAN COMMISSION EUROPEAN PARLIAMENT COUNCIL OF THE EUROPEAN UNION DIGITAL MARKETS & PLATFORM REGULATION AI STANDARDS AND CERTIFICATIONS INTERNATIONAL DEVELOPMENTS CYBERSECURITY TECH & INNOVATION SCIENTIFIC RESEARCH AI Act in a Nutshell From the NicFab Blog Events and meetings Conclusion ITALIAN DATA PROTECTION AUTHORITY Garlasco case: Data Protection Authority warning on information limits The Data Protection Authority has condemned the behavior of the media and websites in their coverage of the Chiara Poggi case, denouncing a progressive increase in the level of detail in the reconstruction of facts, personal contexts, and individual profiles that exceeds legitimate informational purposes. ...

NicFab Newsletter Issue 5 | January 27, 2026 Privacy, Data Protection, AI, and Cybersecurity Welcome to issue 5 of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity, and ethics. Every Tuesday, you will find a curated selection of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement, and technological innovation. In this issue EDPB - EUROPEAN DATA PROTECTION BOARD EDPS - EUROPEAN DATA PROTECTION SUPERVISOR EUROPEAN COMMISSION COUNCIL OF THE EU DIGITAL MARKETS & PLATFORM REGULATION INTERNATIONAL DEVELOPMENTS ARTIFICIAL INTELLIGENCE CYBERSECURITY TECH & INNOVATION SCIENTIFIC RESEARCH AI Act in Pills From the NicFab Blog Events and Meetings Conclusion EDPB - EUROPEAN DATA PROTECTION BOARD EDPB Document on Cooperation Procedure for Contractual Clauses Authorization The EDPB has published new procedural guidance for the authorization of contractual clauses under Article 46(3)(a) GDPR and the adoption of standard contractual clauses under Article 46(2)(d) GDPR. This document establishes a streamlined cooperation framework between data protection authorities when evaluating custom contractual arrangements for international data transfers. ...

NicFab Newsletter Issue 4 | January 20, 2026 Privacy, Data Protection, AI, and Cybersecurity Welcome to issue 4 of the weekly newsletter dedicated to privacy, data protection, artificial intelligence, cybersecurity and ethics. Every Tuesday you will find a curated selection of the most relevant news from the previous week, with a focus on European regulatory developments, case law, enforcement and technological innovation. In this issue Italian Privacy Authority EDPS: TechSonar on Agentic AI European Commission European Parliament Council of the EU Court of Justice EU Digital Markets & Platform Regulation Artificial Intelligence Cybersecurity Tech & Innovation AI Act in Pills – Part 3 Upcoming Events Analytical Commentary ITALIAN DATA PROTECTION AUTHORITY Italian DPA: Board Member Guido Scorza Resigns The Italian Data Protection Authority (Garante per la protezione dei dati personali) announced the resignation of Guido Scorza from his position as a member of the Authority’s Board, effective January 17, 2026. Scorza’s departure represents a significant change in the composition of Italy’s privacy regulatory body. ...

NicFab Newsletter Issue 3 | January 13, 2026 Privacy, Data Protection, AI, and Cybersecurity This issue officially kicks off 2026 for the NicFab Newsletter, a year that promises to be particularly significant for the evolution of personal data protection and the Regulation of artificial intelligence. The publication resumes regularly after the holiday break, aiming to continue offering a critical and systemic analysis of the main regulatory, institutional, and technological developments. ...