Law 132/2025¶

Provisions and Delegations to the Government on Artificial Intelligence

Fact sheet¶

Summary¶

Law 132/2025 introduces in the Italian legal system principles and provisions on artificial intelligence, in implementation and specification of Regulation (EU) 2024/1689 (AI Act) and in coordination with the European framework. The law is articulated in 6 chapters and 28 articles, addressing:

• general principles and scope (Chapter I);
• sectoral provisions — health, labour, intellectual professions, public administration, judicial activity, cybersecurity (Chapter II);
• governance: national strategy, competent national authorities, investments (Chapter III);
• protection of users and copyright on works generated with AI (Chapter IV);
• criminal aspects: amendments to the criminal code and to special criminal laws (Chapter V);
• financial and final provisions (Chapter VI).

The law also contains delegations to the Government for the adoption of legislative decrees on data, algorithms and mathematical methods for training (Art. 16) and on further matters relating to the domestic implementation of the AI Act (Art. 24).

Cross-reference with the AI Act¶

The table below maps the main intersections between Law 132/2025 and Regulation (EU) 2024/1689 (AI Act). The nature column distinguishes between: renvoi (direct reference to the EU text), implementation (domestic specification of EU obligations), overlap (overlap of subject-matter scope).

Official references¶

• Normattiva (consolidated version): Law of 23 September 2025, No. 132
• Gazzetta Ufficiale Serie Generale No. 223 of 25 September 2025: GU 2025-09-25 No. 223

Text of the law¶

The Chamber of Deputies and the Senate of the Republic have approved;

THE PRESIDENT OF THE REPUBLIC

Promulgates

the following law:

Chapter I — Principles and purposes¶

Art. 1 — Purposes and scope¶

1. This law sets out principles in the field of research, experimentation, development, adoption and application of artificial intelligence systems and models. It promotes a correct, transparent and responsible use, in a human-centred dimension, of artificial intelligence, aimed at seizing its opportunities. It ensures supervision over the economic and social risks and over the impact on fundamental rights of artificial intelligence.

2. The provisions of this law shall be interpreted and applied in accordance with Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024.

Art. 2 — Definitions¶

1. For the purposes of this law:

   a) artificial intelligence system: the system as defined by Article 3, point 1), of Regulation (EU) 2024/1689;

   b) data: any digital representation of acts, facts or information and any collection of such acts, facts or information, including in the form of sound, visual or audiovisual recording;

   c) artificial intelligence models: the models as defined by Article 3, point 63), of Regulation (EU) 2024/1689.

2. For matters not expressly provided for, reference shall be made to the definitions set out in Regulation (EU) 2024/1689.

Art. 3 — General principles¶

1. The research, experimentation, development, adoption, application and use of general-purpose artificial intelligence systems and models shall take place in compliance with the fundamental rights and freedoms provided for by the Constitution, with European Union law, and with the principles of transparency, proportionality, security, protection of personal data, confidentiality, accuracy, non-discrimination, gender equality and sustainability.

2. The development of general-purpose artificial intelligence systems and models shall take place on the basis of data and through processes whose correctness, reliability, security, quality, appropriateness and transparency must be ensured and supervised, in accordance with the principle of proportionality in relation to the sectors in which they are used.

3. General-purpose artificial intelligence systems and models must be developed and applied in a manner that respects human autonomy and decision-making power, prevention of harm, knowability, transparency, explainability, and the principles referred to in paragraph 1, ensuring human oversight and intervention.

4. The use of artificial intelligence systems must not undermine the democratic functioning of institutional and political life and the exercise of powers and functions of territorial institutions on the basis of the principles of autonomy and subsidiarity, nor compromise the freedom of democratic debate from unlawful interference, by whomsoever caused, safeguarding the interests of the State's sovereignty as well as the fundamental rights of every citizen recognised by the national and European legal systems.

5. This law does not produce new obligations beyond those laid down by Regulation (EU) 2024/1689 for general-purpose artificial intelligence systems and models.

6. In order to ensure the respect of the rights and principles referred to in this article, cybersecurity must be guaranteed as an essential precondition throughout the entire life cycle of general-purpose artificial intelligence systems and models, in accordance with a proportionate and risk-based approach, as well as the adoption of specific security controls, including with a view to ensuring resilience against attempts to alter their use, intended behaviour, performance or security settings.

7. This law guarantees to persons with disabilities full access to artificial intelligence systems and to the related functionalities or extensions, on a basis of equality and without any form of discrimination or prejudice, in accordance with the United Nations Convention on the Rights of Persons with Disabilities, done at New York on 13 December 2006, ratified and given effect in Italy by Law of 3 March 2009, No. 18.

Art. 4 — Principles on information and confidentiality of personal data¶

1. The use of artificial intelligence systems in information shall take place without prejudice to the freedom and pluralism of the means of communication, freedom of expression, and the objectivity, completeness, impartiality and fairness of information.

2. The use of artificial intelligence systems shall ensure the lawful, fair and transparent processing of personal data and compatibility with the purposes for which they were collected, in accordance with European Union law on personal data and the protection of confidentiality.

3. Information and communications relating to the processing of data connected to the use of artificial intelligence systems shall be provided in clear and simple language, so as to ensure that the user is aware of the related risks and has the right to object to the authorised processing of personal data.

4. Access to artificial intelligence technologies by minors under the age of fourteen, as well as the consequent processing of personal data, shall require the consent of those who exercise parental responsibility, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and with the personal data protection code, referred to in Legislative Decree of 30 June 2003, No. 196. Minors under the age of eighteen who have reached the age of fourteen may give their own consent for the processing of personal data connected to the use of artificial intelligence systems, provided that the information and communications referred to in paragraph 3 are easily accessible and understandable.

Art. 5 — Principles on economic development¶

1. The State and other public authorities shall:

   a) promote the development and use of artificial intelligence as a tool to improve human-machine interaction, including through the application of robotics, in productive sectors, productivity in all value chains and organisational functions, as well as a useful tool for starting up new economic activities and supporting the national productive fabric, mainly composed of microenterprises and small and medium-sized enterprises, in order to enhance the competitiveness of the national economic system and the technological sovereignty of the Nation within the framework of the European strategy;

   b) foster the creation of an innovative, fair, open and competitive artificial intelligence market and innovative ecosystems;

   c) facilitate the availability of and access to high-quality data for enterprises that develop or use artificial intelligence systems and for the scientific and innovation community;

   d) direct the e-procurement platforms of the public administrations referred to in Article 1, paragraph 2, of Legislative Decree of 30 March 2001, No. 165, so that, in choosing suppliers of artificial intelligence systems and models, preference may be given to those solutions which ensure the localisation and processing of strategic data in data centres located in the national territory, whose disaster recovery and business continuity procedures are implemented in data centres located in the national territory, as well as models capable of ensuring high standards in terms of security and transparency in the methods of training and developing applications based on generative artificial intelligence, in compliance with competition law and the principles of non-discrimination and proportionality;

   e) foster collaborative research between enterprises, research bodies and technology transfer centres in the field of artificial intelligence, in order to encourage the economic and commercial valorisation of research results.

Art. 6 — Provisions on national security and defence¶

1. The activities referred to in Article 3, paragraph 1, carried out for purposes of national security in the manner and for the purposes set out in Law of 3 August 2007, No. 124, by the bodies referred to in Articles 4, 6 and 7 of the same law, those of cybersecurity and resilience referred to in Article 1, paragraph 1, letters a) and b), of Decree-Law of 14 June 2021, No. 82, converted, with amendments, by Law of 4 August 2021, No. 109, carried out by the National Cybersecurity Agency for the protection of national security in cyberspace, those carried out for national defence purposes by the Armed Forces, as well as those carried out by the Police Forces aimed at preventing and countering, for purposes of national security, the offences referred to in Article 9, paragraph 1, letters b) and b-ter), of Law of 16 March 2006, No. 146, are excluded from the scope of application of this law. The same activities shall in any case be carried out in compliance with the fundamental rights and freedoms provided for by the Constitution and with the provisions of Article 3, paragraph 4, of this law.

2. The development of artificial intelligence systems and models shall take place in compliance with the conditions and purposes referred to in Article 3, paragraph 2. The provisions of Article 58, paragraphs 1 and 3, of the personal data protection code, referred to in Legislative Decree of 30 June 2003, No. 196, shall apply to the processing of personal data through the use of artificial intelligence systems carried out by the bodies referred to in Articles 4, 6 and 7 of Law No. 124 of 2007. The provisions of Article 13 of the aforementioned Decree-Law No. 82 of 2021 shall apply to the processing of personal data through the use of artificial intelligence systems carried out by the National Cybersecurity Agency.

3. By regulation adopted pursuant to Article 43 of Law No. 124 of 2007, the modalities for the application of the principles and provisions referred to in this article shall be defined for the activities referred to in Article 3, paragraph 1, of this law carried out by the bodies referred to in Articles 4, 6 and 7 of Law No. 124 of 2007, as well as for the same activities relating to artificial intelligence systems, functional to the activity of the bodies themselves and for the same activities carried out by other public bodies and by private bodies exclusively for purposes of national security. Similarly, for the National Cybersecurity Agency, the matter shall be regulated by means of a regulation adopted in accordance with the modalities set out in Article 11, paragraph 4, of the aforementioned Decree-Law No. 82 of 2021.

Chapter II — Sectoral provisions¶

Art. 7 — Use of artificial intelligence in healthcare and disability¶

1. The use of artificial intelligence systems contributes to the improvement of the healthcare system, to the prevention, diagnosis and treatment of diseases, in compliance with the rights, freedoms and interests of the person, including in the field of personal data protection.

2. The introduction of artificial intelligence systems into the healthcare system may not select and condition access to healthcare services on discriminatory criteria.

3. The data subject has the right to be informed about the use of artificial intelligence technologies.

4. This law promotes the development, study and dissemination of artificial intelligence systems that improve the living conditions of persons with disabilities, facilitate accessibility, independent mobility and autonomy, security and the social inclusion processes of those persons, including for the purposes of drawing up the life project referred to in Article 2, paragraph 1, letter n), of Legislative Decree of 3 May 2024, No. 62.

5. Artificial intelligence systems in the healthcare field constitute support in the processes of prevention, diagnosis, treatment and therapeutic choice, leaving the decision unaffected, which always remains with those exercising the medical profession.

6. Artificial intelligence systems used in the healthcare field and the related data employed must be reliable, periodically verified and updated in order to minimise the risk of errors and improve patient safety.

Art. 8 — Scientific research and experimentation in the realisation of artificial intelligence systems in the healthcare field¶

1. The processing of data, including personal data, carried out by public and private not-for-profit bodies, by the Scientific Institutes for Research, Hospitalisation and Healthcare (IRCCS), referred to in Legislative Decree of 16 October 2003, No. 288, as well as by private bodies operating in the healthcare sector within research projects in which public and private not-for-profit bodies or IRCCS participate, for research and scientific experimentation in the realisation of artificial intelligence systems for purposes of prevention, diagnosis and treatment of diseases, development of medicines, therapies and rehabilitation technologies, realisation of medical devices, including prostheses and interfaces between the body and instruments supporting the patient's conditions, public health, personal safety, health and healthcare safety, as well as the study of physiology, biomechanics and human biology including in non-healthcare contexts, insofar as necessary for the purposes of the realisation and use of databases and foundation models, are declared of substantial public interest in implementation of Articles 32 and 33 of the Constitution and in compliance with Article 9(2)(g) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

2. For the same purposes, without prejudice to the obligation to provide information to the data subject — which may also be fulfilled by means of a general information notice made available on the website of the data controller and without further consent of the data subject where initially required by law — the secondary use of personal data deprived of direct identifying elements, including those belonging to the categories referred to in Article 9 of Regulation (EU) 2016/679, by the bodies referred to in paragraph 1, is always authorised, except in cases where knowledge of the data subjects' identity is unavoidable or necessary for the protection of their health.

3. In the areas referred to in paragraph 1 or for the purposes referred to in Article 2-sexies, paragraph 2, letter v), of the personal data protection code, referred to in Legislative Decree of 30 June 2003, No. 196, processing for the purposes of anonymisation, pseudonymisation or synthesis of personal data, including those belonging to the special categories referred to in Article 9, paragraph 1, of Regulation (EU) 2016/679, is always permitted, subject to information being provided to the data subject pursuant to Article 13 of Regulation (EU) 2016/679. The same processing aimed at the study and research on athletic gestures, movements and performance in sporting activity in all its forms, is also permitted, in compliance with the general principles of this law and the rights of economic exploitation of data relating to competitive activities pertaining to those who organise them.

4. The National Agency for Regional Health Services (AGENAS), after consulting the Italian Data Protection Authority, taking into account international standards and the state of the art and technology, may establish and update guidelines for the procedures of anonymisation of personal data referred to in paragraph 3 and for the creation of synthetic data, including by categories of data and processing purposes.

5. The data processing referred to in paragraphs 1 and 2 must be communicated to the Italian Data Protection Authority with the indication of all the information provided for by Articles 24, 25, 32 and 35 of Regulation (EU) 2016/679, as well as with the express indication, where present, of the persons identified pursuant to Article 28 of the same Regulation (EU) 2016/679, and may be initiated after thirty days from such communication if they have not been the subject of a blocking measure adopted by the Italian Data Protection Authority.

6. The inspection, prohibitive and sanctioning powers of the Italian Data Protection Authority remain unaffected.

Art. 9 — Provisions on the processing of personal data¶

1. The processing of personal data, including special categories as defined by Article 9 of Regulation (EU) 2016/679, with the maximum simplified modalities permitted by said Regulation for purposes of research and experimentation including through artificial intelligence and machine learning systems, including the establishment and use of special experimentation spaces for research purposes, also through secondary use of personal data, shall be regulated by decree of the Minister of Health to be issued within one hundred and twenty days from the date of entry into force of this law, after consulting the Italian Data Protection Authority, research bodies, healthcare facilities, as well as the authorities and operators of the sector.

Art. 10 — Provisions on the electronic health record, surveillance systems in the healthcare sector and governance of digital health¶

1. The following article is inserted after Article 12 of Decree-Law of 18 October 2012, No. 179, converted, with amendments, by Law of 17 December 2012, No. 221:

«Art. 12-bis (Artificial intelligence in the healthcare sector). - 1. In order to ensure advanced tools and technologies in the healthcare sector, by one or more decrees of the Minister of Health, in agreement with the Political Authority delegated for technological innovation and digital transition and with the Authority delegated for the security of the Republic and for cybersecurity, and after consulting the Standing Conference for relations between the State, the Regions and the Autonomous Provinces of Trento and Bolzano, the artificial intelligence solutions having a function of support to the purposes referred to in Article 12, paragraph 2, shall be regulated. With the decrees referred to in the first sentence, the entities which, in the exercise of their functions, access the artificial intelligence solutions according to the modalities defined therein shall be identified.

1. To support care purposes, and in particular for territorial assistance, an artificial intelligence platform shall be established. The design, realisation, commissioning and ownership of the platform referred to in the first sentence are attributed to AGENAS in its capacity as National Agency for Digital Health. The platform referred to in the first sentence provides support services:

a) to healthcare professionals for the care of the assisted population with non-binding suggestions;

b) to physicians in daily clinical practice with non-binding suggestions;

c) to users for access to the healthcare services of the Community Houses.

1. After agreement at the Standing Conference for relations between the State, the Regions and the Autonomous Provinces of Trento and Bolzano, AGENAS, by its own measure, specifies the support services referred to in paragraph 2.

2. The platform referred to in paragraph 2 is fed with the data strictly necessary for the provision of the services referred to in the same paragraph 2, transmitted by the relevant data controllers. AGENAS is the data controller of the data collected and generated within the platform.

3. After consulting the Ministry of Health, the Italian Data Protection Authority and the National Cybersecurity Agency, AGENAS, by its own measure, having assessed the impact of the processing, specifies the types of data processed and the operations performed within the platform, as well as the technical and organisational measures to ensure a level of security adequate to the risk and to protect the fundamental rights and interests of the data subject, in line with the provisions of Regulation (EU) 2016/679».

4. From the implementation of this article, no new or higher charges shall arise for public finances. AGENAS shall provide for the activities referred to in this article with the human, instrumental and financial resources available under current legislation.

Art. 11 — Provisions on the use of artificial intelligence in the field of labour¶

1. Artificial intelligence is used to improve working conditions, protect the psychophysical integrity of workers, increase the quality of work performance and the productivity of persons in conformity with European Union law.

2. The use of artificial intelligence in the workplace must be safe, reliable, transparent and may not be carried out in conflict with human dignity nor violate the confidentiality of personal data. The employer or the principal is required to inform the worker of the use of artificial intelligence in the cases and in the manner referred to in Article 1-bis of Legislative Decree of 26 May 1997, No. 152.

3. Artificial intelligence in the organisation and management of the employment relationship guarantees compliance with the inviolable rights of the worker without discrimination on the basis of sex, age, ethnic origin, religious belief, sexual orientation, political opinions and personal, social and economic conditions, in conformity with European Union law.

Art. 12 — Observatory on the adoption of artificial intelligence systems in the world of work¶

1. In order to maximise the benefits and contain the risks arising from the use of artificial intelligence systems in the workplace, the Observatory on the adoption of artificial intelligence systems in the world of work is established at the Ministry of Labour and Social Policies, with the task of defining a strategy on the use of artificial intelligence in the workplace, monitoring the impact on the labour market and identifying the work sectors most affected by the advent of artificial intelligence. The Observatory promotes the training of workers and employers in the field of artificial intelligence.

2. The Observatory shall be chaired by the Minister of Labour and Social Policies or by their representative. By decree of the Minister of Labour and Social Policies, to be adopted within ninety days from the date of entry into force of this law, the components, modalities of operation, as well as the further tasks and functions of the Observatory itself shall be established. No remuneration, attendance fees, expense reimbursements or any other emoluments however denominated shall be due to the components of the Observatory.

3. The establishment and operation of the Observatory shall be provided for within the human, instrumental and financial resources available under current legislation.

Art. 13 — Provisions on intellectual professions¶

1. The use of artificial intelligence systems in intellectual professions is aimed solely at the exercise of activities ancillary and supportive to professional activity, with the prevalence of the intellectual work that is the object of the professional service.

2. In order to ensure the fiduciary relationship between professional and client, information relating to the artificial intelligence systems used by the professional shall be communicated to the recipient of the intellectual service in clear, simple and exhaustive language.

Art. 14 — Use of artificial intelligence in the public administration¶

1. Public administrations shall use artificial intelligence for the purpose of increasing the efficiency of their activities, reducing the time for the conclusion of proceedings and increasing the quality and quantity of services provided to citizens and enterprises, ensuring to those concerned the knowability of its functioning and the traceability of its use.

2. The use of artificial intelligence shall take place in an instrumental and supportive function to the decisional activity, in compliance with the autonomy and decision-making power of the person, who remains the sole responsible for the measures and proceedings in which artificial intelligence has been used.

3. Public administrations shall adopt technical, organisational and training measures aimed at ensuring a responsible use of artificial intelligence and at developing the cross-cutting skills of users.

4. Public administrations shall provide for the obligations laid down in this article with the human, instrumental and financial resources available under current legislation.

Art. 15 — Use of artificial intelligence systems in judicial activity¶

1. In cases of use of artificial intelligence systems in judicial activity, every decision on the interpretation and application of the law, on the assessment of the facts and the evidence and on the adoption of measures shall always be reserved to the magistrate.

2. The Ministry of Justice regulates the uses of artificial intelligence systems for the organisation of services relating to justice, for the simplification of judicial work and for ancillary administrative activities.

3. Until the full implementation of Regulation (EU) 2024/1689, the experimentation and use of artificial intelligence systems in ordinary judicial offices are authorised by the Ministry of Justice, after consulting the National Authorities referred to in Article 20.

4. The Minister of Justice, in drafting the programmatic guidelines on the training of magistrates referred to in Article 12, paragraph 1, letter a), of Legislative Decree of 30 January 2006, No. 26, promotes educational activities on the topic of artificial intelligence and on the uses of artificial intelligence systems in judicial activity, aimed at basic and advanced digital training, the acquisition and sharing of digital skills, as well as awareness of benefits and risks, including within the regulatory framework referred to in paragraphs 2 and 3 of this article. For the same purposes referred to in the first sentence, the Minister also takes care of the training of administrative staff.

Art. 16 — Delegation to the Government on data, algorithms and mathematical methods for the training of artificial intelligence systems¶

1. The Government is delegated to adopt, within twelve months from the date of entry into force of this law, one or more legislative decrees to define an organic discipline relating to the use of data, algorithms and mathematical methods for the training of artificial intelligence systems without further obligations, in the areas subject to Regulation (EU) 2024/1689, beyond what is already established therein.

2. The drafts of the legislative decrees referred to in paragraph 1 shall be adopted on the proposal of the President of the Council of Ministers and the Minister of Justice and shall be subsequently transmitted to the Chambers for the opinion of the competent parliamentary Commissions. After sixty days from the date of transmission, the decrees may be issued even in the absence of opinions. Should this term expire within thirty days prior to the expiry of the term provided for the exercise of the delegation, or thereafter, the latter shall be extended by sixty days.

3. In exercising the delegation referred to in paragraph 1, the Government shall comply with the following principles and guiding criteria:

   a) identify cases for which it appears necessary to set out the legal regime of the use of data, algorithms and mathematical methods for the training of artificial intelligence systems, as well as the rights and obligations incumbent on the party intending to proceed with such use;

   b) provide for instruments of protection, of a compensatory or injunctive nature, and identify a sanctioning apparatus in the case of violation of the provisions introduced pursuant to letter a);

   c) attribute to the sections specialised in business matters the disputes relating to the discipline introduced pursuant to letters a) and b).

Art. 17 — Amendment to the Code of Civil Procedure¶

1. In Article 9, second paragraph, of the Code of Civil Procedure, after the words: «forced execution» the following are inserted: «, for cases concerning the operation of an artificial intelligence system».

Art. 18 — Use of artificial intelligence for the strengthening of national cybersecurity¶

1. In Article 7, paragraph 1, of Decree-Law of 14 June 2021, No. 82, converted, with amendments, by Law of 4 August 2021, No. 109, after letter m-ter) the following is inserted:

«m-quater) promotes and develops every initiative, including through the conclusion of cooperation agreements with private parties, however denominated, as well as public-private partnerships, aimed at valorising artificial intelligence as a resource for the strengthening of national cybersecurity».

Chapter III — National strategy, national authorities and promotional actions¶

Art. 19 — National strategy for artificial intelligence and Coordination Committee for guidance activities on bodies, organisations and foundations operating in the field of digital innovation and artificial intelligence¶

1. The national strategy for artificial intelligence is prepared and updated by the structure of the Presidency of the Council of Ministers competent for technological innovation and digital transition, in agreement with the National Authorities for Artificial Intelligence referred to in Article 20, after consulting the Minister of Enterprises and Made in Italy for industrial policy and incentive profiles, the Minister of University and Research for profiles relating to higher education and research, and the Minister of Defence for aspects relating to artificial intelligence systems usable for dual purposes, and is approved at least biennially by the Inter-ministerial Committee for Digital Transition (CITD) referred to in Article 8, paragraph 2, of Decree-Law of 1 March 2021, No. 22, converted, with amendments, by Law of 22 April 2021, No. 55.

2. The strategy referred to in paragraph 1 fosters cooperation between public administrations and private entities in relation to the development and adoption of artificial intelligence systems, coordinates the activity of the public administration on the subject, promotes research and the dissemination of knowledge in the field of artificial intelligence, and directs the measures and incentives aimed at the entrepreneurial and industrial development of artificial intelligence.

3. The strategy referred to in paragraph 1 takes into account the principles of international humanitarian law, with a view to the development and promotion of artificial intelligence systems that protect human rights.

4. The structure of the Presidency of the Council of Ministers competent for technological innovation and digital transition shall provide for the coordination and monitoring of the implementation of the strategy referred to in paragraph 1, making use of the Agency for Digital Italy, in agreement, for matters within their competence, with the National Cybersecurity Agency and after consulting the Bank of Italy, the National Commission for Companies and the Stock Exchange (CONSOB) and the Institute for the Supervision of Insurance (IVASS) in their capacity as market supervisory authorities. The results of the monitoring shall be transmitted annually to the Chambers.

5. In Article 8, paragraph 3, first sentence, of Decree-Law of 1 March 2021, No. 22, converted, with amendments, by Law of 22 April 2021, No. 55, after the words: «Enterprises and Made in Italy» the following are inserted: «, of University and Research» and the following words are added at the end: «as well as by the Authority delegated for the security of the Republic and for cybersecurity, where appointed».

6. The Coordination Committee for guidance activities on bodies, organisations and foundations operating in the field of digital innovation and artificial intelligence is established, chaired by the President of the Council of Ministers or by the delegated Political Authority and composed of the Minister of Economy and Finance, the Minister of Enterprises and Made in Italy, ((the Minister of Labour)) and Social Policies, the Minister of University and Research, the Minister of Health, the Minister for Public Administration, the Authority delegated for the security of the Republic and for cybersecurity and the Political Authority delegated for technological innovation and digital transition, or by their delegates. Representatives of the National Authorities referred to in Article 20 may be invited to the meetings of the Committee, as well as other parties interested in the topics discussed. No remuneration, attendance fees, expense reimbursements or any other emoluments however denominated shall be due for participation in the Committee.

7. The Committee referred to in paragraph 6, in order to ensure the best implementation of the strategy referred to in paragraph 1, performs functions of coordination of the action of guidance and promotion of the activities of research, experimentation, development, adoption and application of artificial intelligence systems and models carried out by national public or private bodies and organisations subject to supervision or recipients of public funding, including public or private foundations supervised or financed by the State, which operate in the field of digital innovation and artificial intelligence. The bodies, organisations and foundations referred to in the previous sentence are identified by the same Committee. The Committee also performs functions of coordination of guidance activities on training policies in digital and artificial intelligence skills carried out by the same bodies.

8. From the establishment and operation of the Committee referred to in paragraph 6, no new or higher charges shall arise for public finances. The competent administrations shall provide for them within the framework of the human, financial and instrumental resources available under current legislation.

Art. 20 — National authorities for artificial intelligence¶

1. In order to ensure the application and implementation of national and European Union legislation on artificial intelligence, the Agency for Digital Italy (AgID) and the National Cybersecurity Agency (ACN) are designated as National Authorities for Artificial Intelligence, without prejudice to the attribution to the Bank of Italy, CONSOB and IVASS of the role of market supervisory authority pursuant to and in accordance with Article 74(6) of Regulation (EU) 2024/1689. Consequently, in compliance with the principles set out in this law and without prejudice to the functions already attributed to them respectively:

   a) AgID is responsible for promoting innovation and the development of artificial intelligence, without prejudice to letter b). AgID also provides for the procedures and exercises the functions and tasks regarding notification, assessment, accreditation and monitoring of the entities tasked with verifying the conformity of artificial intelligence systems, in accordance with national and European Union legislation;

   b) ACN, also for the purpose of ensuring the protection of cybersecurity, as defined by Article 1, paragraph 1, of Decree-Law of 14 June 2021, No. 82, converted, with amendments, by Law of 4 August 2021, No. 109, is responsible for the supervision, including inspection and sanctioning activities, of artificial intelligence systems, in accordance with national and European Union legislation. ACN is also responsible for the promotion and development of artificial intelligence with regard to cybersecurity profiles;

   c) AgID and ACN, each within their respective competences, ensure the establishment and joint management of experimentation spaces aimed at the realisation of artificial intelligence systems compliant with national and European Union legislation, after consulting the Ministry of Defence for aspects relating to artificial intelligence systems usable for dual purposes and the Ministry of Justice for models and artificial intelligence systems applicable to judicial activity. The provisions of Article 36, paragraphs from 2-bis to 2-novies, of Decree-Law of 30 April 2019, No. 34, converted, with amendments, by Law of 28 June 2019, No. 58, remain unaffected, as regards the experimentation of artificial intelligence systems intended to be placed on the market, put into service or used by financial institutions.

2. Without prejudice to the attribution to the Bank of Italy, CONSOB and IVASS of the role of market supervisory authority pursuant to and in accordance with Article 74(6) of Regulation (EU) 2024/1689, AgID is designated as the notifying authority pursuant to Article 70 of the same Regulation, and ACN is designated as the market supervisory authority and single contact point with the European Union institutions pursuant to the same Article 70.

3. The National Authorities for Artificial Intelligence referred to in paragraph 1 shall ensure coordination and cooperation with other public administrations and independent authorities, as well as any appropriate liaison among themselves for the exercise of the functions referred to in this article. To the latter end, a Coordination Committee is established at the Presidency of the Council of Ministers, composed of the directors-general of the two aforementioned Agencies and the head of the Department for Digital Transformation of the Presidency of the Council of Ministers itself. Top-level representatives of the Bank of Italy, CONSOB and IVASS shall participate in this Committee when matters of their respective competence are dealt with. No remuneration, attendance fees, expense reimbursements or any other emoluments however denominated shall be due to the components of the Committee.

4. The competences, tasks and powers of the Italian Data Protection Authority and the Authority for Communications Guarantees, in its capacity as Coordinator of Digital Services pursuant to Article 15 of Decree-Law of 15 September 2023, No. 123, converted, with amendments, by Law of 13 November 2023, No. 159, remain unaffected.

5. In Article 8, paragraph 2, first sentence, of Decree-Law of 14 June 2021, No. 82, converted, with amendments, by Law of 4 August 2021, No. 109, after the words: «Presidency of the Council of Ministers» the following are added: «as well as the Agency for Digital Italy (AgID)».

Art. 21 — Experimental application of artificial intelligence to services provided by the Ministry of Foreign Affairs and International Cooperation¶

1. Expenditure of EUR 300,000 per year is authorised for each of the years 2025 and 2026 for the realisation of experimental projects aimed at the application of artificial intelligence to services provided by the Ministry of Foreign Affairs and International Cooperation to citizens and enterprises.

2. The charges arising from paragraph 1, amounting to EUR 300,000 per year for each of the years 2025 and 2026, shall be covered by a corresponding reduction in the allocation of the special current account fund entered, for the purposes of the 2025-2027 triennial budget, within the framework of the «Reserve and special funds» programme of the «Funds to be allocated» mission of the budget statement of the Ministry of Economy and Finance for the year 2025, partially using for that purpose the allocation relating to the Ministry of Foreign Affairs and International Cooperation.

Art. 22 — Support measures for young people and sport¶

1. In Article 5, paragraph 1, letter d), of Legislative Decree of 27 December 2023, No. 209, the following words are added at the end: «, or have carried out research, including applied research, in the field of artificial intelligence technologies».

2. In the personalised teaching plan (PDP) adopted by the upper secondary school institution within its autonomy, for high-cognitive-potential students, activities aimed at the acquisition of further skills through learning experiences at higher education institutions may be included, in derogation of the provisions of Article 6 of the regulation referred to in the decree of the Minister of Education, University and Research of 22 October 2004, No. 270, regarding the prior possession of the qualification, in coherence with the exit profile of the field of study. The training credits acquired in the activities referred to in the first sentence are evaluated in the framework of higher education courses undertaken after obtaining the qualification referred to in the same first sentence.

3. The State fosters accessibility to artificial intelligence systems for the improvement of psychophysical well-being through sporting activity, including with a view to the development of innovative solutions aimed at greater inclusion in the sporting field of persons with disabilities. In compliance with the general principles of this law, artificial intelligence systems may also be used for the organisation of sporting activities.

Art. 23 — Investments in the sectors of artificial intelligence, cybersecurity and quantum computing¶

1. In line with the national strategy referred to in Article 19, in order to support the development of enterprises operating in the sectors of artificial intelligence and cybersecurity and the technologies enabling them, including quantum technologies and telecommunications systems, also through the creation of technology transfer poles and acceleration programmes operating in the same sectors, making use of the operations of the asset management company referred to in Article 1, paragraph 116, of Law of 30 December 2018, No. 145, the investment, in the form of equity and quasi-equity, directly or indirectly, in the risk capital of the following entities is authorised, up to a total amount of one billion euros:

   a) small and medium-sized enterprises (SMEs) with high development potential and innovative, having operating headquarters in Italy, that operate in the sectors of artificial intelligence and cybersecurity and the technologies enabling them, including quantum technologies and telecommunications systems, with particular reference to 5G and its evolutions, to mobile edge computing, to open architectures based on software solutions, to Web 3, to signal processing, also in relation to security and integrity profiles of electronic communications networks, and that are in the phase of experimentation (seed financing), of constitution (start up financing), of activity start-up (early-stage financing) or of product development (expansion, scale up financing);

   b) enterprises, having operating headquarters in Italy, also different from those referred to in letter a), operating in the sectors and technologies referred to in the same letter a), with high development potential and highly innovative, in order to promote their development as national technological champions.

2. The investments referred to in paragraph 1 are made by using the resources of the Venture Capital Support Fund referred to in Article 1, paragraph 209, of Law of 30 December 2018, No. 145, in accordance with the provisions of the decree of the Minister of Economic Development of 27 June 2019, published in the Gazzetta Ufficiale No. 176 of 29 July 2019, both through the subscription, directly or indirectly, of units or shares of one or more venture capital funds specifically established and managed by the asset management company referred to in paragraph 1, and through co-investment by other venture capital funds established and managed by the same asset management company. The implementing regulations referred to in the aforementioned decree of the Minister of Economic Development of 27 June 2019 shall be updated to the provisions of this article, with adjustments for investments in the enterprises referred to in paragraph 1, letter b), that do not fall within the definition of SME.

3. In addition to the Ministry of Enterprises and Made in Italy as investor, representatives of the structure of the Presidency of the Council of Ministers competent for technological innovation and digital transition and of the National Cybersecurity Agency, by virtue of their respective competences, shall participate in the governing bodies of the venture capital funds referred to in this article, in any case without compensation or allowances.

Art. 24 — Delegations to the Government on artificial intelligence¶

1. The Government is delegated to adopt, within twelve months from the date of entry into force of this law, in accordance with the procedures set out in Article 31 of Law of 24 December 2012, No. 234, having obtained the opinions of the competent Parliamentary Commissions, of the Unified Conference referred to in Article 8 of Legislative Decree of 28 August 1997, No. 281, and of the Italian Data Protection Authority, one or more legislative decrees for the adaptation of national legislation to Regulation (EU) 2024/1689.

2. In exercising the delegation referred to in paragraph 1, the Government shall comply, in addition to the general principles and guiding criteria referred to in Article 32 of Law of 24 December 2012, No. 234, with the following specific principles and guiding criteria:

   a) attribute to the authorities referred to in Article 20, within the limits of the designation made pursuant to the same Article 20, all the supervisory, inspection and sanctioning powers laid down in Regulation (EU) 2024/1689 for the verification of compliance with the provisions of the regulation itself and with the European Union legislation implementing the same regulation;

   b) make to the legislation in force, including that on banking, financial, insurance and payment services, the modifications, integrations and repeals necessary for the correct and integral adaptation to Regulation (EU) 2024/1689;

   c) make recourse to secondary regulation adopted by the authorities identified pursuant to Article 20, where appropriate and in compliance with the competences attributed to them, within the framework and for the purposes specifically provided for by Regulation (EU) 2024/1689 and by the European Union legislation implementing the same regulation;

   d) attribute to the authorities referred to in Article 20 the power to impose the sanctions and other administrative measures laid down by Article 99 of Regulation (EU) 2024/1689 for the violation of the provisions of the regulation itself and of the implementing acts, in compliance with the editorial limits and the procedures laid down by the same Article 99 and by the national provisions governing the imposition of sanctions and the application of the other administrative measures by the aforesaid authorities;

   e) provision of paths for literacy and training in the use of artificial intelligence systems;

   f) provision, by the professional associations and trade categories most representative, as well as by the aggregative forms of the associations referred to in Article 3 of Law of 14 January 2013, No. 4, of paths for literacy and training, for professionals and for operators of the specific sector, in the use of artificial intelligence systems; provision of the possibility of recognising fair compensation modulated on the basis of the responsibilities and risks connected to the use of artificial intelligence systems;

   g) strengthening, within school curricula, of the development of scientific, technological, engineering and mathematical skills linked to STEM disciplines, as well as artistic ones, in order to promote the choice by female and male students, also through targeted personalised orientation activities, of higher education courses relating to the aforementioned disciplines;

   h) provision of a specific discipline for the use of artificial intelligence systems for police activity;

   i) provision, in university courses and in higher art, music and dance institutions (AFAM), as well as in higher technological education paths offered by higher technological institutes (ITS Academy), consistently with the respective cultural and professional profiles, of training activities for the technical understanding and the conscious use, including from a legal point of view, of technologies, with reference also to artificial intelligence systems as defined by European law, as well as for the correct interpretation of the production of such systems in terms of forecasts, contents, recommendations or decisions;

   l) valorisation of research and technology transfer activities in the field of artificial intelligence carried out by universities, AFAM institutions, ITS Academy and public research bodies, by means of provisions aimed at pursuing the following objectives:

   1) facilitating the involvement of the university and research system in the promotion, realisation and use of regulatory experimentation spaces in collaboration with the productive world;

   2) incentivising support activities and simplifying the instruments of cooperation between the university and research system and the ITS Academy and the National Authorities referred to in Article 20;

   m) definition of the supervisory powers of the market supervisory authority that confer on the authority the powers to require providers and prospective providers to transmit information, to carry out remote or on-site inspections, also without notice, and to conduct controls on the conduct of tests under real conditions and on the related high-risk artificial intelligence systems;

   n) adaptation of the sanctioning framework, also in derogation of the criteria and limits provided for by Article 32, paragraph 1, letter d), of Law of 24 December 2012, No. 234, and by Law of 24 November 1981, No. 689, including the definition of the enforcement measures applicable pursuant to Regulation (EU) 2024/1689, as well as of the procedure applicable for the imposition of sanctions or the application of enforcement measures, also in coherence with what is provided for by Article 17, paragraph 4-quater, of Decree-Law of 14 June 2021, No. 82, converted, with amendments, by Law of 4 August 2021, No. 109.

3. The Government is also delegated to adopt, within twelve months from the date of entry into force of this law, one or more legislative decrees to adapt and specify the discipline of cases of unlawful realisation and use of artificial intelligence systems.

4. The drafts of the legislative decrees referred to in paragraph 3 shall be adopted on the proposal of the President of the Council of Ministers and the Minister of Justice, in agreement with the Minister of the Interior, and shall be subsequently transmitted to the Chambers for the opinion of the competent Parliamentary Commissions. After sixty days from the date of transmission, the decrees may be issued even in the absence of opinions. Should this term expire within thirty days prior to the expiry of the term provided for the exercise of the delegation, or thereafter, the latter shall be extended by sixty days.

5. In exercising the delegation referred to in paragraph 3, the Government shall comply with the following principles and guiding criteria:

   a) provision of instruments, including precautionary ones, aimed at inhibiting the dissemination and removing contents unlawfully generated also through artificial intelligence systems, supported by a system of effective, proportionate and dissuasive sanctions;

   b) introduction of autonomous offence types, punishable as wilful or negligent, focused on the failure to adopt or to update security measures for the production, placing on the market and professional use of artificial intelligence systems, when such omissions give rise to concrete danger for life or for public or individual safety, or for the security of the State;

   c) specification of the criteria for the attribution of criminal liability of natural persons and administrative liability of entities for offences inherent to artificial intelligence systems, taking into account the actual level of control of the aforesaid systems by the agent;

   d) in cases of civil liability, provision of instruments for the protection of the injured party, including through a specific regulation of the criteria for the allocation of the burden of proof, taking into account the classification of artificial intelligence systems and of the related obligations as identified by Regulation (EU) 2024/1689;

   e) regulation of the use of artificial intelligence systems in preliminary investigations, in compliance with the guarantees pertaining to the right of defence and to the personal data of third parties, as well as the principles of proportionality, non-discrimination and transparency;

   f) modification, for the purposes of coordination and rationalisation of the system, of the substantive and procedural legislation in force, in compliance with the principles and criteria set out in letters a), b), c), d) and e).

6. From the implementation of this article, no new or higher charges shall arise for public finances. The competent administrations shall provide for the related obligations with the human, instrumental and financial resources available under current legislation.

Chapter IV — Provisions for the protection of users and on copyright¶

Art. 25 — Protection of copyright on works generated with the assistance of artificial intelligence¶

1. The following amendments are made to Law of 22 April 1941, No. 633:

   a) in Article 1, first paragraph, after the words: «works of the intellect» the word: «human» is inserted, and after the words: «form of expression» the following are added: «, also where created with the assistance of artificial intelligence tools, provided that they constitute the result of the intellectual work of the author»;

   b) the following article is inserted after Article 70-sexies: «Art. 70-septies. - 1. Without prejudice to the provisions of the Berne Convention for the Protection of Literary and Artistic Works, ratified and given effect pursuant to Law of 20 June 1978, No. 399, the reproductions and extractions from works or other materials contained in networks or databases to which lawful access is had, for the purpose of text and data mining through artificial intelligence models and systems, including generative ones, are permitted in accordance with the provisions of Articles 70-ter and 70-quater».

Chapter V — Criminal provisions¶

Art. 26 — Amendments to the criminal code and to further criminal provisions¶

1. The following amendments are made to the criminal code: (( a) in Article 61, after number 11-decies) the following is added: "11-undecies) )): the having committed the act through the use of artificial intelligence systems, when the same, by their nature or by their methods of use, have constituted insidious means, or when their use has in any case obstructed public or private defence, or aggravated the consequences of the offence»; b) in Article 294, the following paragraph is added at the end: «The penalty is imprisonment from two to six years if the deception is carried out through the use of artificial intelligence systems»; c) the following article is inserted after Article 612-ter: «Art. 612-quater (Unlawful dissemination of contents generated or altered with artificial intelligence systems). - Whoever causes unjust harm to a person, by transferring, publishing or otherwise disseminating, without their consent, falsified or altered images, videos or voices through the use of artificial intelligence systems and capable of inducing deception as to their genuineness, is punished with imprisonment from one to five years. The offence is punishable upon complaint by the offended person. Proceedings are initiated ex officio, however, if the act is connected with another offence for which proceedings must be initiated ex officio, or if it is committed against a person who is incapable due to age or infirmity, or against a public authority because of the functions exercised».

2. The following sentence is added at the end of Article 2637 of the Civil Code: «The penalty is imprisonment from two to seven years if the act is committed through the use of artificial intelligence systems».

3. In Article 171, first paragraph, of Law of 22 April 1941, No. 633, after letter a-bis) the following is inserted: «a-ter) reproduces or extracts text or data from works or other materials available on networks or in databases in violation of Articles 70-ter and 70-quater, also through artificial intelligence systems».

4. In Article 185, paragraph 1, of the consolidated text of provisions on financial intermediation, referred to in Legislative Decree of 24 February 1998, No. 58, the following sentence is added at the end: «The penalty is imprisonment from two to seven years and a fine from twenty-five thousand euros to six million euros if the act is committed through the use of artificial intelligence systems».

Chapter VI — Financial and final provisions¶

Art. 27 — Financial neutrality clause¶

1. From the implementation of this law, with the exclusion of Article 21, no new or higher charges shall arise for public finances. The public administrations concerned shall provide for the fulfilment of the provisions of this law with the human, instrumental and financial resources available under current legislation.

Art. 28 — Final provisions¶

1. In Article 7, paragraph 1, of Decree-Law of 14 June 2021, No. 82, converted, with amendments, by Law of 4 August 2021, No. 109, letter z) is replaced by the following: «z) for the purposes referred to in this article, may conclude cooperation agreements, however denominated, with private parties, establish and participate in public-private partnerships in the national territory, as well as, with prior authorisation of the President of the Council of Ministers, in consortia, foundations or companies with public and private parties, Italian or from countries belonging to the European Union. On the basis of the national interest and with prior authorisation of the President of the Council of Ministers, may also participate in consortia, foundations or companies with public and private parties of NATO countries or of non-European countries with which cooperation or partnership agreements have been signed for the development of artificial intelligence systems».

2. The following amendments are made to Law of 28 June 2024, No. 90:

   a) in Article 1, paragraph 1, the words: «referred to in Article 1, paragraph 3-bis, of Decree-Law of 21 September 2019, No. 105, converted, with amendments, by Law of 18 November 2019, No. 133, as amended by Article 3 of this law» are replaced by the following: «adopted with technical determination of the director-general of the National Cybersecurity Agency»;

   b) in Chapter I, the following article is inserted after Article 15: «Art. 15-bis (Coordination provisions). - 1. Any reference to Legislative Decree of 18 May 2018, No. 65, shall be understood as referring to the corresponding provisions of Legislative Decree of 4 September 2024, No. 138, from the date on which the latter take effect».

This law, bearing the seal of the State, shall be inserted in the Official Collection of the regulatory acts of the Italian Republic. It is the duty of all those concerned to observe it and to ensure its observance as a law of the State.

Done at Rome, 23 September 2025

MATTARELLA

Meloni, President of the Council of Ministers

Nordio, Minister of Justice

Endorsed, the Minister of Justice (Guardasigilli): Nordio