Data privacy is regulated by the GDPR (EU Regulation 2016/679) and the Privacy Code (Legislative Decree 101/2018).