--- title: 'GDPR – The European and Italian public authorities to follow to stay up to date' url: 'https://argobs.com/en/gdpr-le-autorita-pubbliche-europee-ed-italiane-da-monitorare-per-tenersi-aggiornati' markdown: 'https://argobs.com/en/gdpr-le-autorita-pubbliche-europee-ed-italiane-da-monitorare-per-tenersi-aggiornati.md' lang: en date: '2025-06-27' description: 'On 25 May 2018 the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) became applicable, legislation that profoundly changed the approach of companies and public administrations to the management of personal data. Seven years after its entry into force, many organizations claim to…' taxonomy: category: - gdpr --- # GDPR – The European and Italian public authorities to follow to stay up to date 27 June 2025 | GDPR On 25 May 2018 the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) became applicable, legislation that profoundly changed the approach of companies and public administrations to the management of personal data. Seven years after its entry into force, many organizations claim to be fully GDPR compliant and to have consolidated solid privacy governance practices; in reality, levels of compliance remain uneven and critical areas still exist in a number of operating contexts. The regulatory framework also continues to evolve constantly, both in application practice and in the authorities' interpretation of the rules. This short article offers a 2025 list of the main European and Italian authorities to follow, in order to stay up to date on regulatory developments, official interpretations and case-law trends in the field of privacy and personal data processing. **European Data Protection Board (EDPB)** Since 2018, the European Data Protection Board (EDPB) has taken the place of the Article 29 Working Party (WP29). The EDPB is an independent body established directly by the GDPR, tasked with providing guidelines, binding decisions and official guidance on the uniform application of the GDPR across all Member States of the European Union. It is made up of representatives of the national data protection authorities and the European Data Protection Supervisor (EDPS). You can find the updated guidelines at the following link ( [Link](https://www.edpb.europa.eu/edpb_en) ) **European Data Protection Supervisor (EDPS)** The European Data Protection Supervisor is the independent supervisory authority responsible for monitoring compliance with data protection rules by European institutions and bodies. The EDPS also has the role of promoting data protection as a fundamental right, speaking publicly on the most significant issues and engaging in dialogue with the institutions. Updates and news on the EDPS's activity ([Link](https://www.edps.europa.eu/_en)) **European Union Agency for Cybersecurity (ENISA)** On privacy and data security, ENISA (European Union Agency for Cybersecurity) is also playing an increasingly strategic role. Although it is not an authority dedicated exclusively to privacy, this EU agency provides technical and operational support to raise the level of cybersecurity, publishing guidelines and reports on essential aspects that also fall within the management of personal data protection: incident response, IT security, risk analysis and more. The Agency's website is constantly updated ([Link](https://www.enisa.europa.eu/)) **Italian Data Protection Authority (the Garante)** The Italian Data Protection Authority (the Garante) is an Italian administrative authority established by Law No. 675 of 31 December 1996 (the so-called privacy law), to ensure the protection of fundamental rights and freedoms and respect for dignity in the processing of personal data. This authority carries out important supervisory, control and sanctioning functions with regard to Italian companies and public administrations in the event of breaches or non-compliance with the obligations set out in the GDPR. It is also the competent authority for all Italian companies for organizations whose main EU establishment is in Italy (“one-stop-shop”) for GDPR purposes. The Garante has created a dedicated GDPR page, which is updated periodically ( [Link](https://www.garanteprivacy.it/) ) **National Cybersecurity Agency (ACN)** At national level, one of the key developments of recent years has been the official establishment in Italy of the National Cybersecurity Agency (ACN) by Decree-Law No. 82 of 14 June 2021. This body is responsible for promoting and ensuring cybersecurity and technological resilience at national level. The ACN coordinates Italy's cybersecurity strategies and has quickly become an important reference point for organizations and companies engaged in personal data processing as well. It works closely with the Italian Garante and periodically publishes reports, alerts and operational recommendations on cybersecurity that can help companies maintain high security standards under the GDPR. Official ACN page ([Link](https://www.acn.gov.it)) In conclusion, in 2025 too, data protection will remain a dynamic and constantly evolving field. In addition to the GDPR, new rules on Artificial Intelligence (the AI Act is already in force), Big Data and other emerging technologies are on the way and will influence compliance choices for businesses and public bodies. Alongside national and international privacy authorities, the cybersecurity agencies mentioned above will also offer essential support and guidance to ensure sustainable and secure data governance. Regularly visiting the official websites of the institutions mentioned is now an integral part of any sound corporate privacy and cybersecurity management policy. --- ## Navigation - Parent: [News](https://argobs.com/en/news.md) - Previous: [How online counterfeiting hits industrial brands](https://argobs.com/en/come-la-contraffazione-online-colpisce-i-brand-dellindustria.md) - Next: [GPS on company cars in compliance with the GDPR and the Workers' Statute](https://argobs.com/en/gps-su-auto-aziendali-in-conformita-al-gdpr-e-allo-statuto-dei-lavoratori.md)