From the journal

Italy Approves AI Act Implementing Decrees for Parliamentary Review, June 2026

On 10 June 2026, Italy's Council of Ministers approved two draft legislative decrees implementing Law No. 132/2025, the domestic AI statute aligned with EU Regulation 2024/1689. The decrees, announced in Press Release No. 177, cover national authority powers, AI in employment and education, biometric surveillance in law enforcement, civil liability for AI-caused harm, and new criminal offences. They are now subject to parliamentary advisory review before final promulgation.

2 min read

On 10 June 2026, the Italian Council of Ministers approved two draft legislative decrees implementing Law No. 132/2025 under the delegated legislative authority granted by that statute. The decrees, announced in Press Release No. 177, are now before the Italian Parliament for the advisory review required before the President of the Republic promulgates them. Italy is the first EU Member State to advance national implementing legislation operationalizing EU Regulation 2024/1689, the EU AI Act.

Law No. 132/2025 delegated the Italian government to adopt implementing decrees within twelve months of entry into force, setting a deadline of 10 October 2026. The two decrees derive their authority from that delegation and must conform to EU AI Act Regulation (EU) 2024/1689. The first decree addresses the powers of national AI supervisory authorities, AI in employment relations, AI in education and professional training, and biometric surveillance by law enforcement under Chapter IV of the EU AI Act. The second decree covers civil liability for AI-caused harm and new criminal offences for prohibited AI practices.

Businesses deploying AI systems in Italy will face enforcement by a multi-authority national structure once the decrees take effect. AI deployers in HR and recruitment, education providers using AI-driven tools, and operators of law enforcement biometric systems face category-specific obligations and graduated penalties calibrated to their position in the AI supply chain. Italy exercised the EU AI Act's option to set maximum national sanctions below the European ceilings.

The decrees are subject to parliamentary advisory opinion, after which the Council of Ministers may amend them before final promulgation. No confirmed date for the conclusion of parliamentary review has been announced. Organizations operating in Italy should monitor the promulgated text for final sanction levels and authority assignments before building compliance programs, as the advisory process may alter the decree text.

Licentium advises on EU AI Act compliance, including national implementing measure monitoring across EU Member States. Work we undertake includes AI Act gap analysis, high-risk AI system classification, conformity assessment support, national authority engagement, and AI governance documentation.

Source: Italian Council of Ministers, Press Release No. 177, 10 June 2026, implementing decrees under Law No. 132/2025 (AI)

AI Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.