Privacy legitimate interest might become difficult to manage in Italy following provisions introduced in the countrys Budget Law. The Budget Law provides that data controllers who process personal data through automated means or new technologies on the basis of legitimate interest need to notify and receive approval from the Italian data protection authority. Yet, since the provision applies to data processing activities based on legitimate interest and performed through automated means and new technologies, this may introduce confusion, and may force some companies to introduce new versions of their privacy information notice to ensure complete compliance with the GDPR.
