Peri News / Italy
IT-Wallet: Italian regulator backs draft privacy safeguards
The opinion addresses proposed safeguards for data minimisation, security and users’ rights, without establishing final adoption of the decree.
The Italian data protection authority issued a favourable opinion on the draft decree setting technical and organisational safeguards for personal data processing within Italy’s IT-Wallet system. Opinion No. 631, dated 23 September 2026, concerns a draft and does not establish that the decree was finally adopted.
According to the opinion, the draft would make the technical specifications’ safeguards mandatory minimum requirements, according to participants’ roles. It provides stronger safeguards for special categories of data, logical separation, selective and logged access, and retention limits. Before offering services, credential verifiers would have to document the necessity and proportionality of requested attributes, legal bases and retention periods.
The impact assessment described in the opinion aims to prevent excessive collection and any single operator reconstructing a credential’s entire lifecycle. Participants would still need to assess additional processing or changes presenting high risks. The draft also addresses routing users’ requests to the competent participant; erasure remains subject to the GDPR’s conditions and limits.