Italy Data Removal Guide (2026)
Italian residents have comprehensive data protection rights under the EU GDPR and Italy's Codice della Privacy. Discover how to erase your records from commercial registries, telemarketing databases, and international brokers.
Research status: published guide pending fresh official-source re-verification.
This page is educational orientation, not legal advice. The legal fields below are a research snapshot; eligibility, exemptions, deadlines, penalty rules and broker routes can change. Verify the current statute and regulator guidance before relying on a right or filing a complaint.
At a glance
- Governing law
- EU GDPR / Codice Privacy
- Response deadline
- 1 month (extendable by 2 months for complex requests)
- Regulator
- Garante per la protezione dei dati personali
- Private right of action
- Yes: civil action for damages before the judicial authority (Tribunale ordinario)
EU General Data Protection Regulation (GDPR) + Codice in materia di protezione dei dati personali (D.lgs. 196/2003)
Italy applies the EU GDPR supplemented by Legislative Decree No. 196/2003 (as amended by D.lgs. 101/2018). Supervised by the Garante per la protezione dei dati personali, Italian law provides stringent protections against unauthorized profiling and aggressive commercial prospecting.
Read the full EU GDPR / Codice Privacyexplainer →Scope, penalties, private right of action, enforcement history.
What rights do Italy residents have?
- →Right of access (Diritto di accesso, Article 15 GDPR)
- →Right to rectification (Diritto di rettifica, Article 16 GDPR)
- →Right to erasure / "Diritto alla cancellazione" (Article 17 GDPR)
- →Right to object to processing and marketing (Diritto di opposizione, Article 21 GDPR)
- →Right to restriction of processing (Article 18 GDPR)
- →Right to file a formal complaint (Reclamo) with the Garante Privacy
Who holds your data in Italy?
In Italy, personal and business data is widely collected from the Registro delle Imprese (Chambers of Commerce / Infocamere), Catasto real estate records, telephone directories (Pagine Bianche), and financial risk databases (CRIF, Experian Italia, CTC). Unsolicited telemarketing and B2B contact scraping remain significant issues.
Public-record sources brokers scrape
- Registro delle Imprese (Chamber of Commerce / Infocamere corporate records)
- Public telephone and subscriber registries (Pagine Bianche, Pagine Gialle)
- Commercial credit rating and risk information databases (CRIF, Cerved, Dun & Bradstreet Italia)
- Online directory aggregators and telemarketing lead brokers
How to remove your data in Italy
- 1Register all mobile and fixed telephone numbers on the official Registro Pubblico delle Opposizioni (registrodelleopposizioni.it).
- 2Submit GDPR Article 17 deletion requests ("Istanza di cancellazione") to data brokers and business information providers.
- 3Request removal of unlisted personal phone and address data from online subscriber registries.
- 4Submit a formal Reclamo to the Garante per la protezione dei dati personali in Rome if an organization ignores your request.
Ready to remove
Review 1009 US/global broker workflows for $9
Much of Italy residents' data is held by US-based people-search brokers. OfflistMe drafts a legally structured deletion email for each one, sent from your own inbox, no account, no ID upload. Pair it with the Italy-specific steps above.
Request Removal NowWhat if a company ignores your request?
File a complaint with the Garante per la protezione dei dati personali. The maximum penalty in Italy is €20M or 4% of global annual turnover, and you may have a private right of action (Yes: civil action for damages before the judicial authority (Tribunale ordinario)).
File a complaint with the Garante per la protezione dei dati personali ↗FAQ: Italy data removal
How do I block telemarketing calls on mobile phones in Italy?+
Register your mobile and landline numbers on the Registro Pubblico delle Opposizioni (RPO). Registration automatically revokes all prior commercial consents given to telemarketing operators, making unsolicited calls unlawful.
How do I submit an Article 17 erasure request in Italy?+
Send a formal "Richiesta di cancellazione dei dati personali" to the controller's Data Protection Officer (DPO) via email or PEC (Posta Elettronica Certificata). The controller must respond within 30 days confirming data deletion.