Italy Enacts Law Which Sets New obligation to notify cyber incidents

Law No. 142 of 21 September 2022. was published, on 21 September 2022, in the Official Gazette and entered into force the following day. Article 1(3) of Decree Law No. 105, as amended, imposes a new obligation to notify, within 72 hours, to the Italian National Cybersecurity Agency (‘ACN’) all incidents affecting entities within the existing National Cybersecurity Perimeter, even if they do not directly affect assets specifically included in the same. Read more