LexLint

Know the law your code answers to.

Law / Italy

Legge 132/2025 Art. 20, National AI Authorities (AgID and ACN)

Legge 23 settembre 2025, n. 132, art. 20

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force 11 months, effective 10 October 2025.

An AI governance rule binding public and private bodies.

As of 6 September 2026.

What it requires

  • Expect AgID to handle AI innovation promotion and the notification, assessment, accreditation and monitoring of conformity-assessment bodies for AI systems placed on the Italian market.
  • Expect the National Cybersecurity Agency (ACN) to supervise AI systems for cybersecurity compliance in Italy, including inspection and sanctioning powers.

What it makes you log

Logging duty

Article 20, comma 1, lettera b) makes ACN responsible for supervision of AI systems, including inspection and sanctioning activities, for cybersecurity compliance. The clause grants ACN a power to inspect and sanction directly; it does not itself say that a developer or deployer must create, keep, demonstrate or produce a log, record or piece of documentation on demand. A documentation duty a regulated party owes for that inspection, if any, rests in the EU AI Act's own text (Articles 11, 12, 18, 21), not in this article's own words.

Kind
None
As of
22 September 2026

Who checks it

Audit expectation

on_request

Who audits it

Regulator, Registered or designated auditor

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 20 designates the Agenzia per l'Italia digitale (AgID) and the Agenzia per la cybersicurezza nazionale (ACN) as Italy's national AI authorities, without displacing the Bank of Italy's, CONSOB's and IVASS's existing sector market-surveillance roles under EU AI Act Article 74(6) (comma 1).

AgID is responsible for promoting AI innovation and development and for defining the procedures and exercising the functions for notifying, assessing, accrediting and monitoring the bodies charged with verifying AI systems' conformity (comma 1, lettera a); ACN is responsible for supervising AI systems, including inspection and sanctioning activities, for cybersecurity compliance, and for promoting AI development on cybersecurity aspects (comma 1, lettera b); the two agencies jointly establish and manage AI regulatory-sandbox spaces, consulting the Ministry of Defence on dual-use AI and the Ministry of Justice on AI used in judicial activity (comma 1, lettera c).

When LexLint raises it

  • generates_content
  • deploys_chatbot
  • high_risk_decisions

Read the law

official consolidated text of Legge 132/2025, Normattiva

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example  ·  Lint your app