European Union

• (EU) 2016/679, European Union General Data Protection Regulation

Italy

• Data Protection Code (Legislative Decree No. 196 of 30 June 2003 as amended by Legislative Decree No. 101 of 10 August 2018)
• Laws on cyber-security (Directive (EU) 2016/1148 – the so-called NIS Directive – has been implemented in Italy with Legislative Decree No. 65 of 18 May 2018, Law Decree No. 105 of 21 September 2019, Decree of the Prime Minister No. 131 of 30 July 2020, Decree of the Prime Minister No. 81 of 14 April 2021 and Law No. 109 of 4 August 2021)
• Workers’ Statute, Article 4 – audio-visual systems – and Article 8 – prohibition of investigations into opinions (Law No. 300 of 20 May 1970 as recently amended by Legislative Decree No. 185 of 24 September 2016)
• Law on corporate criminal liability – article on whistleblowing channels in compliance programs (Legislative Decree No. 231 of 2001, Article 6, paragraph 2 bis)
• Criminal Code, Article 616 – Infringement, subtraction and deletion of correspondence (Royal Decree No. 1398 of 19 October 1930 as recently amended by Law No. 113 of 14 August 2020 and by Legislative Decree No. 76 of 16 July 2020)

Canada

• S.C. 2000, c. 5 (Can.), Canadian Personal Information Protection and Electronic Documents Act
• S.C. 2010, c. 23, Canada’s Anti-Spam Legislation