Italian AI bill

On 23 April, the Italian Council of Ministers passed a bill (AI Bill) aimed at introducing national AI provisions. The main scope is to establish regulatory criteria to balance the opportunities offered by new technologies with the risks associated with improper and harmful use. It supplements the European Regulation on Artificial Intelligence (AI Act), which was approved last March. Next, the AI Bill will be subject to discussion and approval by the Chamber of Deputies and the Senate of the Republic.

The AI Bill consists of five parts:

• Principles and purposes
• Sector provisions
• National strategy, national authorities, and promotion actions
• Provisions on users’ protection and copyright
• Criminal law provisions

 

The principles underlying the AI Bill and the protection of minors

The bill is based on respecting fundamental rights and individual freedoms throughout the AI systems’ lifecycle. It has several general principles. Among them, in line with the AI Act, are:

• transparency
• freedom of information
• explainability and knowability
• human control (the “human-in-the-loop” approach) and human decision-making power
• prevention of harm
• proportionality
• security
• protection of personal data
• non-discrimination
• gender equality
• sustainability

The approach guiding the legislator is anthropocentric. Technological systems are at the service of human activity and don’t replace its essential value in every possible use.

According to the bill, using AI should not affect democratic life and its institutions. The bill emphasizes the importance of cybersecurity throughout the development process and the use of AI systems. The bill also pays special attention to promoting AI in many productive sectors, launching and supporting new economic activities and increasing national competitiveness while respecting competition.

Minors can give consent to access AI systems independently from the age of 14. Under that age, they need the authorization of a person with parental responsibility.

 

Vertical approach and sectoral provisions: Health, labour and intellectual professions

The bill includes some provisions for using AI in specific economic sectors to supplement the AI Act's more general and horizontal provisions.

One of these sectors is health. The bill highlights the importance of an ethical and inclusive use of AI in healthcare. It prohibits discriminatory use of AI systems in access to healthcare services and establishes the obligation to give patients transparent information on how AI is used. The bill also clarifies that AI systems aim to support prevention, diagnosis, treatment, and therapeutic choice, leaving healthcare professionals responsible for decisions.

Introducing simplifications for experimentation of AI systems in healthcare is a controversial topic among experts. The bill identifies the processing of personal and non-personal data by public and private non-profit entities for research and scientific experimentation in the implementation of AI systems as “public interest.” This includes using AI for, as necessary for the implementation and use of databases and basic models:

• prevention
• diagnosis and disease treatment
• development of drugs
• therapies
• rehabilitative technologies
• implementation of medical devices (eg prostheses and interfaces between the body and instruments supporting the patient’s condition, public health, personal safety, security)

On this point, the bill refers to Article 32 of the Italian Constitution about health protection and Article 9(2)(g) GDPR, identifying the relevant legal basis on which the processing of personal data is to be based. It also provides that “the secondary use of personal data without direct identifiers” by public and private nonprofit entities is authorized, even where they fall within special categories of data (eg health data). For this purpose, a general data protection notice published on the data controller’s website is deemed sufficient, and no further consent to the processing needs to be sought. The processing of personal data must be approved by the relevant ethics committees and notified to the Italian Data Protection Authority, who may block it within 30 days of notification.

The bill also introduces provisions concerning electronic health records (fascicolo sanitario elettronico) and digital health management. Specifically, it envisages the creation of an AI platform managed by the National Agency for Regional Health Services (AGENAS), dedicated to supporting health professionals and users.

Under the bill, the government is proposing a regulatory framework that not only encourages the use of AI to improve working conditions and increase efficiency and productivity, but also prioritizes the protection of workers' physical and psychological well-being. This includes respecting their rights as outlined in national and European legislation. It also means creating the Observatory on the Adoption of Artificial Intelligence Systems in the Workplace (Osservatorio sull’adozione dei sistemi di intelligenza artificiale nel mondo del lavoro). This observatory will monitor the impact of AI on the labour market, identify the most affected sectors, and promote ongoing training of workers and employers in this area. Importantly, the bill also imposes an obligation on employers to transparently inform workers about the use of AI systems.

The bill provides that AI is only permitted for performing ancillary and support activities related to the main activity in intellectual professions. In addition, professionals must clearly and comprehensively inform their clients when they use AI systems.

Public administrations should use AI to improve the efficiency of services offered to citizens and enterprises, in line with the Italian Strategy for Artificial Intelligence 2024-2026. AI should remain a support tool, while decision-making power and action should remain with people.

In the judicial environment, the bill states that AI can only be used to simplify the work of judicial offices and support jurisprudential and doctrinal research. Again, humans remain at the centre: the final decision on interpretative and judicial issues must always remain a judge’s prerogative.

 

National strategy, investments and authorities for AI: The Italian approach

The Italian AI strategy promotes collaboration between public administration and private entities in developing and adopting AI systems and research and knowledge dissemination. It coordinates administrative activities and guides measures and incentives for entrepreneurial and industrial growth. The Council's presidency through the Department for Digital Transformation will elaborate and update the strategy.

On the investment side, the bill allocates up to EUR1 billion for equity investments in innovative SMEs with operational headquarters in Italy that operate in the fields of AI, cybersecurity, quantum computing, telecommunications, Web3, and other technologies, and in other companies that could become national champions in these areas.

As for national AI authorities, according to the AI Act, the bill identifies them as the Agency for Digital Italy (Agenzia per l’Italia Digitale – AgID) and the National Cybersecurity Agency (Agenzia per la Cybersicurezza Nazionale – CAN).

AgID will promote AI innovation and development, defining and exercising functions in the evaluation and monitoring of systems. ACN will be responsible for system supervision and inspection and sanction activities. Both authorities will have to coordinate and cooperate with other public administrations and independent authorities: for this purpose, a Coordination Committee will be created at the Prime Minister’s Office.

The Italian approach is different from that adopted by other countries: no specific AI authority has been envisaged (like, for instance, the Agencia Española de Supervisión de la Inteligencia Artificial – AESIA), and the choice has fallen on two already existing governmental authorities (AgID and ACN), that are not independent authorities. The Italian Data Protection Authority had asked the government to act as an AI authority because of the close interrelation between AI and data protection and the expertise already acquired in automated decision-making.

 

Identifying AI-generated content and copyright issue

The bill introduces provisions on identifying textual, photographic, audiovisual, and radio content generated or altered by AI systems. Providers of audiovisual and radio broadcasting services can generate or alter content using AI tools. And they can present facts and information that are not real as actual data. But they have to get the consent of the relevant right holders and identify – with the acronym AI – the content by inserting identification elements or signs that are visible and recognizable by users.

The identification must be present at the beginning and end of broadcasts and content. It’s not required for creative, satirical, artistic, or fictitious content unless it’s detrimental to the rights and freedoms of third parties. In addition, the Italian Communication Authority (AGCOM) will have to promote forms of co-regulation and self-regulation using a code of conduct with both audiovisual and radio media service providers and video-sharing platform providers.

One of the most contentious aspects of the bill is the modification of some articles of the Italian Copyright Law (Law No. 633/1941 et seq. mm.). The first is Article 1 on protectable works: “Protected are (…) works of human authorship of a creative character belonging to literature, music, figurative arts, architecture, theatre and cinematography, whatever the mode or form of expression, even where created with the aid of artificial intelligence tools, provided that the human contribution is creative, relevant and demonstrable. ”

The proposal doesn’t rule out the possibility of copyright protection for works generated with the aid of AI tools, but it does seem to raise the standard for protection. In addition to the usual requirement of originality for intellectual works and being able to demonstrate originality, it introduces the criterion of the “relevance” of the human contribution compared to that of the machine. Each case must be assessed on an individual basis, which could have significant implications for AI-generated works.

Finally, the bill also specifies that the reproduction and extraction of works or other material through AI models and systems, including generative AI, is subject to the text and data mining (TDM) exception in Articles 70-ter and 70-quarter of the Italian Copyright Law.

 

The tightening of penalties for offenses committed with the aid of AI

As for criminal law, the bill provides for a series of measures to punish crimes committed using AI systems more severely. First, it introduces a specific aggravating circumstance for the use of AI systems: the punishment is increased when AI is used insidiously, hinders public or private defence, or contributes to aggravating the consequences of a crime. The bill also states that the unlawful dissemination of content generated or manipulated by AI to mislead as to its genuineness (eg deepfakes) is punishable by imprisonment from six months to three years and from one to five years if it causes unjust damage.

Exceptional aggravating circumstances are then introduced to punish cases in which AI can propagate the offense.