Italy's "AI bill" is no longer a bill: it is Law 132/2025, and it is in force

From bill to statute

The text that circulated for two years as the "DDL IA" was finally approved and became Law no. 132 of 23 September 2025, in force since 10 October 2025. It is Italy's first comprehensive national AI framework, built to operate alongside the European AI Act.

Much of the content still online describes the version under discussion, with articles and numbering that no longer match the enacted text. That is why this page exists.

What Law 132/2025 does

It does not replace the AI Act and does not duplicate its obligations: the European Regulation is directly applicable and remains the source of the technical duties. The national law builds the frame around it: principles, competences, sectors, delegated powers.

• General principles: human centrality, transparency, traceability, security, data protection; AI as a tool, not a substitute for human decision-making.
• Sector rules: healthcare, employment, public administration, justice, regulated professions. In employment in particular, the use of AI systems must be disclosed to workers.
• National authorities: AgID and ACN, each within its remit, as the AI authorities.
• Copyright protection and criminal law: a specific offence is introduced for the unlawful dissemination of AI-generated or altered content (deepfakes).
• Delegated powers for the Government to adopt implementing legislative decrees.

What is still missing: the implementing decrees

The law is in force, but part of its operative substance is left to legislative decrees the Government has yet to adopt. The first drafts were approved on preliminary examination by the Council of Ministers in June 2026; the delegated powers expire on 10 October 2026.

So the national framework will keep moving between now and the autumn. Worth watching — but even more worth not using as an excuse to wait: the obligations that fall due on 2 August 2026 are not in the Italian law, they are in the European Regulation, and they are already written.

The concrete, dated obligation facing your business does not come from Law 132/2025. It comes from Article 50 of the AI Act, and it is not waiting for the decrees.

What changes today for a business

For the vast majority of SMEs: little, in terms of immediate duties. The national law matters most in healthcare, public administration, regulated professions, and for anyone whose workers are organised or assessed with AI systems — there the information and transparency duties towards workers are live now.

For everyone else, the work to do before the summer is the AI Act's: make the virtual assistant recognisable, mark generated content, train the staff. Do that, and you are already aligned with what the national law will ask.