Articles 2-bis and 2-ter and related provisions of the Codice establish Italian-specific lawful processing requirements supplementing GDPR Article 6. (1) Article 2-bis Legal Basis: Italian national rules supplementing GDPR Article 6 lawful processing bases + including (a) Italian statutory authorisations; (b) Italian-specific public interest grounds; (c) Italian compatibility test interpretations; (d) Italian consent requirements + clarifying GDPR consent in Italian commercial + employment + healthcare contexts. (2) Article 2-ter Processing by Public Bodies: special provisions for processing by Italian public bodies + agencies + authorities including (a) public interest as lawful basis; (b) public service performance basis; (c) statutory authorisation requirements; (d) inter-agency data sharing; (e) administrative procedure data + Public Administration data. (3) Notice in Italian Language: while GDPR Article 12 requires concise + transparent + intelligible + easily accessible form + Italian Codice clarifies that notice must be provided in Italian language for processing primarily directed at Italian data subjects + plus other languages where appropriate + accessibility for persons with disabilities + child-friendly versions for minors. Notice content per GDPR Article 13 + 14 + Italian elaborations + including (a) identity of controller + Italian Representative if applicable; (b) DPO contact details; (c) purposes + legal basis including Italian-specific basis; (d) data categories; (e) recipients + Italian and EU recipients distinction; (f) transfer to non-EU countries + safeguards; (g) retention period + Italian sector retention rules; (h) data subject rights + Italian limitations; (i) right to lodge complaint with Garante; (j) profiling + automated decision-making. (4) Consent Requirements: free + specific + informed + unambiguous + Italian language + explicit for special categories + for direct marketing + for cross-border transfer to non-adequate countries + withdrawal as easy as giving + records of consent + age of consent for digital services 14 years per Italian Codice (Italy chose lower age than GDPR default 16 per Article 8). (5) Italian-Specific Derogations: per GDPR Chapter IX allows national derogations + Italy implements (a) journalism + literary expression + artistic expression derogations balanced against privacy; (b) statistical + research derogations; (c) religious institution data processing; (d) historical archival research; (e) employment law specifics including worker monitoring under Italian Labour Code Article 4. (6) Data Subject Rights Handling: process for receiving + verifying + responding to GDPR Articles 15-22 rights + Italian Codice Article 2-undecies limitations + 30-day response + Italian language responses + Italian Civil Procedure Code remedies + Garante complaint pathway. Coordinates with GDPR Articles 6 + 7 + 8 + 12 + 13 + 14 + 15-22 + Italian Civil Code + Italian Public Administration Code + Italian Labour Code Article 4 (Workers Statute) + Italian Civil Procedure Code + Garante guidelines. Italy Codice Lawful Basis + Notice applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.