In Italy, the use of e-mail and the Internet is regulated by the Guidelines for e-mail and Internet published by the Italian Data Protection Authority in March 2007.

In the mentioned guidelines, the Authority refers to the principles to be followed for the correct use of corporate e-mail and the Internet: the principle of necessity, according to which information systems and computer programs must be configured to minimize the use of personal data and identifying data in relation to the purposes pursued; the principle of correctness, in virtue of which the characteristics of the system must be disclosed to the employees; the principle of purpose, which requires that employee data be processed only for specific, implicit, and legitimate purposes, in line with the principle of relevance and non-excess.

The treatments resulting from the use of corporate e-mail are subject to the regulation of Article 4 of the Italian Workers’ Statute. This rule governs the control of work tools, including e-mail and the browsing of the Internet. Employer control must be exercised with care, always considering the principles of relevance and necessity, and in full compliance with the third paragraph of Article 4 of the Workers’ Statute. This article requires compliance with privacy rules as a fundamental condition for the use of collected information.

The Italian Data Protection Authority’s guidelines...