Is Doxxing Legal in Italy After the 2026 Policy Reforms?

No. Doxxing is illegal in Italy under multiple statutes, including the Codice Penale (Art. 616 on privacy violations) and the Garante per la Protezione dei Dati Personali (GPDP) guidelines. Unauthorized disclosure of personal data risks criminal prosecution, fines up to €20 million, or imprisonment under GDPR-equivalent enforcement.


Key Regulations for Doxxing in Italy

  • Privacy Violations (Art. 616 Codice Penale): Prohibits unauthorized disclosure of private communications or personal data, punishable by up to 3 years imprisonment. Applies even if data is publicly available but repurposed maliciously.
  • GDPR Enforcement (GPDP): The Italian Data Protection Authority mandates strict consent requirements for personal data processing. Non-compliance triggers fines up to €20 million or 4% of global turnover, whichever is higher.
  • Cyberstalking & Harassment (Art. 612-bis Codice Penale): Doxxing often overlaps with online harassment, carrying penalties of 6 months to 5 years imprisonment. Recent 2026 amendments expand protections for digital identity theft.

Enforcement & Liability

Italian courts increasingly treat doxxing as a form of reato contro la persona, with liability extending to platforms failing to remove illegal content under the Decreto Legislativo 70/2003 (E-Commerce Directive transposition). Victims may seek injunctions via the Tribunale Ordinario or file complaints with the GPDP for expedited data rectification. Prosecutors prioritize cases involving public figures or systemic breaches.