The GDPR is the primary source of the applicable regulatory framework on data protection in Italy and the Personal Data Protection Code (Legislative Decree 101/2018) now contains the national provisions completing those of the GDPR.