The Italian Code of Data Protection restricts the rights of the data subjects in the following cases (Article 2-undecies):
- Money laundering
- Support for victims of extortion demands
- Activity of parliamentary commissions of inquiry
- Activities carried out by a public entity
- Carrying out defensive investigations or to exercise a right in court
- Whistleblowing
Exercise of the data subjects’ rights of deceased persons
Article 2-terdecies of the Italian Data Protection Code allows other persons who have an interest (e.g., for family reasons) to exercise the data subjects’ rights of deceased persons – unless it is forbidden by law or in case of the direct offer of information society services – if the deceased expressed such a wish by a written declaration.