Evergreen legal library · not legal advice

The legal library on AI, with the official source up front.

In short, Regulations gathers the rules that affect an Italian SME. Each card keeps the facts — verified against the official source and citable — sharply separate from the NomotecnIA reading. Content is evergreen: no publication date, only the latest update. That way you always know what is law and what is our interpretation.

01 · The library

Four rules, one reading framework.

Facts verified by source

The four rules that weigh most on an SME adopting AI in Italy. Each card follows the same model — the facts with the source, then our reading, always labelled as such — and shows status and latest update in plain sight.

EU Regulation · directly applicable In force · staggered

Regulation (EU) 2024/1689 — AI Act

The European regulation on artificial intelligence. It also applies to those who use AI, not only to those who develop it: most SMEs are deployers. Prohibitions (Art. 5) and AI literacy (Art. 4) are already in effect.

Updated · 10 Jul 2026 Read the card
National law · Italy In force · partial implementation

Law No. 132 of 23 September 2025

Italy's first comprehensive law on AI. A dual track alongside the AI Act: largely a law of principles and delegated powers, with the implementing decrees expected by October 2026.

Updated · 6 Jul 2026 Read the card
EU Regulation · directly applicable Applicable since 2018

Regulation (EU) 2016/679 — GDPR

The pre-existing foundation onto which AI regulation is grafted. The AI Act applies “without prejudice to” the GDPR: two cumulative tracks — complying with one does not exempt you from the other.

Updated · 10 Jul 2026 Read the card
International standard · voluntary Certifiable · voluntary adoption

ISO/IEC 42001:2023 — AI Management System

The first international standard for an AI management system. It is not law: it is a voluntary readiness framework that structures the governance required by the AI Act.

Updated · 10 Jul 2026 Read the card

This library grows over time: new cards are added as the regulatory framework evolves.

02 · How to read a card

The facts with the source first. Then our reading, kept separate.

Each card is divided into two zones that never blur: it is what lets you cite us with confidence and tell the law apart from opinion.

Zone A

The factsevery data point with its official source

Boundary

NomotecnIA reading

Zone C

Meta & sourcerevision, disclaimer, official link

Facts verified against EUR-Lex, Normattiva and the ISO catalogue · reading = NomotecnIA's own synthesis

03 · From the Observatory

The cards are evergreen. The Insights are dated.

Opinion · always dated

When a rule evolves or deserves a broader reading, we discuss it in the Insights: dated editorial articles that always cite at least one card from this library. It is the other half of the method — the rule stays fixed and citable, the opinion carries a date.

Go to Insights →

From the rule to your business

Want to know which of these rules actually apply to you?

The cards explain the framework. The AI Entry Assessment brings it down to your reality: a map of your systems, a gap analysis against the AI Act and ISO/IEC 42001, a prioritised roadmap.

This library is for information and orientation only · it is not legal advice · the official source is always cited and prevails