From L. 132/2025 to compliance strategies for capital companies: risks, opportunities and cases
actual application
An historic moment for the regulation of artificial intelligence in Italy and its
relationship with the IAI ActEuropean. The10 October 2025, Law 132 of 23 September 2025, which regulates artificial intelligence, entered into force in Italy. It is a framework law (Delegation Act) which sets out only certain principles and, at the same time, delegates to the Government the task of issuing legislative decrees that complement the directives.
The law, consisting of 28 articles, sets out the general rules for the design, implementation and use of artificial intelligence systems, focusing on the defence of fundamental rights, security of systems, transparency and responsibility of operators. Among the main objectives, we find the promotion of a reliable and sustainable AI, the enhancement of research and innovation, as well as the creation of a regulatory ecosystem capable of reconciling technological development and respect for constitutional and European values.
We are facing a historic date for Italy, which becomes the first Member State of the Union.
European to have national organic regulation on AI.
It is based on the AI Act, namely EU Regulation 2024/1689 which entered into force on 1 August 2024, and
it must be applied and interpreted in compliance with the same.
The basic principles of the JHA Act
To understand the objectives of L. 132/2025 it is good to proceed with order by illustrating first the contents l.Act. TheEU legislation imposes transparency and accountability requirements and, in the event of infringements of such rules,obligations, administrative fines are provided for up to 7% of the total annual global turnover of the company or up to €35 million.
It regulates AI systems according to their degree of risk, i.e. the probability and severity of the potential damage to them, and in particular provides for the prohibition of certain applications of artificial intelligence which are considered to involve excessive risks, and for the development and use of certain high-risk AI systems.
It applies to several operators in the AI value chain, including suppliers, users, importers,
distributors, producers and authorised representatives as well as suppliers and users outside the EU where their AI product and/or its outputs are used in the EU.The Italian frame: an immediate law of applicationThe Italian legislator decided to inspire himself and use EU legislation as a direct reference by drafting a law that regulates the matter in an organic way.
L. 132/2025 responds to the need to identify a regulatory framework that recognises the impact and potential of these new technologies, whose use has become consolidated, and that identifies limits and limits of use.
He introduced new criminal acts, including Deepfake.Art. 612c c.p., punishes the
Deepfake not consensual, or more precisely the spread of content generated or manipulated artificially created by the AI1.
Anthropocentric, transparent and secure artificial intelligence
The main aim of Italian legislation is to give life to an artificial intelligenceAnthropocentric, transparent and safe.
But what is anthropocentric?
Satya Nadella, CEO Microsoft, explained this in an interview with Corriere della Sera in which he said: "AI can help workers but not replace them" and thatTechnology will make society more inclusive, but innovative ideas are worthless without ethics and empathy
Moreover, when the legislator recalls the requirements of transparency and security, he refers to the
cybersecurity, protection of confidentiality and prevention of risks arising from innovation.Article 15 of the FAI 132/2025: protection of human decision-making power in justice.This technology is used in a number of areas, including health, work, public administration, training, sport and justice.
Article 15 of the Act deals with the use of artificial intelligence in the system
judicial. It provides that crucial decisions, such as the interpretation and enforcement of the law, the assessment of facts and evidence and the adoption of measures, are the responsibility of the judge. It is therefore excluded the use of the so-called predictive justice for decisions that have a direct impact on the outcome of a trial and the Ministry of Justice will have to regulate the use of the AI for the administrative activities ancillary, the organization of services and the facilitation of judicial work.
Compliance as a lever for growth: funds, incentives and competitiveness
L. 132/2025 aims not only to ensure ethical and responsible use of intelligence
artificial, but also to promote it as a driver of economic development and competitiveness for the country.
The legislation, in fact, if on the one hand it is a constraint for the enterprises, on the other it is also a lever of growth and competitiveness. It is photos, videos and audio creates. thanks to so2ware of artificial intelligence that, starting from real content, they manage to modify or create, in an extremelyRealis.co, the characteristics and movements of a face or a
and to imitate a certain voice with great resemblance.
The legislator's objective is to create a motor for innovation and industrial development, to help SMEs to adapt to the new standards set by the EU, promoting the development of a safe, ethical and sustainable artificial intelligence.
The main instrument is the National Artificial Intelligence Fund, with a starting stock of 1 billion euros, aimed at financing innovative startups and SMEs that design or integrate artificial intelligence applications that comply with the principles of transparency, security and respect for fundamental rights. The fund aims to finance the complete cycle of innovation, starting from research and development and also reaching the marketing and certification of the AI, to create a competitive system and in line with European standards.
In addition, tax advantages are provided, in addition to direct financing, including: tax credits for investments in hardware, software and training in AI; contribution facilities for the recruitment of human resources in areas such as data science, machine learning and cybersecurity; incentives for companies that adopt a certified system or develop an AI risk management process in line with European expectations.
Governance and innovation: the Italian companies' response to L. 132/2025
The L. 132/2025, which complies with the EU Regulation (AI Act), marked the start of a journey of
integration of the management of the .I.A. into corporate governance and influenced the definition of corporate responsibilities. The major Italian capital companies are responding in different ways to this novelty. What all their reactions share is the objective: to transform compliance into competitive advantage. The aim is to respect new obligations without this affecting the innovative drive.
Stellantis • Industrial AI case and autonomous driving
Stellantis, a multinational motor vehicle holding company, is one of the most exposed to
new legislation. The company uses systems ofmachine learningIn various areas, for example, it uses artificial intelligence for autonomous driving, to coordinate activities and resources necessary to transform raw materials into finished products and deliver them to the final customer (supply-chain) and for predictive maintenance management.
The L. 132/2025 requires for new models called "high risk"
The company's response to the new legislation has provided for the introduction of checks on the decision-making traceability of systems. Stellantis has reacted constructively to the introduction of this new legislation. He has decided not to look at it as a constraint but as an opportunity that has become a stimulus that has led to the consolidation of trust in both customers and regulators.
Thesafety by designhas therefore established itself as a characteristic value of the brand.
Case Enel • Algorithmic governance and transparency
Enel,Italian company among the main global integrated operators in the sectors ofelectricityand gas, has developed one of the most avant-garde structures of AI governance in Italy. This organization provides for more than 250use caseThe latter have preceded in some areas such as transparency, security and supervision , as stated by L. 132/2025.
Artificial intelligence is seen as a strategic risk factor that the company must consider not only in relation to the new legislation but also in its own budgets.
The new proposals for projects related to the IA are subject to impact assessments on the
possible effects on work, privacy and environment.
Case Intesa San Paolo • Transparency and human control
TheAI complianceIn the banking sector, it is particularly important that automated decisions are in direct contact with credit and employment.
Intesa São Paulo, an Italian banking institution, uses AI models in different contexts. Recently the company has strengthened an approach ofResponsible AI,already started, consistent with the new regulatory framework.
In line with CEO Carlo Messina's statements on the centrality of customer confidence, the
The Bank underlines the importance of transparency, which is the basis of its reputation and solidity:
:For a CEO, the point with AI is to have the right approach with the people in your organisation :
The experience of Intesa San Paolo shows how the new regulation can strengthen the confidence placed in the modern financial system and reduce the risk ofbiasrelated to the use of artificial intelligence.
Case Poste Italiane
Posta Italiane, a public company and Italian holding company, has been investing for some time in projects of
AI applied to customer care, logistics and cybersecurity. With the 2024-2028 industrial plan, it has enhanced customer response automation systems, predictive management of IT networks and digital security solutions.
The company's digital code of ethics has been further updated in response to the new law, emphasising the importance of data protection and sustainability.
The integrated governance model is a benchmark for other public companies. It distinguishes internal use and outsourcing AI and imposes standards of security and transparency on suppliers.
The company is moving towards an applied ethics that gives the right importance to digital sustainability as a component of the company's reputation.
Towards a new culture of compliance and innovation
These experiences, like those of many other large Italian companies, show the impact and relevance of L. 132/2025, not only intended as a constraint but also as a driving force of
innovation, competitive advantage and an advanced corporate culture.
Integrating compliance AI means not only seeing it as a cost but also as a lever for responsible innovation.
Right cannot chase reality, it must anticipate it if it wants to govern it.
Italy has pushed companies to do just that, to anticipate the future by ruling it.