Regulation (EU) 2016/679 on personal data protection, approved on 27 April 2016 and published in the Official Journal on 4 May 2016, will enter into full force on 25 May 2018. The Regulation will replace Legislative Decree no. 196/2003, which currently regulates the matter in our country. The main innovations include the introduction of the “accountability” principle, according to which the Data Controller (intended as a legal person) can autonomously decide the methods, guarantees and limitations of the personal data processing, in compliance with the legislative provisions and in the light of a few specific criteria set out in the Regulation itself.