Italy gave the AI literacy duty a form, and a deadline.
- The EU AI Act
- AI literacy and the Article 4 duty
- Enforcement and supervision
- AI governance for associations
On 23 October Decreto Legislativo 7 ottobre 2026, n. 179 entered into force. It was published in the Gazzetta Ufficiale on 8 October as GU n. 234, codice redazionale 26G00200, and its own title is narrower than the coverage it has had: the powers of the national AI authorities, and the use of artificial intelligence in training and education.
Both halves matter to you, but the second one is the news. No other member state has put the AI literacy duty into the training regulations of the professions, named the body responsible for amending them, and given it six months to do it.
Our view
Article 4 of the AI Act has required AI literacy since February 2025. It is an obligation of effort with no prescribed form, which is why almost every organisation can produce a policy and almost none can produce evidence. Italy has now prescribed a form for one sector: not a policy document, an amendment to the regulation that governs entry to the profession, in three named strands, with a named owner and a date. Nothing in European law prevented that happening everywhere. It simply had not happened, and now there is a template to point at — which is a different argument in a board paper from a principle.
What moved
D.Lgs. 179/2026 is in force
Published in the Gazzetta Ufficiale on 8 October (n. 234), in force 23 October 2026 after the ordinary fifteen days. Article 2 applies it to providers, deployers, importers, distributors and authorised representatives — the Act's own categories, not a new set invented in Rome.
For associations: Read it as the template rather than an Italian curiosity. It is the first member state to convert the Act's deployer and literacy duties into a national training regime, and national regimes get copied by ministries that are short of drafting time.
Professional orders have six months to rewrite their training regulations
Article 47(1) requires the initial and continuing professional training courses run by the ordini professionali to include AI literacy and training paths, in three strands: technical, legal and deontological. Article 47(5) gives the national councils of the orders six months from entry into force — by 23 April 2027 — to amend their training regulations accordingly.
For associations: CPD is a duty you already run, a register you already keep and a committee that already meets. This is the first statute that says what has to be inside it. If you are a professional body, or you federate with one in Italy, that clock is now running.
An automated dismissal is void in Italy
Article 41(1): final decisions on recruitment, discipline, appraisal and dismissal may not be based solely on automated processing, and the final decision is reserved to a natural person exercising an effective and autonomous power. Article 41(4): a dismissal issued in breach is null.
For associations: If any HR workflow scores, ranks or filters people, that has stopped being a productivity choice for a body employing in Italy. Ask the supplier which decisions the system makes, and get the answer in writing before a tribunal asks you.
Still moving · the last seven days
The sandbox exists; the door does not open yet
Article 26 establishes the Italian experimentation space under Article 57 of the Act, supervised by the national AI authorities and run jointly by AgID and ACN. Admission rules await a joint decree from their directors-general, which had not been adopted when the decree came into force. A sandbox with unpublished access rules is a timetable you can plan around, not a service you can use.
The EN 18286 presumption is narrower than the headlines
ActuIA reported on 22 October that the presumption of conformity reaches only the Article 17 quality-system requirements the standard covers. The technical requirements — risk management through to cybersecurity — still have no harmonised standard: nine of the ten areas of the Commission's standardisation request remain unanswered. Last week's issue said the standard gives you a procurement question. It does. It does not yet give you a certificate to demand.
The penalties are set, and the smallest rung is yours
Article 23 scales them: up to €35m or 7% of worldwide turnover for breaching the Article 5 prohibitions; €15m or 3% for the provider obligations and for Article 50 transparency; €7.5m or 1% for misleading a notified body or an authority; €1m or 0.5% for Articles 27 and 86 — the fundamental-rights impact assessment and the right to an explanation. The deployer rung is the smallest, and it is the only one that catches an association.
The association angle
The obligation of effort, given a shape
Every association in Europe is now in its second year of an AI literacy duty that has never been defined. Article 4 asks for effort rather than outcome, so the defensible position is a record — who was trained, on what, when, by role — and a record is only as good as the requirement behind it. Italy has shown what the next move looks like for a professional body: not a policy, a change to the training regulation, three strands, one named owner, one date. If your members are regulated professionals, that is the shape your own amendment will take. The argument for drafting it now is that you would rather write it than receive it.
If the amendment itself is the job — drafted, consulted on and issued before a registrar asks for it — that is a First Build: one job, ten working days.
One thing to read
Decreto Legislativo 179/2026, in the Gazzetta UfficialeFifty-four articles in Italian, and the only version that counts. Article 47 is four paragraphs long and it binds a professional body harder than anything in the Act itself.
Earlier on these subjects
- The AI Act stopped being a text yesterday.
Issue #101 · 20 October 2026
— Titus