Kenya is not a party to the World Trade Organization (WTO) Agreement on Government Procurement (GPA) nor does it have observer status.

Paragraph 7.2.4 of the National Information Communication and Technology Policy Guidelines of 2020 mandated that a company must have at least 30% substantive Kenyan ownership to be licensed by the Communication Authority to provide ICT services in Kenya. This requirement applied until August 2023 when, through Gazette Notice 11079 dated 22 August 2023, the Kenyan Cabinet Secretary for Information, Communications, and the Digital Economy formally announced the deletion of the paragraph. According to Section 2 of the Kenya Information and Communications Act, information and communication technologies encompass the technologies used in collecting, storing, using, or transmitting information, including those involving computers or any telecommunication system. This definition includes ICT, telecommunication, and audiovisual services. Previously, this ownership requirement was 20% for telecommunications licensees.

As provided in provision 1.2.3 of the Regulation of allocation and management of ".it" domain names, registration of an ".it" domain name is only permitted to persons of legal age who have citizenship, residence or registered office in the countries of the European Economic Area (EEA), the Vatican State, the Republic of San Marino and the Swiss Confederation.

The Consumer Rights Directive 2011/83/EU provides an updated framework aimed at encouraging online sales. The Directive has been implemented by the Consumer Code - Legislative Decree No. 206 of 6 September 2005 - Part III - Title III - Chap I Consumer Rights.

Italy has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Italy has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Italy has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

The EU Directive on Audiovisual Media Services (AVMS) covers traditional broadcasting services as well as audiovisual media services provided on-demand, including via the Internet. Art. 13.1 provides for Member States to secure a minimum 30% share of European works in the catalogues as well as "ensuring prominence" of those works. "Prominence" involves promoting European works by facilitating access to such works using any appropriate means to ensure their prominence. The Directive has been implemented by Member States in different ways, ranging from very extensive and detailed measures to a mere reference to the general obligation to promote European works.
In Italy, the EU Directive was transposed into domestic law through Legislative Decree No. 208. According to Art. 55 of the Decree, catalogues of on-demand audiovisual media service providers under Italian jurisdiction must prominently feature at least 30% European works. Providers are required to ensure that, over the past five years, at least 30% of their catalogue consists of European audiovisual works, excluding those that charge a specific fee for individual programmes. Additionally, at least 50% of the European works quota must be reserved for original Italian works produced by independent producers within the last five years. The regulations referred to in Art. 57 shall stipulate that at least one-fifth of the sub-quota of investment must be reserved for cinematographic works of original Italian expression produced by independent producers in the last five years, regardless of where they were made.

It is reported that the Autorita per le Garanzie Nelle Comunicazioni (AGCOM), the executive authority for the supervision and administration of services in the telecommunications sector, is independent from the government in the decision-making process.

Pursuant to Art. 5.1 of Regulation No. 27, promulgated by the Institute for the Supervision of Insurance (IVASS), insurance and reinsurance undertakings domiciled in Italy are mandated to retain their insurance registers at their principal place of business. Conversely, entities whose head offices are situated in third countries are required to maintain such registers at their Italian branch offices. Art. 5.2 of the same Regulation permits these undertakings to relocate and store the registers at an alternative site, provided that the location remains within Italian territory and that IVASS is assured of secure access, document integrity, and efficient retrieval mechanisms.

Art. 39 of the Presidential Decree No. 633 of 1972 states that electronic archives related to accounting data for VAT declarations may be kept in a foreign country only if some kind of convention has been concluded between Italy and the receiving country governing the exchange of information in the field of direct taxation. Therefore, such limitation does not apply intra-EU.

The European Union General Data Protection Regulation (GDPR) provides a comprehensive framework for data protection that applies to all EU Member States. Italy implemented the GDPR by means of the Personal Data Protection Code.

Under the EU Directive on Data Retention, operators were required to retain certain categories of traffic and location data (excluding the content of those communications) for a period between six months and two years and to make them available, on request, to law enforcement authorities for the purposes of investigating, detecting and prosecuting serious crime and terrorism. On 8 April 2014, the Court of Justice of the European Union declared the Directive invalid. However, not all national laws that implemented the Directive have been overturned.
In Italy, the Directive has been implemented through an amendment to the Privacy Code effective as of August 2009 and still applies today. Under the Privacy Code, providers of a public communications network or a publicly available electronic communications service must retain "telephone traffic data" and "electronic communications traffic data" for 24 months or 12 months, respectively, for law enforcement purposes. A 30-day retention period applies in case data related to unsuccessful calls are processed on a provisional basis.

In Italy, operators are obliged to retain data for extended periods on the basis of that Anti-Terrorism Decree. As a result of the amendment to the Anti-Terrorism Decree through Law No. 167 of 2017, companies under the scope of the Anti-Terrorism Decree to this end shall set a retention period of 72 months (6 years) for both telephone and traffic data.