DIGITAL RIGHTS

Navigating the balance between privacy and the new frontiers of the law to defend the integrity of the individual against manipulation by artificial intelligence.

Introduction

Violations of digital rights now undermine the integrity and dignity of the individual. In Italy, the Data Protection Authority recorded over 2,000 data breaches in 2023, whilst the National Cybersecurity Agency (ACN) handles around 165 cyber incidents each month. The World Economic Forum ranks identity theft and disinformation among the most critical global risks of the decade. The most insidious threat lies not in the theft of assets, but in the creation of a ‘digital twin’ through deepfakes and biometri c manipulation.

Tale evoluzione del crimine informatico richiede una manutenzione attiva dei propri diritti, dal Diritto all’Oblio alla trasparenza algoritmica, come sancito dall’Agenzia dell’UE per i Diritti Fondamentali (FRA). La resilienza digitale inizia con la consapevolezza che ogni individuo possiede prerogative legali inalienabili nel mondo online.

AUTENTICAZIONI E
LOCALIZZAZIONI ANOMALE

Identificazione di accessi non autorizzati provenienti da coordinate geografiche incoerenti con il profilo utente.

SOTTOSCRIZIONI
MAI EFFETTUATE

Ricezione di comunicazioni relative a servizi mai autorizzati, sintomo di una fuga di dati personali o della vendita di database nel dark web.

SINTESI BIOMETRICA E
USURPAZIONE IMMAGINI

Utilizzo non autorizzato di campioni vocali o tratti somatici tramite intelligenza artificiale per finalità illecite.

Monitoring of access anomalies and perimeter integrity

Attempts to log in from unusual geographical locations or unauthorised changes to privacy settings are critical indicators of a potential breach. These anomalies often represent the initial stage of an intrusion aimed at gaining access to sensitive data.

In such cases, it is essential to act immediately by terminating active sessions and resetting credentials using multi-factor authentication (MFA), in order to isolate the threat and prevent a wider breach. Proactive monitoring thus transforms system notifications into essential tools for the protection of personal data.

Disclosure of information assets and unsolicited subscriptions

La ricezione frequente di comunicazioni o iscrizioni a servizi mai autorizzati è un chiaro segnale di esposizione dei dati personali in circuiti illeciti. Indica che una piattaforma terza è stata violata e che i dati possono essere stati diffusi o venduti, anche nel dark web, per attività malevole.

These signs often foreshadow attempts at phishing or identity theft. It is therefore essential to take immediate protective measures, such as using identity protection services, monitoring for any breaches and updating your login details. Furthermore, it is advisable to report the incident to the relevant authorities to minimise the risk of fraud or reputational damage.

Biometric impersonation and combating synthetic content

The use of artificial intelligence to create ‘digital twins’ constitutes a violation of fundamental rights, as it alters reality for the purposes of manipulation or fraud. In such cases, procedures must be put in place immediately to rectify and erase data processed unlawfully, in line with the European frameworks on fundamental rights.

Protection also relies on digital identity certification: standards such as C2PA make it possible to verify the provenance of content and safeguard personal data, ensuring that any tampering is traceable and legally actionable. This approach transforms identity protection into a proactive strategy, strengthening both personal and institutional resilience.

Let’s defend humanity
in the digital age

Costruiamo percorsi condivisi e innovativi per
proteggere chi ne ha bisogno

/ CYBER NEWS