Lessons learned from the Italian law on privacy – Part II