Law n. 133 passed on Aug. 6, 2008 amends the Italian Data Protection Code and allow conglomerates and multi-national companies to freely exchange personal data, provided that their internal corporate rules system matches Italian Data Protection Regulation.
This is a way to circumvent the strict limits imposed by former regulation, that forbade the exchange of personal data with countries (like United States of America) with a lower level of personal data legal protection.