The Italian Data Protection Authority (Garante) has published a guide of recommendations for the protection of personal data on the occasion of the Halloween celebration.

The authority warns against the online publication of photos and videos of minors in costume. It highlights the risks related to their long-term retention in the digital space, their potential use by malicious persons or artificial intelligence systems, and the infringement of children's right to self-determination of their image. It is therefore advised not to publish such content or, failing that, to limit its visibility to friends. The authority also recommends making minors' faces unrecognizable, for example through pixelation, and obtaining the consent of holders of parental authority for other children present. The same caution applies to sharing in messaging groups, where the use of the single-view feature is a useful precaution.

The guide also alerts to the risks of phishing attempts by email, SMS, or messaging, presented as promotional offers or gifts. These messages aim to infect devices with malware to steal personal and banking data. It is recommended to verify the reliability of the sender and the offer before clicking on links or providing information. Attention should also be paid to fake online shopping sites and fake shipping notifications. Finally, the authority recalls the importance of basic security measures, such as updating software, using antivirus, and enabling two-factor authentication to protect personal accounts.