Article 45 of legislative decree no. 5/2012 (the so-called simplification order), has altered the Code of Privacy, abolishing for those who manage sensitive personal data, using IT tools, the obligation to draft the security programme document by March of each year.
