Article 14 of Law no. 183 4th November 2011 introduces significant changes in the treatment of personal data by public institutions. This paper provides a preliminary overview on the existing framework based on D. Lgs. 196/2003 (Code on personal data protection) and then move to the deepening of the two legislative innovations. It concludes with some critical remarks.