Civil liability of platforms for AI-generated content

1. The fact

   The issue of civil liability for erroneous outputs emerged strongly in Italy following the measures of the Italian Data Protection Authority which, in March 2023, raised the issue of data inaccuracy, highlighting how algorithmic hallucinations can harm the reputation of the individuals involved.

   As reported by the specialized press, the debate focused on the need to ensure the accuracy of information provided by language models. Currently, the matter is in a phase of defining jurisdiction and the scope of liability: there are no final Supreme Court rulings yet, but the procedural debate focuses on the provider's classification as an active hosting provider. The established facts show that generative models can produce false statements presented as factual truths, prompting victims' counsel to challenge the immunity typically enjoyed by digital intermediaries.

2. 

   The rules at play

   The regulatory focus rests on Legislative Decree 70/2003 and the new Digital Services Act (EU Regulation 2022/2065), which govern the liability exemption for intermediaries. However, Civil Code provisions play a crucial role: Art. 2043 for general tort liability, Art. 2049 for the liability of masters and employers applied to the algorithm as an auxiliary, and especially Art. 2050 regarding the exercise of dangerous activities.

   The latter provision is invoked because using generative AI without truth filters could be equated to an inherently risky activity, shifting the burden of proof to the provider.

3. What the case law says

   The case law of the high courts has clarified over time the distinction between a passive hosting provider and an active one. According to established trends, a provider that indexes, organizes, or generates content loses the benefit of liability exemption if it fails to prove it acted with the required diligence.

   The Court of Justice of the EU has also emphasized that immunity is lost when the platform operator plays an active role giving it knowledge or control over the data. Applying these principles to AI, the legal debate explores the possibility of holding software companies responsible for the generated output, evaluating their position regarding any resulting reputational damage.

5. Analysis drafted and verified with edit.legal

   To verify the provisions cited in this article, we used edit.legal. Test our legal AI on official sources and apply it to your own matters.

   Try edit.legal AI

8. Lessons for professionals

   The analysis of the regulatory framework highlights key points. First, the timely preservation of technical evidence regarding the harmful output before the model is updated is crucial. Second, the study suggests considering the coexistence of different liability grounds, from general Aquilian liability to liability for dangerous activities.

   Third, timely notification to the provider is essential for establishing the intermediary's knowledge of the error for the purposes of the Digital Services Act.

References: Art. 2043 Codice CivileArt. 2049 Codice CivileArt. 2050 Codice CivileD.lgs. 70/2003Regolamento (UE) 2022/2065 (Digital Services Act)

Editorial oversight: Avv. Federico Papa·ICAMUpdated 27 May 2026Content drafted with AI support and subject to editorial source checks. Despite these controls, inaccuracies may remain: reports and rectification requests are welcome. Report a correction