smsroute
Get Started
149 countries · crypto-native · no KYC

SMS API in Italy 2026: GDPR, the Garante, and the RPO

Italy runs on GDPR/ePrivacy opt-in consent for SMS, enforced by the Garante. Its well-known RPO opt-out registry governs telemarketing calls and paper mail. For text, documented consent is the binding gate. Here's how to comply.

Start Sending SMS View API docs
smsroute editorial team · Last reviewed · 4 min read
$0.048/msg to Italy from 90ms median 98.6% delivered
SMS API in Italy 2026: GDPR, the Garante, and the RPO — smsroute
$0.048
per SMS to Italy
3 direct
TIM · Vodafone · Wind Tre
90 ms
median submission
98.6%
delivered success
An SMS API in Italy runs on one binding requirement for marketing text: prior, free, specific, documented opt-in consent under the GDPR and the Italian Data Protection Code (Codice Privacy, art. 130), enforced by the Garante (Garante privacy, 2026). That is the gate a marketing SMS must clear. Italy is also famous for the RPO (the Registro Pubblico delle Opposizioni), but it's widely misunderstood: under DPR 26/2022 the RPO is a national opt-out registry for telemarketing *calls* and paper mail, not for SMS. So the honest picture is cleaner than the two-gate story often told: for SMS, consent plus a working opt-out is the law; the RPO is the voice-channel control you should know about if you also call.
On this page
  1. Opt-in consent, enforced by the Garante
  2. The Italian rules
  3. Sending compliantly in Italy
  4. Sending to Italy in practice

Opt-in consent, enforced by the Garante

How does the Garante enforce opt-in consent for SMS in Italy?

The Garante requires explicit opt-in consent for SMS marketing in Italy. SMSRoute supports compliant sending with adaptive multi-route delivery and real-time DLR webhooks, ensuring your messages meet local regulations without needing KYC or identity documents.

An SMS API in Italy runs on one binding requirement for marketing text: prior, free, specific, documented opt-in consent under the GDPR and the Italian Data Protection Code (Codice Privacy, art. 130), enforced by the Garante (Garante privacy, 2026). That is the gate a marketing SMS must clear. Italy is also famous for the RPO (the Registro Pubblico delle Opposizioni), but it's widely misunderstood: under DPR 26/2022 the RPO is a national opt-out registry for telemarketing *calls* and paper mail, not for SMS. So the honest picture is cleaner than the two-gate story often told: for SMS, consent plus a working opt-out is the law; the RPO is the voice-channel control you should know about if you also call.

SMSRoute's published route page for Italy lists direct-carrier delivery via TIM, Vodafone, Wind Tre from $0.048/message, with 90ms median submission and 98.6% delivered success (smsroute.cc route pages, 2026). The API supports both SMPP and REST for integration, and messages are automatically encoded in GSM-7 or UCS-2 as needed.

The Italian rules

What are the Italian SMS rules for GDPR compliance?

Italian SMS rules under GDPR mandate clear consent, data minimization, and the right to withdraw. SMSRoute’s no-KYC API and crypto billing let you send compliantly to Italy from $0.004 per message, with automatic failover and refunds for undelivered messages.

The Italian rules — comparison diagram
Requirement Detail
Consent (SMS) Prior, free, specific, documented opt-in (GDPR + Codice Privacy art. 130)
Enforcer The Garante (Italian DPA)
RPO registry National opt-out list for telemarketing calls + paper mail — not SMS (DPR 26/2022)
Sender IDs / short codes Comply with AGCOM rules
Opt-out Provide and honor a direct opt-out on every marketing SMS

The consent standard is the EU baseline: prior, free, specific, and documented, mirroring the GDPR discipline across Europe, with the Garante enforcing (Garante privacy, 2026). The point senders get wrong is the RPO. The public opposition registry was extended by DPR 26/2022 to cover all phone numbers and paper mail — but its scope is *telemarketing calls* and printed advertising, not text messages. Marketing SMS is instead governed by opt-in consent under Codice Privacy art. 130. Sender IDs and short codes follow AGCOM (the communications regulator) rules. So Italy is, for SMS, a straightforward consent market — closer to Germany than to registry-scrub markets like Brazil.

Sending compliantly in Italy

How can I send SMS compliantly in Italy?

To send SMS compliantly in Italy, use SMSRoute’s REST API or SMPP with opt-in consent. Our platform offers real-time DLRs, custom sender IDs on request, and 24/7 support. All without KYC, making compliance straightforward and fast.

  1. Get GDPR opt-in consentPrior, free, specific, documented opt-in under GDPR and Codice Privacy art. 130. Keep records. The Garante enforces this, and it is the gate for SMS.
  2. Provide and honor a clear opt-outEvery marketing SMS needs an easy opt-out, honored promptly, per the opt-out basics. This (not an RPO scrub) is the ongoing suppression duty for text.
  3. If you also run voice campaigns, check the RPOFor telemarketing *calls* (and paper mail), scrub against the Registro Pubblico delle Opposizioni before dialing. It doesn't gate SMS, but it's mandatory for the voice channel.
  4. Follow AGCOM sender rulesSender IDs and short codes comply with AGCOM. Transactional traffic (OTP) rests on the relationship. The transactional carve-out applies.

The trap in Italy isn't the RPO. It's assuming SMS works like the voice channel. For text, there is no registry to scrub. Your compliance rests entirely on documented opt-in consent and a working opt-out. Get consent wrong and no registry check saves you.

Sending to Italy in practice

SMSRoute is a no-KYC SMS API with crypto billing (BTC, ETH, USDT, XMR, LTC, and SOL) serving the international route to Italy, with live pricing on the send SMS to Italy page. Italy supports alphanumeric sender IDs without a heavy registration barrier, so the friction is consent, not routing. For transactional and OTP traffic resting on the relationship, the route delivers to Italian users cleanly. The API provides delivery reports (DLR) via webhook so you can track message status.

And if you also call Italian numbers, remember the RPO applies there.

GDPR DisciplineBlog article
GermanyBlog article
BrazilBlog article

FAQ

What consent is required for SMS marketing in Italy?
Prior, free, specific, and documented opt-in consent under the GDPR and the Italian Data Protection Code (Codice Privacy, art. 130), enforced by the Garante. For SMS this is the binding requirement — you obtain opt-in before sending and honor a clear opt-out on every message. Keep consent records, because the Garante can ask for them.
Does the RPO opt-out registry apply to SMS in Italy?
No. The Registro Pubblico delle Opposizioni, extended by DPR 26/2022, is a national opt-out registry for telemarketing calls and paper advertising mail — not SMS. Marketing text in Italy is governed by opt-in consent under Codice Privacy art. 130, not by an RPO scrub. If you also place telemarketing calls, you must check the RPO for that channel.
Is GDPR consent enough to send marketing SMS in Italy?
Yes — for SMS, documented GDPR/ePrivacy opt-in consent plus a working opt-out is the compliance requirement, enforced by the Garante. There is no separate SMS registry to scrub in Italy; the RPO people often cite governs telephone calls and paper mail, not text. So clear one gate properly — genuine, recorded opt-in — and honor opt-outs.
Who regulates SMS in Italy?
The Garante (Italian Data Protection Authority) enforces GDPR and the Italian Data Protection Code for SMS consent and personal data, while AGCOM (the communications regulator) governs sender IDs and short codes. The RPO opt-out registry exists too, but it covers telemarketing calls and paper mail rather than SMS. For text, the Garante and opt-in consent are what matter.

Send your first SMS in 5 minutes

How do I send my first SMS in 5 minutes with SMSRoute?

Sign up with just an email, fund with crypto (BTC, ETH, USDT, XMR, LTC, SOL), get your API key, and send your first SMS to Italy in minutes. Free test credits verify routes before you pay, with 99.9% uptime and automatic refunds.

No KYC. Pay with BTC, ETH, USDT, XMR, LTC, and SOL. Live routes to 149 countries.

Get an API key →