Safer Internet Day is an international awareness-raising day dedicated to promoting the safe, informed and responsible use of the Internet. It was established in response to the growing centrality of the Internet in everyday life and aims to draw attention to the risks of the digital environment, such as violations of privacy, cyberbullying and the misuse of personal data, without overlooking its opportunities. At the international level, Safer Internet Day is promoted by the European Commission, which coordinates the initiative through a network of specialized centers operating in different countries, confirming that online safety represents a strategic priority of European policies. The importance of this day can be understood in light of the pervasiveness of the Internet in daily life: the network is no longer an ancillary tool, but a true living space that affects social relationships, education, work and the exercise of fundamental rights, posing new legal, social and ethical challenges. In response to this evolution, European Community bodies have progressively acted to govern the expansion of Internet use, pursuing a balance between online freedom and the protection of individuals, and complementing regulatory interventions with prevention and awareness-raising initiatives aimed at building a conscious and responsible digital citizenship. The main European legislative source focused on the protection of personal data is Regulation (EU) 2016/679, known as the General Data Protection Regulation (GDPR). The Regulation was adopted on 27 April 2016 by the European Parliament and the Council of the European Union, entered into force on 24 May 2016, and became fully applicable from 25 May 2018, marking a significant change in the discipline of privacy in the digital context. The GDPR is framed as a regulation safeguarding the fundamental rights and freedoms of natural persons, placing at the center the protection of personal rights, privacy, dignity and informational self-determination of users in the digital sphere. Article 1(1) of the Regulation establishes this purpose of personal data protection as a fundamental right (in connection with Article 8 of the Charter of Fundamental Rights of the European Union), while paragraph 2 ensures the free movement of such data within the European context, thus balancing the recognition of fundamental rights with the needs of the digital market. The Regulation defines the limits of personal data processing through a series of general principles set out in Article 5, including lawfulness, fairness and transparency, purpose limitation, data minimization and storage limitation. These principles aim to prevent invasive, disproportionate and unnecessary processing, strengthening the protection of individuals against the indiscriminate use of personal information in the digital environment, and strictly limiting practices such as profiling, user tracking and the commercial exploitation of personal data. As a European regulation, the GDPR is directly applicable and binding in all Member States, without the need for national transposition, ensuring uniform protection of personal data for all citizens. Subsequently, the Italian State adapted its legal system to the new European framework through Legislative Decree No. 101/2018, which amended the Privacy Code (Legislative Decree No. 196/2003), in order to avoid contradictions and define it as a supplementary source to the Regulation. Among the most relevant changes are the regulation of consent for minors under the age of 14, the abandonment of purely formal requirements in favor of the principle of accountability of the data controller, and the strengthening of the powers of the Italian Data Protection Authority (Garante per la protezione dei dati personali), an independent supervisory authority essential for monitoring data processing carried out via the Internet and operations on digital platforms.