The local legal context
Vatican Decree DCCII introduced Governorate artificial intelligence guidelines effective from January 2025. This institutional framework must be assessed alongside the relevant personal data and procurement rules. The EU AI Act should not be imported as Vatican domestic legislation, although suppliers or deployments elsewhere may independently fall within its territorial scope.
Jurisiti can help review a proposed system’s purpose, users, training material and effects on individuals. Establish who can authorise deployment, what human oversight is needed and which information may be shared with vendors. Contracts should address testing, accuracy, security, intellectual property, audit access and termination. Sensitive administrative or cultural uses need a documented decision process tied to the actual institution and technology rather than a generic statement that the product is compliant.
Key laws & official sources
Establishes the Governorate AI framework, effective from 1 January 2025.
Regulates covered Governorate processing within its defined material and territorial scope.
Confirm the competent institution, territorial scope and operative rules with appropriately authorised advisers; State, Holy See, canonical and foreign procedures may differ.
Practical next steps
- Identify the deploying institution and authorised use.
- Document data inputs, oversight and supplier responsibilities.
- Assess Vatican rules and any separate foreign regulatory connection.
Documents to prepare
- Product description and system architecture
- Supplier contracts and data-flow records
- Risk assessments and deployment timeline
How Jurisiti can help
Describe what the system actually does, who develops it and who uses its outputs. AI, privacy, cybersecurity, consumer and sector-specific rules can overlap without sharing the same scope or commencement date. Allocate responsibilities in contracts while checking the current applicable phase of any regulatory framework.
- Software, cloud and outsourcing contracts
- AI systems, roles and governance
- Platform duties and cyber incident planning
Questions about your matter
How do I start a technology, ai & digital services enquiry in Vatican City / Holy See?
Identify the jurisdiction, the people involved, any existing proceeding or deadline, and the result you need. A short chronology and the key documents help define the proposed engagement before local professional arrangements are confirmed.
Can a cross-border matter involve more than one legal system?
Yes. Vatican City / Holy See may be one part of a wider matter involving another place of residence, contracting party, asset or forum. Applicable law, jurisdiction and enforcement should be assessed separately, using the relevant national and international rules.
Does this guide establish a lawyer-client relationship?
No. An enquiry or use of this guide does not establish an engagement. Conflicts, professional authority, scope, responsibilities and fees must be confirmed before work is undertaken.
These guides provide general legal information. The operative law, deadlines, professional permissions and scope of work are confirmed for the particular matter. Representation is arranged through appropriately authorised local practitioners.