According to the International Association of Privacy Professionals (IAPP), Italy's data protection authority, the Garante, has released some frequently asked questions on processing personal data during the COVID-19 pandemic. This document offers answers to questions on data processing by public and private employers, by schools and in health care, clinical trials and medical research. Questions include for instance 'Is it legitimate for a healthcare professional, when performing a test for COVID-19, to ask the patient about the identity of the virus-positive person with whom that patient has been in close contact?'