Restraint of Trade, IP and POPIA vs Italian Non-Competes and GDPR

A standard South African contract usually includes a restraint of trade, an IP clause and a POPIA consent or notice. Copied into an Italian contract, the restraint is often void, and the privacy clauses miss what Italian law requires. Full comparison on Italy vs South Africa .

South Africa: restraint of trade  

South African courts apply the common law. Since the Appellate Division’s decision in Magna Alloys and Research v Ellis (1984), a restraint is enforceable unless the employee shows it is unreasonable and contrary to public policy . Courts weigh whether the employer has a protectable interest (trade secrets, customer connections), whether the restraint goes beyond protecting it, and the employee’s interest in working. There is no statutory requirement to pay for a restraint, and courts can enforce part of an over-broad clause.

Italy: article 2125 of the civil code  

Italy starts from the other end. A non-compete covering the period after employment is valid only if it meets every condition in art. 2125 c.c. :

• In writing.
• Paid for: a specific payment (corrispettivo), proportionate to the restriction. No payment, or a token one, makes the clause void.
• Limited in object: tied to activities that genuinely compete, not the employee’s whole profession.
• Limited in time: maximum five years for executives (dirigenti), three years for everyone else. Longer terms are cut back.
• Limited in place: a defined territory consistent with the business.

In practice, payments are often a percentage of salary paid during employment or a lump sum at exit. If the employer wants to keep a right to withdraw the restraint at the end of employment, that option must be drafted carefully; courts often strike it down.

During employment: duty of loyalty  

While employed, every Italian employee owes a statutory duty of loyalty ( art. 2105 c.c. ): no competing business on their own or someone else’s account, and no disclosure or use of the employer’s information to its detriment. This applies without any clause, much like the South African common-law fiduciary duty.

Intellectual property  

In both countries, work created in the course of employment generally belongs to the employer. Italian law gives the employer rights over employee inventions and software made within the job; for inventions outside the job description, the employee may be entitled to fair compensation. A clear IP and confidentiality clause in the Italian contract is still advisable.

POPIA vs GDPR  

POPIA sets conditions for lawful processing, gives data subjects rights, regulates cross-border transfers and is enforced by the Information Regulator , with which responsible parties must register an Information Officer. An Italian employer is under the GDPR and the Italian privacy code, enforced by the Garante. The principles are close: lawful basis, purpose limitation, minimisation, security and breach notification. The differences that matter for an Italian employee:

• Consent is rarely a valid basis in employment under GDPR; use contract, legal obligation or legitimate interest, and give a clear privacy notice.
• Sending Italian employee data to South Africa is a transfer outside the EEA. South Africa has no EU adequacy decision, so you need safeguards such as standard contractual clauses.
• A data protection officer is required only in specific cases; there is no general registration duty like POPIA’s Information Officer registration.

Monitoring: article 4 of the Workers’ Statute  

South African employers often monitor email, devices and productivity subject to RICA and POPIA. In Italy, article 4 of the Workers’ Statute restricts it sharply. Tools that allow remote monitoring of employees (cameras, tracking software) can be installed only for organisational, production, safety or asset-protection reasons, and only with a union agreement or authorisation from the labour inspectorate. Ordinary work tools (laptop, email) are exempt from that step, but data from them can be used only if employees received proper information on how monitoring works, in line with GDPR. Keystroke loggers and screen-capture productivity tools are high risk.

Side by side  

Common questions from South African employers  

Can we just reuse our South African restraint clause? Not safely. Without a specific payment and limits on object, time and place, an Italian court will treat it as void, and you cannot ask a court to rewrite it into something valid the way you might hope.

How much should we pay for a non-compete? There is no statutory figure. Courts look at proportionality to the sacrifice: the wider and longer the restraint, the higher the payment. Many employers pay a percentage of salary for each year of restraint.

Is a non-solicitation clause treated the same way? A clause stopping the employee from soliciting clients after exit is usually treated as a non-compete and must meet art. 2125. A clause on not poaching colleagues is assessed more flexibly, but should also be limited.

Do we need consent under GDPR to run payroll? No. Payroll rests on the contract and legal obligations. Consent is needed only in narrow cases, and even then it must be freely given.

What this means if you hire through an EOR  

The EOR’s Italian contract includes a compliant non-compete if you need one, with the payment built into the cost, and a GDPR privacy notice. Tell us early if the role needs a restraint: adding one later requires a new agreement and payment. For data, the EOR is the controller of payroll data; your company processes work data and needs transfer safeguards. Read Italian employment contracts , see Italy vs your country , and price a paid non-compete in the calculator .

Related guides for companies in South Africa  

• LRA fair dismissal vs Italian dismissal rules
• BCEA vs the Italian contract and CCNL
• Retrenchment and severance vs TFR

General information, not legal advice. Need a restraint drafted? Contact us .