Legal disclosure obligations

The question “is hiding being trans a crime?” is one of the most searched online by Italian transgender people. Behind this search lies a concrete anxiety: the fear that one’s identity could be used against oneself, that a hidden obligation exists in the penal code, that silence about one’s history could have legal consequences. The answer, grounded in Italian and European law, is clear: no, there is no legal obligation to disclose being transgender. This article analyzes in detail why, examining privacy regulations, protections in personal and work relationships, medical confidentiality, and the international comparison.

The fundamental principle: privacy as a right

The Italian Constitution

The right to privacy regarding one’s gender identity rests on solid constitutional foundations. Article 2 of the Constitution recognizes and guarantees the inviolable rights of the person, both as an individual and within the social groups in which their personality develops. The Constitutional Court, beginning with ruling no. 161/1985, established that the right to gender identity falls within the broader right to the realization of one’s own personality protected by this article [5].

Article 3 enshrines the principle of equality and the prohibition of discrimination. Read together, these two articles construct a framework in which a person’s gender identity is protected data, the disclosure of which cannot be imposed by the State or by third parties.

Law 164/1982 and the principle of confidentiality

Law No. 164 of 1982, which governs the rectification of sex attribution, contains a fundamental principle that is often overlooked. Article 5 (originally Article 4) establishes that civil status certificates relating to a person whose sex attribution has been rectified by court order must be issued with the sole indication of the new sex and the new name [1]. This means that the legislature, already in 1982, intended to protect the privacy of trans people: after legal rectification, no official document should reveal the previous gender.

This principle has important implications: if the State itself guarantees that no trace of the transition should remain in documents, it would be contradictory to impose a disclosure obligation on the person in private relationships.

The GDPR: gender identity as sensitive data

The regulatory classification

The General Data Protection Regulation (GDPR, EU Regulation 2016/679) provides enhanced protection for information relating to gender identity. Article 9 of the Regulation classifies among “special categories of personal data” — so-called sensitive data — those revealing racial or ethnic origin, political opinions, religious convictions, as well as data concerning health and sexual life or sexual orientation [2].

The data relating to a person’s transgender condition falls within this enhanced protection on multiple grounds: as data capable of revealing health status (when linked to a medical pathway), as data relating to sexual life or sexual orientation, and in any case as information whose unauthorized disclosure could expose the person to discrimination [7]. The Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) has confirmed that data relating to gender identity and sexual orientation fall within the special categories deserving specific protection [10].

Practical implications

The processing of sensitive data is prohibited, unless one of the exceptions exhaustively provided by Article 9 of the GDPR applies, including the explicit consent of the data subject [2]. In everyday practice, this means that a person’s transgender condition must be known exclusively to those who have been expressly informed by the person concerned. Any unauthorized disclosure — by an employer, a colleague, an acquaintance, an ex-partner — constitutes a GDPR violation with corresponding penalties [7].

Anyone who discloses without consent the gender identity of a trans person may incur the administrative sanctions provided by Articles 83 and 84 of the GDPR. In the most serious cases, the conduct may constitute the crime of unlawful processing of personal data under Article 167 of Legislative Decree 196/2003 (Personal Data Protection Code), which punishes with imprisonment from one to three years anyone who processes sensitive data in violation of the regulations, causing harm to the data subject [4].

Romantic and sexual relationships: ethical or legal obligation?

What Italian law says

This is the point that generates the most anxiety and the most misinformation. The question is direct: is a trans person obligated to disclose their gender identity to a sexual or romantic partner?

The Italian legal answer is equally direct: no. There is no provision in the Italian penal code that imposes disclosure of gender identity in intimate relationships. No Italian court has ever convicted a transgender person for the mere fact of not having revealed their transition history to a partner [8].

Legal analysis has considered two hypothetically invocable criminal offenses. The first is impersonation (Art. 494 of the Penal Code): however, as clarified by legal doctrine, this crime requires an active and intentional act of deception, aimed at obtaining an advantage or causing harm [8]. A trans person living in their gender is not “impersonating” anyone — they are simply existing in their own identity. It is not possible to confuse being transgender with a form of identity fraud.

The second hypothesis is that of sexual violence through vitiated consent: sexual consent would be invalid because formed on an incomplete information basis. But this thesis has also been rejected by the majority of legal scholars: it is not possible to require that, before a sexual encounter, partners must mutually confess every aspect of their personal, medical, or identity history [8]. There is no general obligation of preventive disclosure, neither for trans people nor for anyone else.

The ethical dimension

The ethical question is separate from the legal one and deserves honest reflection. Many trans people choose to reveal their history to partners, and this choice can strengthen trust and intimacy in the relationship. But this is a personal decision, not a duty. Disclosure is an act of trust that only makes sense when it occurs in conditions of safety and mutual respect.

It is worth emphasizing a point often overlooked: the social pressure to “confess” being trans presupposes that a person’s gender identity constitutes a deception toward others. This premise is false. A trans woman is a woman. A trans man is a man. There is nothing to “confess” — there is, at most, a personal story that one can choose to share.

Medical confidentiality

Professional secrecy

Medical professional secrecy represents one of the most robust protections for transgender people. Article 622 of the Penal Code punishes anyone who, having learned of a secret by reason of their status, office, profession, or trade, reveals it without just cause or uses it for their own or others’ profit. The penalty is imprisonment for up to one year or a fine from 30 to 516 euros [3].

All information relating to a person’s transition history — diagnoses, hormonal therapies, surgical interventions, psychological support — is covered by professional secrecy. A doctor, psychologist, nurse, or pharmacist who reveals a patient’s transgender condition to third parties without their consent would be committing a criminal offense [3].

The Code of Medical Ethics

Article 10 of the Code of Medical Ethics reaffirms that the doctor must maintain secrecy about everything they learn in the exercise of their profession. This obligation does not cease with the patient’s death and is not limited in time. Violation of professional secrecy, in addition to constituting a criminal offense, exposes the doctor to disciplinary sanctions from the professional Order, which can extend to being struck off the register.

Exceptions to medical secrecy

The exceptions to professional secrecy are exhaustive and do not include the curiosity of third parties about a patient’s gender identity [3]. The doctor may derogate from secrecy only in the presence of “just cause,” such as the obligation to report crimes prosecutable ex officio, the protection of a superior vital interest, or specific legal obligations. A mere request from a family member, employer, or partner to know whether a person is transgender does not constitute just cause.

Protections in the workplace

What the employer cannot ask

Legislative Decree 216/2003, implementing European Directive 2000/78/EC, prohibits discrimination in the workplace based, among other things, on sexual orientation [9]. Italian case law has extended these protections to transgender people as well, categorizing it as sex-based discrimination. At the European level, Directive 2006/54/EC (Gender Recast Directive) explicitly includes a reference to discrimination based on gender reassignment.

Within this regulatory framework, the employer has no right to know the medical history or prior gender identity of an employee. During interviews, questions about gender identity, transition history, or the status of civil registry documents are illegitimate [9]. After legal rectification, all documents — employment contract, payslip, identification badge — must bear the correct name and gender [1]. But even before rectification, the employer is not entitled to investigate the employee’s gender identity.

Outing in the workplace

If a colleague or superior reveals without consent the transgender condition of a worker, the conduct may constitute various unlawful acts: violation of privacy regulations (GDPR and Legislative Decree 196/2003) [2][4], mobbing (if the conduct is repeated and systematic), defamation (Art. 595 of the Penal Code, if it occurs in the presence of multiple people and damages the person’s reputation), and discrimination under Legislative Decree 216/2003 [9]. A worker who is outed in the workplace has the right to appeal to the Data Protection Authority, file a discrimination complaint, and, in the most serious cases, seek compensation for damages.

Alias identity at work

In the absence of specific legislation, some public administrations and private companies have adopted alias identity policies that allow transgender employees to use their chosen name in internal communications, company emails, and badges, even before legal rectification. The Ministry of Justice issued a circular in September 2024 for the activation of alias identity for employees of the Judicial Administration, marking an important step in recognizing the dignity of trans people in public employment.

European protection: Article 8 ECHR and case law

The right to private life

Article 8 of the European Convention on Human Rights (ECHR) enshrines the right to respect for private and family life. The European Court of Human Rights has built, through decades of case law, a solid framework of protection for transgender people that has direct implications on the question of disclosure [6].

In the Christine Goodwin v. United Kingdom judgment (2002), the Grand Chamber recognized without ambiguity that gender identity constitutes an essential aspect of a person’s intimate identity, protected by Article 8 [6]. In the S.V. v. Italy judgment (2018), the Court condemned Italy for denying a transgender woman the ability to change her name in the absence of a judicial determination of “full sex change,” ruling that this limitation violated the right to respect for private life [11].

Implications for disclosure

The case law of the Strasbourg Court has progressively recognized that the failure to recognize gender identity, and thus the forced exposure of the transition history, constitutes a violation of Article 8 [6][11]. The principle is clear: if gender identity falls within the most intimate sphere of private life, no one can be obligated to reveal it.

The ECHR’s thematic fact sheet on gender identity issues confirms this evolution: the Court is moving toward recognizing the right to legal gender change on an unconditional basis, strengthening the principle that transition history belongs to the person’s private sphere and is not subject to disclosure obligations [6].

International comparison

United Kingdom: the most controversial case

The Gender Recognition Act 2004 of the United Kingdom contains a provision explicitly dedicated to the protection of information about gender transition. Section 22 of the law defines information relating to the gender recognition process as protected information and establishes that anyone who learns of it in an official capacity commits an offense if they disclose it without the consent of the individual concerned [12].

However, the United Kingdom also presents a controversial aspect. In some judicial cases, such as the precedent established in McNally v R (2013), English courts held that the failure to reveal aspects of gender identity could vitiate sexual consent. In 2016, a trans man was convicted of sexual assault for having had consensual relations without disclosing being transgender. This jurisprudence has been widely criticized by legal scholars and human rights organizations, who have called it discriminatory: transgender people are the only social category subject to a judicial obligation of disclosure in intimate relationships.

This case highlights a significant difference from Italy: in our legal system, no analogous case law has ever been established [8].

Germany and Spain

In Germany, the Selbstbestimmungsgesetz (Self-Determination Act, 2024) not only allows the modification of legal gender through a simple declaration, but provides for penalties of up to 10,000 euros for anyone who intentionally reveals the previous name or gender of a person who has completed the procedure. The German law thus transforms privacy protection into an active obligation on third parties.

In Spain, the Ley Trans (2023) adopts a similar approach, based on self-determination and the protection of personal data relating to transition. In both countries, the legislative trend is to strengthen the privacy protections of trans people, not to impose disclosure obligations.

The overall picture

Globally, no democratic legal system provides a generalized obligation to disclose one’s gender identity. The international trend, documented by ECHR case law [6] and the most recent legislation, is in the opposite direction: protecting the right of trans people not to be exposed without their consent.

When disclosure may be relevant

Medical contexts

The only area in which sharing one’s transition history has a concrete functional relevance is the medical one. Informing one’s treating physician of the transition pathway — ongoing hormone therapies, previous surgical interventions, specific screening needs — is important for receiving appropriate care. A trans man taking testosterone may need gynecological screenings; a trans woman on estrogen therapy may have specific cardiovascular risks to monitor.

However, even in the medical context there is no legal obligation of disclosure: it is a choice in one’s own health interest. And, as already clarified, the doctor who receives this information is bound by professional secrecy [3].

Legal and bureaucratic procedures

Before legal rectification, certain bureaucratic situations may make disclosure unavoidable: an identity document that does not match the person’s physical appearance can generate questions in contexts such as airport checks, opening bank accounts, or signing contracts. This is a disclosure forced by the documentary discrepancy, not a legal obligation. Law 164/1982 and the rectification procedures exist precisely to eliminate this discrepancy [1].

Safety first

The question of disclosure cannot be addressed in the abstract, without considering the safety context. Transgender people, particularly trans women, face disproportionate levels of violence. The decision to reveal one’s gender identity in a given context is also — and often primarily — an assessment of personal safety.

Those who choose not to reveal their gender identity are not committing a deception: they are protecting their safety in a social context that is not uniformly safe. This choice is legitimate under the law, understandable on a human level, and recognized by European case law as an expression of the right to private life [6].

If you find yourself in a situation where you feel you must reveal your gender identity but do not feel safe, remember that you are not obligated to do so. And if you have experienced non-consensual outing, you have legal tools to protect your rights: the Data Protection Authority, associations such as the Lenford Network (LGBTI+ Rights Legal Association), and the anti-discrimination desks of UNAR can offer you concrete support.

Summary: what the law says

For clarity, here is a summary of the fundamental legal principles:

• There is no legal obligation to disclose being transgender in Italy, neither in personal, nor work, nor sexual relationships [8].
• Gender identity is sensitive data protected by the GDPR (Art. 9) and Italian privacy legislation [2][10].
• Anyone who discloses without consent the gender identity of another person may incur criminal and administrative sanctions (Art. 167 Legislative Decree 196/2003, Arts. 83-84 GDPR) [4].
• Medical professional secrecy covers all information relating to transition (Art. 622 of the Penal Code) [3].
• The employer cannot ask for information about an employee’s prior gender identity [9].
• After legal rectification, documents bear only the new name and gender (Law 164/1982, Art. 5) [1].
• The ECHR protects gender identity as an element of private life (Art. 8 of the Convention) [6].

The law is on your side. You don’t have to justify who you are to anyone.