Cybersecurity, data protection, and artificial intelligence have become crucial to the competitiveness of tourism businesses. As part of the ARTOUR (Artificial Intelligence and Robotics for Tourism) project—co-funded by the Interreg Italy-France Maritime Programme—START4.0 has launched a specialized NIS2 compliance service for Infoelba Srl. Based on the island of Elba, Infoelba has spent over thirty years combining IT expertise with digital services for the tourism sector.
The ARTOUR project: advanced technologies for the tourism industry
ARTOUR supports tourism businesses within the cross-border cooperation area in adopting artificial intelligence and new technologies in an effective, secure, and sustainable manner. The service provided to Infoelba is facilitated by START4.0 through the project’s indirect state aid mechanism, allowing the company to receive specialized support without having to bear the full cost itself.
Infoelba: digital solutions for tourism on Elba
Located in Portoferraio—within the project’s cooperation area—Infoelba exemplifies the digital evolution of the sector. The company:
manages its own tourism portal;
develops websites, applications, and digital services, primarily for tourism businesses and operators on Elba;
is an accredited registrar for .it domains;
directly manages infrastructure and hosting services.
From “important” to “essential” entity: the impact of the NIS2 Directive
This initiative has gained even greater significance following a recent notification: Infoelba has been reclassified as an “essential entity” under the NIS2 Directive, having previously been categorized as an “important entity.”
This change stems from the nature of the services the company manages; Infoelba oversees approximately 1,200 domains—both its own and those of its clients—along with their corresponding registrations in the .it registry. Services of this nature necessitate:
structured cyber risk management;
infrastructure security;
appropriate information governance.
The START4.0 program guides businesses in meeting key obligations regarding cybersecurity and personal data protection, with a particular focus on the NIS2 Directive and the GDPR.
NIS2 and tourism: why it also concerns small businesses
The case of Infoelba highlights an often-overlooked aspect: even a small enterprise can fall within the scope of the NIS2 Directive. What matters is the nature and significance of the digital services provided—not merely the number of employees or annual turnover.
This is a highly relevant issue for the tourism sector. While the industry may not appear inherently “technology-oriented,” it now relies daily on portals, booking systems, cloud services, and AI-driven applications. These tools are essential for operations and competitiveness, and they must be protected.
Artificial intelligence, data, and security: three facets of the same innovation
Infoelba incorporates artificial intelligence-based features into its CRM systems. This case touches upon one of the core themes of ARTOUR: innovation, data usage, cybersecurity, and compliance are now inextricably linked. As AI becomes increasingly integrated into business processes, the need for secure systems and proper personal data management grows.
The role of START4.0: going beyond mere compliance
START4.0 is a highly specialized national Competence Center with a strong focus on cybersecurity. Through its support, ARTOUR guides Infoelba along a path that extends beyond formal regulatory compliance. Security, data protection, and compliance become integral components of a more informed and robust digital innovation strategy.
This serves as a concrete example of how ARTOUR can assist tourism businesses in the cross-border region as they grow through new technologies, ultimately strengthening their competitiveness.