The application of the Italian law No. 24/2017, which focused on patient safety and medical liability, in the Italian National Health Service has been evaluated by a survey conducted five years after the promulgation of the law. The law required the establishment of healthcare risk management and patient safety centers in all Italian regions and the appointment of a Clinical Risk Manager (CRM) in all Italian public and private healthcare facilities. This study demonstrates that five years after the approval of the law, it has not yet been fully implemented. The survey revealed a lack of adequate permanent staff in all the Regional Centers, with two employees on average per Center. Few meetings were held with the Regional Healthcare System decision-makers with less than four meetings per year. This reduces the capacity to carry out functions. In addition, the role of the CRMs is weak in most healthcare facilities. More than 20% of CRMs have other roles in the same organization. Some important tasks have reduced application, e.g., assessment of the inappropriateness risk (reported only by 35.3% of CRM) and use of patient safety indicators for monitoring hospitals (20.6% of CRM). The function of the Regional Centers during the COVID-19 pandemic was limited despite the CRMs being very committed. The CRMs units undertake limited research and have reduced collaboration with citizen associations. Despite most of the CRMs believing that the law has had an important role in improving patient safety, 70% of them identified clinicians’ resistance to change and lack of funding dedicated to implementing the law as the main barriers to the management of risk.