Decentralized systems for the protection and portability of personal data

The General Data Protection Regulation (GDPR) has been designed to help promote a view in favor of the interests of individuals instead of large corporations. However, there is the need of more dedicated technologies that can help companies comply with GDPR while enabling people to exercise their rights. We argue that such a dedicated solution must address two main issues: the need for more transparency towards individuals regarding the management of their personal information and their often hindered ability to access and make interoperable personal data in a way that the exercise of one's rights would result in straightforward. We aim to provide a system that helps to push personal data management towards the individual's control, i.e., a personal information management system (PIMS). By using distributed storage and decentralized computing networks to control online services, users' personal information could be shifted towards those directly concerned, i.e., the data subjects. The use of Distributed Ledger Technologies (DLTs) and Decentralized File Storage (DFS) as an implementation of decentralized systems is of paramount importance in this case. The structure of this dissertation follows an incremental approach to describing a set of decentralized systems and models that revolves around personal data and their subjects. Each chapter of this dissertation builds up the previous one and discusses the technical implementation of a system and its relation with the corresponding regulations. We refer to the EU regulatory framework, including GDPR, eIDAS, and Data Governance Act, to build our final system architecture's functional and non-functional drivers. In our PIMS design, personal data is kept in a Personal Data Space (PDS) consisting of encrypted personal data referring to the subject stored in a DFS. On top of that, a network of authorization servers acts as a data intermediary to provide access to potential data recipients through smart contracts.

Essays on Innovative Activity and the Protection of Innovations

This dissertation looks at three widely accepted assumptions about how the patent system works: patent documents disclose inventions; this disclosure happens quickly, and patent owners are able to enforce patents. The first chapter estimates the effect of stronger trade secret protection on the number of patented innovations. When firms find it easier to protect business information, there is less need for patent protection, and accordingly less need for the disclosure of technical information that is required by patent law. The novel finding is that when it is easier to keep innovations, there is not only a reduction in the number of patents but also a sizeable reduction in disclosed knowledge per patent. The chapter then shows how this endogeneity of the amount of knowledge per patent can affect the measurement of innovation using patent data. The second chapter develops a game-theoretic model to study how the introduction of fee-shifting in US patent litigation would influence firms’ patenting propensities. When the defeated party to a lawsuit has to bear not only their own cost but also the legal expenditure of the winning party, manufacturing firms in the model unambiguously reduce patenting, with small firms affected the most. For fee-shifting to have the same effect as in Europe, the US legal system would require shifting of a much smaller share of fees. Lessons from European patent litigation may, therefore, have only limited applicability in the US case. The third chapter contains a theoretical analysis of the influence of delayed disclosure of patent applications by the patent office. Such a delay is a feature of most patent systems around the world but has so far not attracted analytical scrutiny. This delay may give firms various kinds of strategic (non-)disclosure incentives when they are competing for more than a single innovation.

Data sensitivity detection in chat interactions for privacy protection

In recent years, there has been exponential growth in using virtual spaces, including dialogue systems, that handle personal information. The concept of personal privacy in the literature is discussed and controversial, whereas, in the technological field, it directly influences the degree of reliability perceived in the information system (privacy ‘as trust’). This work aims to protect the right to privacy on personal data (GDPR, 2018) and avoid the loss of sensitive content by exploring sensitive information detection (SID) task. It is grounded on the following research questions: (RQ1) What does sensitive data mean? How to define a personal sensitive information domain? (RQ2) How to create a state-of-the-art model for SID?(RQ3) How to evaluate the model? RQ1 theoretically investigates the concepts of privacy and the ontological state-of-the-art representation of personal information. The Data Privacy Vocabulary (DPV) is the taxonomic resource taken as an authoritative reference for the definition of the knowledge domain. Concerning RQ2, we investigate two approaches to classify sensitive data: the first - bottom-up - explores automatic learning methods based on transformer networks, the second - top-down - proposes logical-symbolic methods with the construction of privaframe, a knowledge graph of compositional frames representing personal data categories. Both approaches are tested. For the evaluation - RQ3 – we create SPeDaC, a sentence-level labeled resource. This can be used as a benchmark or training in the SID task, filling the gap of a shared resource in this field. If the approach based on artificial neural networks confirms the validity of the direction adopted in the most recent studies on SID, the logical-symbolic approach emerges as the preferred way for the classification of fine-grained personal data categories, thanks to the semantic-grounded tailor modeling it allows. At the same time, the results highlight the strong potential of hybrid architectures in solving automatic tasks.

Role of xanthophyll and water-water cycles in the protection of photosynthetic apparatus in Arbutus unedo and Arabidopsis thaliana

Photosynthetic organisms have sought out the delicate balance between efficient light harvesting under limited irradiance and regulated energy dissipation under excess irradiance. One of the protective mechanisms is the thermal energy dissipation through the xanthophyll cycle that may transform harmlessly the excitation energy into heat and thereby prevent the formation of damaging active oxygen species (AOS). Violaxanthin deepoxidase (VDE) converts violaxanthin (V) to antheraxanthin (A) and zeaxanthin (Z) defending the photosynthetic apparatus from excess of light. Another important biological pathway is the chloroplast water-water cycle, which is referred to the electrons from water generated in PSII reducing atmospheric O2 to water in PSI. This mechanism is active in the scavenging of AOS, when electron transport is slowed down by the over-reduction of NADPH pool. The control of the VDE gene and the variations of a set of physiological parameters, such as chlorophyll florescence and AOS content, have been investigated in response to excess of light and drought condition using Arabidopsis thaliana and Arbutus unedo.. Pigment analysis showed an unambiguous relationship between xanthophyll de-epoxidation state ((A+Z)/(V+A+Z)) and VDE mRNA amount in not-irrigated plants. Unexpectedly, gene expression is higher during the night when xanthophylls are mostly epoxidated and VDE activity is supposed to be very low than during the day. The importance of the water-water cycle in protecting the chloroplasts from light stress has been examined through Arabidopsis plant with a suppressed expression of the key enzyme of the cycle: the thylakoid-attached copper/zinc superoxide dismutase. The analysis revealed changes in transcript expression during leaf development consistent with a signalling role of AOS in plant defence responses but no difference was found any in photosynthesis efficiency or in AOS concentration after short-term exposure to excess of light. Environmental stresses such as drought may render previously optimal light levels excessive. In these circumstances the intrinsic regulations of photosynthetic electron transport like xanthophyll and water-water cycles might modify metabolism and gene expression in order to deal with increasing AOS.

The EU and Dispute Settlement within the WTO: a strategy for the protection of the Union’s autonomy in the domestic regulation of goods?

Oggetto della ricerca è l’accertamento dell’esistenza, nonché la definizione, della strategia dall’UE in materia di controversie commerciali aventi ad oggetto l’interpretazione e l’applicazione di norme facenti capo agli Accordi OMC in materia di misure sanitarie e di barriere tecniche al commercio. Nella prima parte della tesi, si ricostruiscono gli obbiettivi perseguiti dall’UE in materia di controversie SPS e TBT. In questo contesto, un’importanza di primo piano è attribuita alla difesa dell’autonomia regolamentare dell’Unione. Ad essa si riconduce la prassi UE finalizzata a prevenire il sorgere di controversie sul piano bilaterale attraverso la conclusione di accordi di mutuo riconoscimento, la cui portata ella sottolinea essere tuttavia limitata. L’analisi di cinque controversie sorte in ambito OMC di cui l’Unione è o è stata parte convenuta e che si fondano su presunte o accertate violazioni delle norme facenti capo ai due accordi menzionati consente di classificare gli argomenti giuridici avanzati dall’Unione nel contesto di tali controversie. Nella seconda parte della ricerca, la candidata identifica i mezzi a servizio della strategia UE, in primo luogo, attraverso l’analisi del quadro giuridico relativo alla partecipazione dell’Unione e degli Stati Membri al sistema OMC di risoluzione delle controversie; in secondo luogo, attraverso lo studio, da un lato, dello status delle norme OMC nell’ordinamento UE e, dall’altro, degli effetti delle pronunce dell’Organo di Risoluzione delle Controversie e della questione della responsabilità dell’Unione per violazione del diritto OMC. Sulla base del lavoro di ricerca svolto, si conclude che una strategia dell’UE esiste nella misura in cui l’Unione persegue l’obbiettivo di preservare la propria autonomia regolamentare attraverso, anche se non esclusivamente, gli strumenti afferenti all’ordine giuridico interno analizzati nella seconda parte. La candidata conclude altresì che la riforma del diritto delle relazioni esterne operata dal Trattato di Lisbona può indurre un cambiamento di tale strategia.