Il giudizio di buona fede sull'attività della pubblica amministrazione

L’applicazione del principio di buona fede oggettiva all’attività della pubblica amministrazione, sia contrattuale che provvedimentale, è attualmente fuori discussione, tuttavia i limiti e le modalità attraverso cui questo principio si articola sono ancora oggetto di dibattito dottrinale e giurisprudenziale, in particolare modo per quanto riguarda l’istituto della responsabilità precontrattuale della p.a. Tale ultimo istituto è oggetto di uno specifico approfondimento, che tenterà di analizzare i principali punti cruciali del dibattito: la tutela del legittimo affidamento del privato durante le trattative instaurate con la p.a., la natura giuridica della responsabilità precontrattuale e questioni di stampo più processuale, come il riparto di giurisdizione tra giudice ordinario e amministrativo. Al fine poi di comprendere pienamente le funzioni svolte dal principio di buona fede nell’ambito delle attività pubbliche, sia contrattuali che autoritative, la ricerca si è concentrata anche sulle diverse interpretazioni che gli studiosi del diritto hanno attribuito oggi al giudizio di buona fede, inteso sia come principio civile contrattuale che come nuovo principio amministrativo costituzionalmente orientato. Nel proseguo della dissertazione, infatti, si cerca di valutare l’applicabilità del giudizio di buona fede da un punto di vista interdisciplinare, civile e amministrativo, allo scopo di dimostrare come tale principio sia riuscito lentamente a pervadere anche la materia amministrativa, condizionando in senso garantista non solo il dictum giurisprudenziale, ma anche l’intervento normativo del legislatore.

La tutela penale dell'ambiente marino. Origini, sviluppo e tecniche di tutela nel contesto nazionale, sovranazionale e comparato.

La ricerca si propone di fornire un contributo allo studio del diritto penale dell’ambiente, prendendo in considerazione la disciplina penalistica che rileva nel caso di offesa – effettiva o potenziale – delle acque marine. Nello specifico – in ragione dei sempre più frequenti casi di inquinamento e disastro ambientale causati dalle immissioni di sostanze tossiche nelle acque marine, riconducibili alle attività di impresa ed alla navigazione – l’obiettivo del lavoro è quello di soffermarsi, partendo dalla dimensione internazionale ed europea del fenomeno, sulle disposizioni penali vigenti nel nostro ordinamento a salvaguardia delle risorse naturali marine, sulle modalità con cui le stesse sono tipizzate e sui possibili autori di tali reati, valutando – in termini più generali – se sia veramente effettivo l’attuale impianto nazionale di tutela oppure se non sia necessario ripensare il ruolo del diritto penale in tale settore. Per ampliare il contesto dell’indagine, verrà presa in considerazione la corrispondente disciplina francese, spagnola e statunitense; tale scelta si fonda sulla circostanza che i tre più significativi disastri ambientali marini della storia moderna si sono verificati rispettivamente a largo delle coste bretoni (petroliera Erika), galiziane (nave Prestige) e della Louisiana (piattaforma petrolifera Deep Water Horizon).

L'applicazione del principio di autonomia come parametro di compatibilita con il diritto UE

La tesi indaga l’applicazione del principio di autonomia del diritto UE nella giurisprudenza della Corte di giustizia. In particolare, il lavoro mira ad analizzare le modalità attraverso cui il principio viene adoperato come parametro di compatibilità, ai fini dello scrutinio della Corte, in quei casi riguardanti il rapporto tra giurisdizioni di diritto internazionale e diritto dell’Unione. Una volta delineato il contesto teorico di partenza, concernente il significato dell’autonomia del diritto UE all’interno del “quadro costituzionale” dell’Unione, si passa all’analisi, caso per caso, della prassi giurisprudenziale, al fine di individuare ed estrapolare gli elementi costanti nei casi. La disamina svolta parte da pronunce celebri, tra cui il parere 1/91, Kadi e il parere 2/13, in cui il principio nasce e si sviluppa. Successivamente, si passa alle pronunce più recenti, componenti la c.d. saga Achmea, riguardante la compatibilità con il principio di autonomia dei meccanismi ISDS. I risultati raccolti nell’analisi vengono sintetizzati in modo da ricostruire un test di compatibilità unitario e astratto, composto da tre elementi. Si arriva così, per via induttiva, all’elaborazione di un modello idoneo a spiegare le modalità di applicazione del principio di autonomia come parametro di compatibilità. Sulla scorta di ciò vengono formulate considerazioni e riflessioni concernenti le principali implicazioni per l’ordinamento UE e per i suoi attori, che derivano dal principio di autonomia e dal suo utilizzo giurisprudenziale. Infine, si prende in considerazione una visione del principio di autonomia alternativa a quella emersa nel corso della trattazione e se ne valuta il potenziale impatto sulla concezione e sull’applicazione del principio stesso.

Sovereign wealth funds and state immunity

The study sheds light on the application of the rule of state immunity to sovereign wealth funds (SWFs). SWFs are Janus-faced investment vehicles established by their parent states to invest public resources in financial markets, with the aim of increasing long-term returns and pursuing macroeconomic goals. The ultimate purpose of the study is to assess if the hybrid nature of SWFs results in changes to the rule of state immunity when applied to them, and whether a generally accepted standard in this regard can be deduced from state practice. The research is conducted through a comparative analysis. It is based on the provisions of the UN Convention on Jurisdictional Immunities of States and Their Property (UNCSI), as well as on six domestic jurisdictions (US, UK, France, Germany, Italy and China) among those that have contributed most significantly to the international debate on state immunity and which host the largest amount of SWF investments.

La nuova eGovernance sanitaria europea: verso una piena integrazione della digitalizzazione nei sistemi sanitari degli Stati membri

L’elaborato approfondisce il diritto alla salute nell’ordinamento dell’Unione europea, con la consapevolezza che il settore della sanità, nella complessità di una tensione perdurante tra la sua matrice sociale e l’applicazione di logiche europee di mercato, rappresenta un ambito da sempre sottratto all’intervento diretto e vincolante delle istituzioni. Contemporaneamente, prende spunto dall’osservazione della transizione digitale dei sistemi sanitari nazionali per proporre una rilettura dei tradizionali equilibri istituzionali tra ordinamenti e constatare il grado di influenza dell’Unione oltre la dimensione transfrontaliera. Infatti, per le attuali esigenze di sostenibilità dei sistemi di tutela della salute e per il valore aggiunto riconosciuto alle azioni europee nel corso della gestione della pandemia da Covid-19, l’eHealth ha rappresentato l’occasione per una vigorosa intrusione delle istituzioni europee entro prerogative tipicamente statuali, fino all’emersione di una eGovernance sanitaria europea. Pertanto, la trattazione compie un percorso evolutivo che muove dalla Direttiva 2011/24 sull’assistenza transfrontaliera e l’assistenza sanitaria online, in combinato disposto con il complesso degli atti di soft law connessi, per verificarne l’esiguo impatto sui sistemi sanitari degli Stati membri e, alla luce dei recenti investimenti strategici ed interventi normativi rilevanti in tema di tecnologie applicate alla sanità, riconoscerne il sostanziale superamento. In particolare, il confronto tra l’insufficiente livello di digitalizzazione raggiunto finora nei sistemi sanitari degli Stati membri ed il tenore della Proposta di regolamento sullo European Health Data Space suggerisce l’evoluzione dell’impianto di governo dei dati sanitari stabilito nella Direttiva, a partire dalla previsione di una disciplina comune sulla cartella sanitaria. A questo proposito, l’interoperabilità tra tecnologie diviene un presupposto operativo indefettibile, che corrobora la natura ‘tecnologicamente condizionata’ del diritto alla salute e propone l’idea che la sanità digitale rappresenti un passo in avanti verso un’assistenza europea uniforme.

Comparative constitutional design for divided societies: a model to explain vonstitutional asymmetries

Comparative studies on constitutional design for divided societies indicate that there is no magic formula to the challenges that these societies pose, as lots of factors influence constitutional design. In the literature on asymmetric federalism, the introduction of constitutional asymmetries is considered a flexible instrument of ethnic conflict resolution, as it provides a mixture of the two main theoretical approaches to constitutional design for divided societies (i.e., integration and accommodation). Indeed, constitutional asymmetries are a complex and multifaceted phenomenon, as their degree of intensity can vary across constitutional systems, and there are both legal and extra-legal factors that may explain such differences. This thesis argues that constitutional asymmetries provide a flexible model of constitutional design and aims to explore the legal factors that are most likely to explain the different degrees of constitutional asymmetry in divided multi-tiered systems. To this end, the research adopts a qualitative methodology, i.e., Qualitative Comparative Analysis (QCA), which allows an understanding of whether a condition or combination of conditions (i.e., the legal factors) determine the outcome (i.e., high, medium, low degree of constitutional asymmetry, or constitutional symmetry). The QCA is conducted on 16 divided multi-tiered systems, and for each case, the degree of constitutional asymmetry was analyzed by employing standardized indexes on subnational autonomy, allowing for a more precise measure of constitutional asymmetry than has previously been provided in the literature. Overall, the research confirms the complex nature of constitutional asymmetries, as the degrees of asymmetries vary substantially not only across systems but also within cases among the dimensions of subnational autonomy. The outcome of the Qualitative Comparative Analysis also confirms a path of complex causality since the different degrees of constitutional asymmetry always depend on several legal factors, that combined produce a low, medium, or high degree of constitutional asymmetry or, conversely, constitutional symmetry.

An analysis of the regulatory chill hypothesis: environmental protection in international investment law

The goal of this thesis has been to find out whether ISDS and international investment law exert a chilling effect on more stringent environmental standards at the domestic level. Due to the lack of consistent empirical and statistical evidence uncovered during the analysis, this thesis largely dismisses the regulatory chill hypothesis. However, two exceptions are identified: first, there is evidence of the efforts made by domestic industrial groups and trade unions to prevent the implementation of stricter environmental standards; second, it has become apparent that unfounded beliefs, e.g. about ISDS, held by lawmakers and regulators can play an important role in chilling stricter environmental standards. For these reasons, a new and narrower definition of the regulatory chill phenomenon has been proposed, one that only encompasses those instances in which lawmakers, governments and government agencies refrain from adopting the laws and regulations that they deem the most appropriate because they believe that doing so would lead to adverse consequences at the international trade and investment level, despite a lack of consistent and robust evidence supporting their concerns. The second part of this thesis focusses on what could be done in international economic law to promote environmentally friendly FDI, while preventing the few instances in which regulatory chill may take place due to ill-founded beliefs held by lawmakers and regulators. Following an analysis that highlights the paramount role played by public participation and responsive institutions to achieve an appropriate level of environmental protection, this study ends with a proposal that recommends the adoption of a clause within IIAs that makes pre-investment environmental screening mandatory and free from ISDS oversight.

Governing algorithms in the big data era for balancing new digital rights - designing GDPR compliant and trustworthy XAI systems

This thesis investigates the legal, ethical, technical, and psychological issues of general data processing and artificial intelligence practices and the explainability of AI systems. It consists of two main parts. In the initial section, we provide a comprehensive overview of the big data processing ecosystem and the main challenges we face today. We then evaluate the GDPR’s data privacy framework in the European Union. The Trustworthy AI Framework proposed by the EU’s High-Level Expert Group on AI (AI HLEG) is examined in detail. The ethical principles for the foundation and realization of Trustworthy AI are analyzed along with the assessment list prepared by the AI HLEG. Then, we list the main big data challenges the European researchers and institutions identified and provide a literature review on the technical and organizational measures to address these challenges. A quantitative analysis is conducted on the identified big data challenges and the measures to address them, which leads to practical recommendations for better data processing and AI practices in the EU. In the subsequent part, we concentrate on the explainability of AI systems. We clarify the terminology and list the goals aimed at the explainability of AI systems. We identify the reasons for the explainability-accuracy trade-off and how we can address it. We conduct a comparative cognitive analysis between human reasoning and machine-generated explanations with the aim of understanding how explainable AI can contribute to human reasoning. We then focus on the technical and legal responses to remedy the explainability problem. In this part, GDPR’s right to explanation framework and safeguards are analyzed in-depth with their contribution to the realization of Trustworthy AI. Then, we analyze the explanation techniques applicable at different stages of machine learning and propose several recommendations in chronological order to develop GDPR-compliant and Trustworthy XAI systems.

The right to explanation

This research investigates the use of Artificial Intelligence (AI) systems for profiling and decision-making, and the consequences that it poses to rights and freedoms of individuals. In particular, the research considers that automated decision-making systems (ADMs) are opaque, can be biased, and their logic is correlation-based. For these reasons, ADMs do not take decisions as human beings do. Against this background, the risks for the rights of individuals combined with the demand for transparency of algorithms have created a debate on the need for a new 'right to explanation'. Assuming that, except in cases provided for by law, a decision made by a human does not entitle to a right to explanation, the question has been raised as to whether – if the decision is made by an algorithm – it is necessary to configure a right to explanation for the decision-subject. Therefore, the research addresses a right to explanation of automated decision-making, examining the relation between today’s technology and legal concepts of explanation, reasoning, and transparency. In particular, it focuses on the existence and scope of the right to explanation, considering legal and technical issues surrounding the use of ADMs. The research analyses the use of AI and the problems arising from it from a legal perspective, studying the EU legal framework – especially in the data protection field. In this context, a part of the research is focused on transparency requirements under the GDPR (namely, Articles 13–15, 22, as well as Recital 71). The research aims to outline an interpretative framework of such a right and make recommendations about its development, aiming to provide guidelines for an adequate explanation of automated decisions. Hence, the thesis analyses what an explanation might consist of, and the benefits of explainable AI – examined from legal and technical perspectives.

Neo-commodification of persons: exploitation of personal data and impact on the sharing economy

The notion of commodification is a fascinating one. It entails many facets, ranging from subjective debates on desirability of commodification to in depth economic analyses of objects of value and their corresponding markets. Commodity theory is therefore not just defined by a single debate, but spans a plethora of different discussions. This thesis maps and situates those theories and debates and selects one specific strain to investigate further. This thesis argues that commodity theory in its optima forma deals with the investigation into what sets commodities apart from non-commodities. It proceeds to examine the many given answers to this question by scholars ranging from the mid 1800’s to the late 2000’s. Ultimately, commodification is defined as a process in which an object becomes an element of the total wealth of societies in which the capitalist mode of production prevails. In doing so, objects must meet observables, or indicia, of commodification provided by commodity theories. Problems arise when objects are clearly part of the total wealth in societies without meeting established commodity indicia. In such cases, objects are part of the total wealth of a society without counting as a commodity. This thesis examines this phenomenon in relation to the novel commodities of audiences and data. It explains how these non-commodities (according to classical theories) are still essential elements of industry. The thesis then takes a deep dive into commodity theory using the theory on the construction of social reality by John Searle.

La usucapion y el registro de la propiedad

En el sistema español, cuando la transmisión jurídico-real trae causa de un contrato, seguimos la teoría del título y el modo, alejándonos así del modelo consensualista adoptado en el Derecho italiano, en el que basta con la mera celebración del título, para que se entienda producida la transmisión. Es decir, que, en nuestro derecho, hasta que no tiene lugar la entrega de la cosa objeto del contrato, no se entiende producida la transmisión. No resulta necesario, en cambio, la inscripción del negocio en el Registro de la Propiedad (inscripción declarativa y no constitutiva). Pero, ¿qué ocurre cuando quien transmite el derecho no es el verdadero titular? Pues que, en estos casos, para tratar de sanar esa falta de titularidad del tradente, entra en juego la usucapión, que es uno de los modos originarios contemplados en la legislación civil española de adquirir la propiedad y otros derechos reales, que se basa en la posesión. Y como la usucapión puede operar al margen del Registro (de inscripción declarativa, como ya hemos dicho), es muy probable que se produzcan desajustes entre lo reflejado por este y la realidad extrarregistral. En el presente trabajo analizamos precisamente la respuesta que la legislación hipotecaria española, a través de los actuales arts. 35 y 36 LH, ha tratado de ofrecer a las distintas cuestiones que se suscitan cuando realidad registral y extrarregistral (o posesoria) entran en conflicto.

Internet of healthcare (law): privacy and data protection aspects in an internet of everything

The purpose of this research study is to discuss privacy and data protection-related regulatory and compliance challenges posed by digital transformation in healthcare in the wake of the COVID-19 pandemic. The public health crisis accelerated the development of patient-centred remote/hybrid healthcare delivery models that make increased use of telehealth services and related digital solutions. The large-scale uptake of IoT-enabled medical devices and wellness applications, and the offering of healthcare services via healthcare platforms (online doctor marketplaces) have catalysed these developments. However, the use of new enabling technologies (IoT, AI) and the platformisation of healthcare pose complex challenges to the protection of patient’s privacy and personal data. This happens at a time when the EU is drawing up a new regulatory landscape for the use of data and digital technologies. Against this background, the study presents an interdisciplinary (normative and technology-oriented) critical assessment on how the new regulatory framework may affect privacy and data protection requirements regarding the deployment and use of Internet of Health Things (hardware) devices and interconnected software (AI systems). The study also assesses key privacy and data protection challenges that affect healthcare platforms (online doctor marketplaces) in their offering of video API-enabled teleconsultation services and their (anticipated) integration into the European Health Data Space. The overall conclusion of the study is that regulatory deficiencies may create integrity risks for the protection of privacy and personal data in telehealth due to uncertainties about the proper interplay, legal effects and effectiveness of (existing and proposed) EU legislation. The proliferation of normative measures may increase compliance costs, hinder innovation and ultimately, deprive European patients from state-of-the-art digital health technologies, which is paradoxically, the opposite of what the EU plans to achieve.

Security and privacy of resource constrained devices

The thesis aims to present a comprehensive and holistic overview on cybersecurity and privacy & data protection aspects related to IoT resource-constrained devices. Chapter 1 introduces the current technical landscape by providing a working definition and architecture taxonomy of ‘Internet of Things’ and ‘resource-constrained devices’, coupled with a threat landscape where each specific attack is linked to a layer of the taxonomy. Chapter 2 lays down the theoretical foundations for an interdisciplinary approach and a unified, holistic vision of cybersecurity, safety and privacy justified by the ‘IoT revolution’ through the so-called infraethical perspective. Chapter 3 investigates whether and to what extent the fast-evolving European cybersecurity regulatory framework addresses the security challenges brought about by the IoT by allocating legal responsibilities to the right parties. Chapters 4 and 5 focus, on the other hand, on ‘privacy’ understood by proxy as to include EU data protection. In particular, Chapter 4 addresses three legal challenges brought about by the ubiquitous IoT data and metadata processing to EU privacy and data protection legal frameworks i.e., the ePrivacy Directive and the GDPR. Chapter 5 casts light on the risk management tool enshrined in EU data protection law, that is, Data Protection Impact Assessment (DPIA) and proposes an original DPIA methodology for connected devices, building on the CNIL (French data protection authority) model.

Influencable autonomy and predictable freedom in the IoE

This thesis investigates how individuals can develop, exercise, and maintain autonomy and freedom in the presence of information technology. It is particularly interested in how information technology can impose autonomy constraints. The first part identifies a problem with current autonomy discourse: There is no agreed upon object of reference when bemoaning loss of or risk to an individual’s autonomy. Here, thesis introduces a pragmatic conceptual framework to classify autonomy constraints. In essence, the proposed framework divides autonomy in three categories: intrinsic autonomy, relational autonomy and informational autonomy. The second part of the thesis investigates the role of information technology in enabling and facilitating autonomy constraints. The analysis identifies eleven characteristics of information technology, as it is embedded in society, so-called vectors of influence, that constitute risk to an individual’s autonomy in a substantial way. These vectors are assigned to three sets that correspond to the general sphere of the information transfer process to which they can be attributed to, namely domain-specific vectors, agent-specific vectors and information recipient-specific vectors. The third part of the thesis investigates selected ethical and legal implications of autonomy constraints imposed by information technology. It shows the utility of the theoretical frameworks introduced earlier in the thesis when conducting an ethical analysis of autonomy-constraining technology. It also traces the concept of autonomy in the European Data Lawsand investigates the impact of cultural embeddings of individuals on efforts to safeguard autonomy, showing intercultural flashpoints of autonomy differences. In view of this, the thesis approaches the exercise and constraint of autonomy in presence of information technology systems holistically. It contributes to establish a common understanding of (intuitive) terminology and concepts, connects this to current phenomena arising out of ever-increasing interconnectivity and computational power and helps operationalize the protection of autonomy through application of the proposed frameworks.

Patient data sharing for the improvement of healthcare and medical research: towards a moral duty of patients to share health-related data?

The project answers to the following central research question: ‘How would a moral duty of patients to transfer (health) data for the benefit of health care improvement, research, and public health in the eHealth sector sit within the existing confidentiality, privacy, and data protection legislations?’. The improvement of healthcare services, research, and public health relies on patient data, which is why one might raise the question concerning a potential moral responsibility of patients to transfer data concerning health. Such a responsibility logically would have subsequent consequences for care providers concerning the further transferring of health data with other healthcare providers or researchers and other organisations (who also possibly transfer the data further with others and other organisations). Otherwise, the purpose of the patients’ moral duty, i.e. to improve the care system and research, would be undermined. Albeit the arguments that may exist in favour of a moral responsibility of patients to share health-related data, there are also some moral hurdles that come with such a moral responsibility. Furthermore, the existing European and national confidentiality, privacy and data protection legislations appear to hamper such a possible moral duty, and they may need to be reconsidered to unlock the full use of data for healthcare and research.