I INTRODUCTION

Corporate misconduct in Italy is punishable under both criminal and administrative law.

The public prosecutor directs preliminary investigations in criminal prosecutions and issues orders to the police, who investigate.

Under the terms of the Constitution, the Public Prosecutor's Office is independent of all political influence.

The Office theoretically has no discretion as to which offences must be prosecuted: under the mandatory prosecution principle (Article 112 of the Constitution), the public prosecutor must always issue a request for indictment (a request to submit the defendant to trial) if, at the end of the investigation, he or she has found sufficient evidence that a crime has been committed. In practice, the rule is disregarded: the high number of reports of criminal offences imposes a de facto selection of the cases to be dealt with by the investigating authorities, depending on the circumstances, in accordance with the principle of priority.

Some kind of jurisdictional control on the decision of the prosecutor as to which cases to dismiss, and which to prosecute, is in any case granted by the judge of the preliminary investigations, who has the final word on any request for dismissal.

When the prosecutor investigates the possible criminal liability of corporate entities, under Legislative Decree No. 231 of 8 June 2001 (Decree 231/2001) (see Section III), the mandatory prosecution principle may be bypassed, since in this case there is no jurisdictional control over the prosecutor's dismissal decision; only the prosecutor's hierarchical superior may personally take any further appropriate action.

From an administrative perspective, the independent administrative authorities2 have specific powers relating to their individual remits. If the officials of any of the authorities discover any offences in the course of their duties, these bodies are obliged to report them to the judicial authorities.

Far-reaching powers are granted to the Italian Securities and Exchange Commission (CONSOB) under the Consolidated Law on Finance,3 with reference to insider trading and market-manipulation offences, and in close cooperation with the public prosecutor. Further, the latter is under an obligation to notify the president of CONSOB when a report of a criminal offence of which he or she has been made aware involves insider trading or market manipulation by listed companies, with a view to obtaining a reasoned technical opinion on the matter from this independent authority. The main powers granted to CONSOB include the right to:

  1. request documents from any party that may have relevant information;
  2. interview individuals in person;
  3. carry out inspections; and
  4. gain direct access to data contained in the Italian Central Credit Register at the Bank of Italy.

At the end of its own investigation, CONSOB may issue severe administrative sanctions for the offences of market abuse (insider trading, market manipulation), which are meant to be added to the criminal punishment (up to 12 years' imprisonment), for the same facts. In a breakthrough decision, the European Court of Human Rights has convicted Italy, considering this doubling of penalties for the same offences as contrary to the ne bis in idem principle, provided for in the European Convention on Human Rights, Section 6.4 Italy will probably have to rethink the entire system of 'double track' persecution of corporate offences, both in criminal courts and before the administrative authorities, which has been very typical up to now (not only for financial crimes but also for tax crimes and many others).

Besides the foregoing, an increasingly important role has been attributed to the National Anti-Corruption Authority (ANAC), which has the general function of preventing corruption in public offices and now also supervises the conclusion and execution of public contracts. ANAC may also issue sanctions (disqualifications, etc.).

As regards the issue of cooperation between the company under investigation (or its employees) and the investigating body, the presumption of innocence and the right to due process of law (both of which are constitutional principles) categorically exclude any legal obligation to cooperate. However, for an appropriate choice to be made regarding cooperation, a case-by-case assessment must be made of:

  1. the nature of the case;
  2. the seriousness of the alleged conduct;
  3. any incriminating evidence;
  4. the identity and investigative approach of the public prosecutor; and
  5. the possible repercussions of failure to cooperate with the investigating bodies (e.g., the risk of being subject to pretrial precautionary measures).

The decision as to whether and how to cooperate typically remains part of any defence strategy, both for the individual defendant and for the corporation. In practice, the burden of the interdictory sanctions that may hit the corporation, in cases in which Decree 231/2001 may be applied (see Section III) weakens the presumption of innocence and makes cooperation almost a default option for the corporation; considering also that, under a typical 'carrot and stick approach', Decree 231/2001 provides certain incentives, such as the reduction of fines and the preclusion of bans, to corporations that cooperate and bargain a plea.

In such cases, prior to the initiation of trial proceedings, companies must:

  1. make good any damages in full;
  2. eliminate the harmful and dangerous consequences of the offence (or otherwise take action to this effect);
  3. adopt and implement organisational models capable of preventing offences of the type that were committed or eliminate the organisational shortcomings that led to the offences; and
  4. hand over any profits earned for confiscation.

Therefore, if a corporation is directly involved in the proceedings, a cooperative strategy must always be carefully considered.

II CONDUCT

i Self-reporting

As a matter of principle, under Italian law, private individuals and businesses have the right – but not the obligation – to report to the judicial authorities any offences that may come to their attention. With the exception of some specific cases,5 the decision whether to report an offence is exclusively down to each individual's sense of civic duty, and there is no provision for any benefit or incentive.

ii Internal investigations

Italian law allows investigations to be carried out by a lawyer appointed as defence counsel in a criminal proceeding by a person or a corporation, or before any proceedings are initiated. Any evidence collected in this way may be used in any subsequent criminal proceedings.6

Italian law allows the lawyer to carry out both ordinary and extraordinary inquiries. Information is collected by the lawyer from persons with relevant information; they do not need to be accompanied by lawyers but they are under an obligation to tell the truth, the violation of which is punished by the Criminal Code. The situation is different if the person to be questioned is a suspect in the proceedings, in related proceedings or for a related offence; in these cases the presence of a lawyer is mandatory. The case is also different if the witness may be called upon to make self-incriminating statements, in turn risking becoming a suspect; in such cases, the questioner must stop the interview immediately.

Some witnesses with specific qualifications also have the right in criminal proceedings not to answer questions when the answer would entail a violation of professional privilege. This right is granted only to professionals expressly mentioned in the Code of Criminal Procedure or under special legislation, such as lawyers.

Lawyers receive absolute protection at all stages and instances of proceedings, both with reference to attorney–client communications and to work product. It should be borne in mind, however, that under Italian case law, in-house counsel may not be granted the same privileges as external lawyers, and their computers, emails and hard copies of documents may be subject to search by investigating authorities.

Finally, investigations may be done internally by the staff of the establishment or by independent external advisers. In the first case, investigations are typically carried out by the internal audit service with the backing of the legal department. The advantages of this type of investigation are in terms of lower costs and greater knowledge of the company; however, this type of investigation might not be capable of providing a high enough level of expertise and independence. The internal independent investigation is entrusted instead to independent external advisers that support the administrative and supervisory bodies. The external advisers certainly guarantee better expertise and independence.

iii Whistle-blowers

There was no general provision in Italy regarding whistle-blowing until 30 November 2017, when Law No. 179 concerning whistle-blowing entered into force.

The text regulating whistle-blowing has gradually emerged as part of the debate in recent years between European and international institutions on the need to introduce valid measures to fight corruption.

The first important Italian intervention in this sense took place with the approval of the Law No. 190, which entered into force on 27 November 2012 (the Severino Law), limited to public administration, which introduced specific provisions concerning the protection of public servants who report abuse. This discipline, however, did not find application in the private sector and required certain additions and revisions to align with the simultaneous evolution of public employment regulations.

The revised regulation of 2012 replaced Article 54 bis of Legislative Decree No. 165, of 30 March 2001, providing for the protection of the public employee who, in the interests of public administration, reports violations or unlawful conduct of which he or she became aware on the basis of his or her employment relationship. The employee cannot be subjected to retaliation because of the report (including sanctions, dismissal, demotion or transfer to other offices) or be subjected to any other measures that might have a negative effect on his or her working conditions.

These reports may be sent either to the internal manager of the corporate structure responsible for preventing corruption and transparency, or to the ANAC, or directly to the ordinary or accounting judicial authority depending on the nature of the report.

Among the peculiarities of the new discipline is confirmation of the prohibition to reveal the identity of the whistle-blower, whose name must be protected:

  1. in the event of a criminal trial, in the manner and timing established by Article 329 of the Criminal Code;
  2. in the event of an accounting process, from the prohibition to reveal his or her identity until the end of the preliminary phase; and
  3. in the event of an administrative process, from the prohibition of disclosing his or her identity without his or her consent.

The ANAC is the authority responsible for applying administrative sanctions.

Specifically, the ANAC can apply a penalty of between €5,000 and €30,000, charged to those responsible for retaliatory measures against the reporting agent. A significantly higher penalty, of between €10,000 and €50,000, is envisaged if the absence of an internal system for reporting violations is ascertained or if it is found that the system manager has not verified or analysed the reports received as part of their activity.

Any discrimination or retaliation against the reporter must in any case be justified by the public administration, which bears the burden of proving and justifying that such measures have been taken for reasons unrelated to the notification.

If it is proved that the employee has been dismissed for reasons related to an alert, that employee has the right to be reinstated in the workplace, to compensation for damage and payment of social security contributions due for the period between dismissal and reinstatement.

The risk of a distorted use of the whistle-blowing instrument has been mitigated with the cancellation of any protection if the reporting person is convicted, even at first instance, in criminal proceedings for slander, defamation or other similar crimes committed through the reporting, or, is subject to civil liability if fraud or gross negligence is established.

In addition to introducing significant changes regarding the protection of the public employee who reports an offence, the law provided some modifications to Decree 231/2001 (see Section III) with regard to the protection of employees or collaborators who report illegal activities in the private sector.

Law No. 179/2017, adding three new paragraphs to Article 6 of Decree 231/2001, requires that a model of organisation and governance (MOG) adopted by a company provides for:

  1. adequate information channels that, ensuring the confidentiality of the identity of the reporting agent, allow individuals in senior positions and those subordinated to them to submit detailed reports of illicit conduct or of violations of the MOG;
  2. at least one alternative signal channel that guarantees the privacy of the reporters;
  3. the prohibition of acts of retaliation or discrimination against the reporter for reasons connected, directly or indirectly, to the report;
  4. adequate sanctions against those who are in breach of the aforementioned measures to protect the whistle-blower and against those who carry out, with malice or gross negligence, reports that prove to be unfounded.

It is also envisaged that the adoption of the aforementioned discriminatory measures against the reporting officer may be reported to the National Labour Inspectorate, as far as it is responsible, not only by the reporting person but also by the trade union organisation.

As a further protection of the whistle-blower, it is also envisaged that dismissal and retaliatory or discriminatory demotion are invalid and that the burden of proving, in procedural law, that negative measures adopted towards the reporter are based on reasons unrelated to the report.

To align the MOGs with the changes introduced in Decree 231/2001, Italian companies started to update them, providing at the same time a specific whistle-blowing procedure for reporting by employees.

The whistle-blowing procedure should determine specific channels that allow the submission of reports, based on precise and concordant factual elements, guaranteeing the confidentiality of the reporters' identities.

For a full and effective operation of the procedure, the following measures are considered appropriate:

  1. the provision of a person able to receive reports, although the law does not provide a specific recipient of alerts;
  2. the identification of a system of management of violation reports that allows the anonymity of the whistle-blower to be guaranteed;
  3. the specific training of top managers, as well as those subordinated to them; and
  4. the integration of the disciplinary system set up by the MOG, with the inclusion of sanctions against those who violate the protection measures of the reporting person and against those who carry out, with malice or gross negligence, reports that prove to be unfounded.

III ENFORCEMENT

i Corporate liability

Decree 231/2001 regulates the criminal responsibility of corporations with regard to offences committed by their representatives or employees. Even though the Decree provides (formally) for administrative sanctions against corporations, the underlying offence is criminal, and it is in criminal proceedings that the offence is ascertained and the sanction imposed.

It is a criminal court that tries the case and the corporation will have all the defence rights and guarantees of a defendant in a criminal trial. Moreover, this kind of provision certainly responds to the Engel criteria (specifically, the nature of the offence and severity of the penalty), under which the European Court of Human Rights considers a punishment to be effectively criminal, in regard to the need to respect the provisions of the European Convention on Human Rights.7

For the criminal responsibility of legal persons to apply alongside the criminal responsibility of natural persons (representatives or employees), the offence must have been committed in the interests of or for the benefit of the corporation. The exclusive benefit of the agent (or a third party) excludes corporate liability.

Article 5 of Decree 231/2001 states that the corporation is responsible if the criminal offence has been committed by:

  1. persons holding representative, administrative or managerial positions in the corporation or in any of its organisational units provided with financial and functional autonomy, or persons in charge of managing and overseeing these positions (referred to as senior managers); or
  2. persons placed under the direction or supervision of any person specified above (referred to as employees).

A corporation may attempt to establish its innocence by providing evidence that the internal organisation of the corporation and its policies and procedures complied with the law and were structured in such a way as to be capable of preventing crimes from being committed.

Originally intended to apply only to offences against the public administration (centred on bribery) or against the assets of the public administration (embezzlement of public money), the responsibility of corporations has been extended through additional legislation to include offences regarding, inter alia:

  1. public deeds or revenue stamps;
  2. criminal offences against individuals;
  3. criminal offences involving market abuse;
  4. bodily harm or manslaughter because of violations of health and safety regulations;
  5. receiving stolen goods;
  6. money laundering and the handling of illicit funds and assets;
  7. cybercrime;
  8. organised crime offences;
  9. offences against trade and industry;
  10. criminal offences against intellectual property;
  11. criminal offences against the environment;
  12. fraud against the state or a public body;
  13. corruption;
  14. forgery of money, tax stamps, credit cards and distinguishing marks of industrial products;
  15. corporate crimes;
  16. crimes of terrorism and of subversion of the democratic order;
  17. inducement not to make statements or to make false statements to the authority;
  18. employment of illegal immigrants;
  19. child grooming; and
  20. racism and xenophobia.

One of the most recent developments has been to extend the concept of bribery from bribery of public officers to commercial bribery (bribery of managers of corporations), which is now specifically punished. If the briber acts within a corporate organisation, his or her own company may also be punished (not the company of the bribed, which has suffered damage from the act).

Additionally, as of 1 January 2015, corporate liability has been extended to self-laundering (defined in Article 648 ter 1 of the Italian Criminal Code). Therefore, corporations may be liable if their employees, having committed or participated in committing an intentional crime, employ, replace or transfer, in financial, entrepreneurial or speculative activities, money, goods or other benefits derived from the commission of such a crime, in order to hinder the identification of their criminal origin. This new provision has had a significant impact on companies that have promptly had to adjust their compliance programmes, including measures to prevent the commission of self-laundering.

With regard to bribery, it should be mentioned that Law No. 3/2019 amending Legislative Decree No. 231/2001 (the Anti-Corruption Law), which aims to strengthen the fight against public corruption and increases the penalties for committing acts of corruption, has added to Article 25 the following:

  1. In relation to the commission of the offences referred to in Articles 318, 321, 322, first and third Paragraphs, and 346-bis of the Penal Code, a monetary sanction of up to two hundred shares is applied.
  2. In cases of conviction for one of the offences indicated in Paragraphs 2 and 3, the disqualification sanctions provided for in Article 9, Paragraph 2 are applied for a period of not less than four years and not more than seven years, if the offence was committed by one of the persons referred to in Article 5, Paragraph 1, letter (a), and for a period of not less than two years and not more than four, if the offence was committed by one of the persons referred to in Article 5, Paragraph 1, letter (b).
  3. 5-bis: If, prior to the first-degree sentence, the entity has effectively taken steps to prevent the criminal activity from having further consequences, to ensure evidence of the offences and to identify the persons responsible or to seize the sums or other benefits transferred and has eliminated the organisational shortcomings that led to the offence through the adoption and implementation of organisational models suitable for preventing offences of the type of the one that has occurred, the disqualification sanctions shall have the duration established by Article 13, Paragraph 2.

Alongside the criminal or administrative liability under Decree 231/2001, and in addition to any administrative penalties that CONSOB or other authorities may impose, a company may also incur liability under civil law if its directors or employees are held responsible under criminal law. Pursuant to Article 2049 of the Italian Civil Code, a company is strictly liable for all damages caused to third parties by its own employees, representatives or directors, even if these damages are the result of a criminal offence.

The same lawyer may defend both a company and any suspected employee, unless there is a conflict of interest between the two. Only then does the Code of Practice require the counsel to refuse to assist at least one party and not to exploit any confidential information received when defending the other. If, for example, the company's defence asserts that the offence was committed by the employee in the latter's own exclusive interest and for his or her own benefit, then obviously, according to the structure of Article 6, the two parties would require different defence counsel. When the company's defence strategy involves the defence of its staff, that defence will generally be joint or closely coordinated.

ii Penalties

Legislative Decree 231/2001 sets forth four types of penalties: monetary penalties, restrictive penalties, seizure of assets and publication of conviction. The monetary penalties are applied on the basis of units, which cannot be fewer than 100 and not exceed 1,000. The amount of each unit ranges from a minimum of €258 to a maximum of €1,549, which is set at the discretion of the judge based on the severity of the crime, the economic condition of the company and the scale of its assets. (For example, in the case of bribing a public officer, the law indicates a range of between 100 and 800 units and the judge may decide to apply a penalty of 200 units. If the company is large, the judge may apply a value of €1,500 for each single unit and thus the total penalty would be €300,000.) The judge must also consider any activity carried out to cancel or reduce the consequences of the crime.

Apart from monetary penalties, the judge, if expressly established, could also apply restrictive penalties but that would only occur under one of these two conditions: that the entity made a remarkable profit, or that the offence was committed either by a senior manager or by an employee. In the second case, the penalty could be applied only if the offence was committed because of serious organisational deficiencies. In the event of reiteration of offences, restrictive penalties can involve either fines or disqualification, such as:

  1. a ban on carrying out business activities;
  2. suspension of licences and concessions;
  3. a ban on dealing with public bodies;
  4. exclusion from or cancellation of public financing or contributions; and
  5. a ban on advertising goods or services.

The above-mentioned Anti-Corruption Law has extensively amended Paragraph 2, Article 13 (on restrictive penalties), to state: 'Without prejudice to the provisions of Article 25, Paragraph 5, disqualification sanctions have a duration of not less than three months and not more than two years.'

Publication of the conviction can be in one or more journals and include bill posting in the municipality where the entity has its main office. During an investigation, if requested by the public prosecutor, it is possible to impose a ban as a precautionary measure when there is a real possibility of further offences of the same nature being committed by the company.

With regard to precautionary measures, which indicate that the entity is liable for an administrative offence and there are well-founded and specific elements suggesting there is a real danger that offences of the same nature as the one being prosecuted will be committed, the Anti-Corruption Law provided the following:

  1. the judge determines the duration of precautionary measures, which may not exceed one year;
  2. after the sentence of first-instance conviction, the precautionary measure may have the same duration as the corresponding sanction applied with the same sentence, and the duration of the precautionary measure may not exceed one year and four months;
  3. the duration of the precautionary measure must begin upon the order notification; and
  4. the duration of the precautionary measure must be taken into account when deciding the duration of the applicable sanctions.

iii Compliance programmes (models of organisation and governance)

The keystone of Decree 231/2001 is the partial exemption from corporate liability that comes with the adoption of an effective8 and efficient organisational model, capable of preventing predictable offences, established by the 'gap analysis'.

If the supposed offence was committed by senior management, the burden is on the company to prove that the persons committed the offence by fraudulently evading the effective and appropriate organisation model and the controls in place; however, if the offence was committed by a less senior employee, it is for the public prosecutor to demonstrate a failure to comply with the obligations of direction and oversight imposed on the employee.

Reparatory compliance programmes (i.e., those developed after an offence has been committed) may, on the other hand, entail a reduction in the fine, exemption from the application of bans or the suspension or revocation of precautionary prohibitive measures, or the suspension and subsequent conversion of the fines in the event that the reparatory action was carried out late.9

Article 6, c.2 of Decree 231/2001 establishes the essential characteristics for the organisation, management and control model. The first two activities to be developed are linked to risk assessment, in particular:

  1. identification of potential risks; and
  2. design of the control system: in particular, the guidelines of Confindustria10 establish the most important components to an effective control system as:
    • a code of ethics referencing the offences considered;
    • a sufficiently formalised and clear organisational system, in particular with regard to the attribution of responsibility;
    • allocation of the power of authorisation in accordance with defined managerial and organisational responsibilities;
    • a risk management and control system; and
    • communication and staff training.

The compliance programmes should also include specific rules of conduct for employees. This code of conduct should be done after the risk assessment and the gap analysis and should establish specific procedures to regulate the decision-making process.

Confindustria has also established some guidelines to comply with Decree 231/2001. In particular, the minimum contents of the compliance programme should establish that:

  1. the essential principle of the entity should be the respect of law in every country where the entity acts;
  2. every operation and transaction has to be correctly registered, authorised, verifiable, legitimated, coherent and appropriated; and
  3. the entity has to establish the basic principles in relation to its commercial partners.

iv Prosecution of individuals

When an investigation or initial criminal action is directed against a natural person who is an employee or senior manager of a company, it is generally the company that arranges an adequate professional defence for its employee and bears the costs, given the common interests of the company and of the natural person in proving that no offence was committed.

The company and the natural person oppose one another only in a limited number of cases; this mainly occurs when the employee has caused damage to the company when committing the offence, or fraudulently evaded company procedures to commit the offence. In these situations the company will mainly be interested in dismissing or otherwise sanctioning the employee – thereby distancing itself from the employee's conduct – and then in joining the criminal proceedings as a civil claimant to obtain compensation for all damages suffered as a result of the unlawful conduct.

IV INTERNATIONAL

i Extraterritorial jurisdiction

Pursuant to Decree 231/2001, criminal liability also extends to criminal offences committed abroad, but only if the corporation's headquarters are located in Italy (and on the further conditions that no action has been taken by the authorities of the country where the offence was committed and that the requirements for the criminal liability of the natural person that has committed the offence concerned11 are met).

Conversely, if the crime was committed in Italy by a manager or employee of a foreign company, both the perpetrator and the corporation may be pursued under Italian law despite the fact that the main offices of the company are abroad. Pursuant to the Criminal Code, any offence may be deemed to have been committed in Italy (and not abroad) even if a 'fragment' of the action or 'the conception of the offence'12 occurred in Italy. A German corporation has been tried for bribery in Italy under Decree 231/2001 and had to enter into a plea bargain, and many foreign corporations are currently on trial or under criminal investigation in Italy (banks involved in the Parmalat bankruptcy case,13 other banks involved in investigations regarding derivatives sold to public entities, etc.).

Specific crimes, notably insider trading and market manipulation regarding securities traded on Italian markets, may be punished even if entirely committed abroad. Both the individuals and (under Decree 231/2001) the foreign corporation for the benefit of which the crime has been committed will be punished in Italy. Two of the three major ratings agencies, and some of their managers, were on trial in the small southern town of Trani for alleged market manipulation of Italian treasury bonds: the crime was supposedly committed entirely abroad.14

With respect to specific types of conduct, in the case of an offence committed by an Italian entity abroad (according to Article 4 of Decree 231/2001), the entity could be accountable under the conditions provided for in Articles 7 to 10 of the Criminal Code. In particular, Article 7 provides that any of the following offences committed abroad are punishable under Italian law:

  1. offences against the state;
  2. offences of counterfeiting the state seal and use of the counterfeited seal;
  3. offences of forging money and public credit cards; and
  4. offences committed by public officials with abuse of authority, or violation of the duties inherent to the function or service.

ii International cooperation

Legislation involving judicial assistance in criminal matters is very similar to those in other EU Member States, Italy having ratified the relevant international instruments. In this context, a judicial authority that intends to carry out investigations in a foreign state may request the competent authorities of that State to implement them on its behalf, performing the acts requested15 and transmitting their results to the requesting country. Alongside national legislation, such matters are governed by international conventions16 (although bilateral treaties are much more numerous) and by the general provisions of international law, which – where present – prevail over ordinary legislation.

Extradition involves the surrender of individuals by the state in which they are located to another state that has made an appropriate request to place them on trial or to implement a conviction or other measures involving a restriction of their personal freedom.17 Italian authorities refuse to allow extradition of defendants abroad:

  1. when there are grounds to conclude that they will be subject to persecution or discrimination, or other acts amounting to a violation of their fundamental rights;
  2. for political offences; or
  3. in the event that the conduct in respect of which extradition has been requested is punishable by death in the requesting state.

Within the European Union, a European arrest warrant is a simplified form of extradition (implemented in Italy by Law No. 69/2005). This measure equates to a genuine judicial decision according to which the national judicial authority at which it is aimed is required to recognise the request for the surrender of a person made by the issuing judicial authority, subject to a summary control that the relevant prerequisites have been met.

The right granted to the General Prosecutor to also request the enforcing state to hand over assets covered by any seizure or confiscation order is significant for companies. Where requested by the issuing authority, the Court of Appeal may also order the seizure of assets required as evidence, provided that they are sizable.

Italy allows extradition to a foreign requesting country even if no specific extradition treaty has been signed. The Code of Criminal Procedure provides framework rules for a non-conventional extradition, basically requesting stricter scrutiny on the grounds for the extradition, if there is serious suspicion of guilt and a risk of discrimination, but an Interpol red alert notice, requesting the arrest of an individual in Italy, under an arrest order issued by whatever country in the world, is likely to be executed.

The United Nations Convention against Transnational Organized Crime was ratified by Italy in 2006.

Finally, the Council of Europe Convention on Laundering, Search, Seizure and Confiscation of the Proceeds from Crime (Strasbourg 1990) provides for forms of investigative assistance in, for example:

  1. the collection of evidence;
  2. the transmission of information to another state (even where not requested);
  3. the adoption of common investigative techniques;
  4. the elimination of bank secrecy as well as provisional measures such as the freezing of bank accounts;
  5. the seizure of assets to ensure their retention; and
  6. the confiscation of the proceeds of crime.

In addition, in February and March 2015, Italy signed agreements with Switzerland, Liechtenstein and the Principality of Monaco on the exchange of information, with a view to ending bank secrecy and better pursuing Italian nationals who abscond abroad with the proceeds of tax crimes.

iii Local law considerations

Criminal law is based on the principle of territoriality and, therefore, the investigative authorities may carry out any investigations against any person in Italy and use any item found in Italy as evidence, even when multiple jurisdictions are implicated. The only limit is provided for by Legislative Decree No. 29/2016: Law 29 has transposed Framework Decision No. 2009/948/GAI and provided in Italian legislation the international ne bis in idem principle, concerning persons who have been judged by the jurisdiction of another Member State. The investigative power of the public prosecutor in Italy is not limited by the right to confidentiality or the right to bank secrecy, but only by the secrecy granted to specific classes of professional and official secrets. Consequently, for example, if the public prosecutor were to find some emails within an Italian company sent by the employees or senior managers of an associate foreign company, or documentation drawn up by foreign companies that is potentially useful in a case against Italian persons, there would be no limitation on their use.

On the other hand, should it prove necessary for the public prosecutor to obtain evidence abroad, letters rogatory – amounting to a request in which one state asks another to carry out specific acts (communications, notifications or the acquisition of evidence) – are essential instruments.

V YEAR IN REVIEW

The major bankruptcies that have shaken Italy in recent years (and above all, those of the two major food conglomerates Parmalat and Cirio) have involved criminal offences; the bankruptcies were the result of actions to plunder corporate resources carried out by senior managers and the crises that exposed them were primarily market related.

Italian capitalism is still mainly based on the control of listed companies by families or small groups of connected individuals (hence the description 'relationship capitalism', as opposed to the model of the public company, which is very rare in Italy). In the Parmalat and Cirio cases,18 both companies were catastrophically in debt and the controlling shareholders used fraudulent accounting so as not to lose control of their respective companies, relying heavily on the issue of bonds that they were not able to honour. In the current trials, prosecutors are also arguing that this was only possible with the complicity of national and international banks.

Other major scandals, such as those that broke in 2005 (the attempted banking takeovers of the Antonveneta bank by Fiorani and the Banca Popolare di Lodi, and of the Banca Nazionale del Lavoro by Consorte and Unipol)19 or the more recent case of market manipulation involving the insurance company Fonsai,20 can be distinguished from Cirio and Parmalat as there was no subsequent corporate collapse. These cases, however, were also characterised by an excess of power in the company leadership, which exploited the companies to their own ends.

All these cases have one common denominator: the failure of the 'gatekeepers'. While in the United States, Enron dragged down Arthur Andersen with it, in Italy, Grant Thornton and Deloitte & Touche – two other major auditing firms – were directly involved in the criminal trials for bankruptcy and insider trading relating to the Parmalat affair.

From a criminal law perspective, the public authorities have emerged relatively unscathed from recent major scandals. It is, however, sufficient to read the reports of the hearings by CONSOB commissioners in the trial for insider trading in Parmalat stock to appreciate how, leaving aside any questions of criminal liability, CONSOB's reputation suffered a heavy blow. Its chairman, who was a witness in court, had to admit that the first request for clarifications sent by CONSOB to Parmalat was made on 9 July 2003, following an article in the newspaper La Repubblica raising doubts about the company's actual level of indebtedness;21 had the article not appeared, CONSOB would probably not have initiated any investigation at that point, as it would not have independently ascertained the level of Parmalat's financial difficulties.

The Bank of Italy was hit by the scandal following the attempted takeover of Banca Antonveneta by BPL; the former governor has been convicted for market manipulation in collusion with the then-managing director of BPL.22 As an institution, the Bank of Italy has emerged stronger from this affair, as the trial has highlighted how officials within the bank worked with the utmost honesty and competence, and were capable of withstanding pressure from the governor of the Bank of Italy, who subsequently resigned as a result of the scandal.

In the above-mentioned Fonsai case – regarding market manipulation and false accounting by the former managers and shareholders of an insurance company – the former head of the Italian Insurance Supervisory Authority was charged with bribery.

This simple point goes to the heart of the system: if the gatekeepers fail, if internal and external auditors are not able to guarantee a minimal level of truth in the company accounts, and if the highest national oversight and control authorities are not able (in the best-case scenario) or not willing (in the worst) to exercise effective control, nothing will prevent the worst behaviour by company shareholders.

Between 2012 and 2018, a significant number of cases of market manipulation came under criminal investigation. Since this crime may be punished even if committed entirely abroad, an Italian public prosecutor could investigate market manipulation allegedly committed by rating agencies23 or by international banks that affected securities traded on the Italian market.

Noteworthy is the recent trend of proceedings for financial and bankruptcy law crimes that concern some of the most important banks. Monte dei Paschi di Siena is currently involved in a trial before the Court of Milan for the crimes of market manipulation, obstruction to the functions of the public supervisory authorities and false accounting.24 Other important banks are involved in criminal proceedings for the crime of bankruptcy: the Banca MB,25 Banca Etruria26 and Banca Carife (Cassa di Risparmio di Ferrara)27 cases are just a few of the most important proceedings.

The same can be said of the most recent cases of market manipulation and false accounting that have emerged during the banking and financial crisis of the past few years: the top managers of Banca Popolare di Vicenza are currently on trial in Vicenza.

VI CONCLUSIONS AND OUTLOOK

The legal system's reaction to these financial crises has been left in the first instance to criminal law, with trials that have now been ongoing for years. But can criminal law alone cope with this situation and can it prevent further crises from occurring?

However necessary, criminal law is inherently subsidiary. Given the problem, in the case of Italy, of the inherent tendency of major economic players towards opportunistic behaviour to the detriment of the market, the solution can never, by definition, be left to criminal law alone; it must be integrated into the framework of a comprehensive system of rules.

The first point of order must involve either private law or administrative law alongside some pre-legal regulations such as reputational rules, codes of practice and ethical standards.

This is merely a single aspect of a much more complex picture. To prevent opportunistic behaviour by major corporations to the detriment of the market, one possible solution is to put specific gatekeepers on guard, to use a term used by American scholars.28 Root-and-branch reforms are necessary, not only of criminal law, but also of civil and administrative law. Under such reforms, the role of the gatekeepers – starting with the statutory auditors, the external auditors, and the oversight and control authorities – must be well defined and carried out prior to the initiation of criminal investigations by public prosecutors.

Moreover, their powers of inquiry must be adequately formulated so as to make it possible for the oversight authorities to hear the alarm bells ringing in a timely fashion.

The year ahead

Directive 2017/1371 of the European Parliament and of the Council of 5 July 2017 on the fight against fraud affecting the financial interests of the Union by means of criminal law (the PIF Directive) has important consequences for the liability of companies, since it expressly provides in Article 6 an obligation to incriminate legal persons with reference to all types of crime that fall within its scope, in the same terms already known by the Italian legal system under the discipline of Legislative Decree 231/2001.

The changes that will affect the Italian legal system and, in particular, Legislative Decree 231/2001, will take place by 6 July 2019 (the deadline for transposition of the PIF Directive) and is governed by the law of European delegation 2018 (which is made available in the annex by the Study Service of the Senate of the Republic and Chamber of Deputies – Department of Community Affairs).

One of the most important innovations that will follow the PIF Directive concerns the inclusion of the penal-tributary matter in the scope of the discipline of Decree 231/2001. During the transposition, the Legislative Decree 231/2001 will, in fact, necessarily be modified in reason of the necessary inclusion among the predicate crimes of the liability of legal persons of the tax crimes considered suitable to damage the financial interests of the EU.

Specifically, the Member States must identify the incriminating cases already provided for in the internal legal system that may be considered harmful to the financial interests of the EU and possibly introduce specific types of offence if the internal rules prove to be deficient. In our legal system there are already numerous provisions corresponding to the types of crimes provided for by the Directive in question; however, these provisions do not define crimes as damaging to the financial interests of the EU.

Beyond the crimes with corrupt schemes, fraud, embezzlement and money laundering, the Directive requires that the Member States adopt appropriate measures to suppress fraud against the EU's financial interests by subdividing four different specific cases on the subject of:

  1. expenditure not related to contracts;
  2. expenditure related to contracts;
  3. income other than value added tax (VAT); and
  4. income from VAT own resources.

    In the latter category, the Directive covers three types of illegal conduct in 'cross-border fraudulent systems':

    1. use or presentation of false, incorrect or incomplete VAT returns or documents, resulting in a reduction in EU budget resources;
    2. failure to provide VAT information in breach of a specific obligation, resulting in the same effect;
    3. presentation of correct VAT returns in order to fraudulently conceal non-payment or the illegal establishment of VAT refund rights.

However, it should be noted that the PIF Directive, with regard to 'VAT conduct', will apply 'only to cases of serious offences against the common VAT system' (i.e., to intentional unlawful conduct involving a total loss of at least €10 million and connected with the territory of two or more Member States).

With regard to the above, it is therefore considered that, at the time of transposition of the Directive, the offences referred to in Articles 2, 3, 4, 5 and 10 ter of Legislative Decree No. 74/2000 on tax offences will also fall within the scope of application of the Decree 231/2001 regulations.


Footnotes

1 Mario Zanchetti is a founding partner of Studio Legale Pulitanò-Zanchetti.

2 The most important of these for companies include the Bank of Italy, the Italian Securities and Exchange Commission (CONSOB), the Italian Insurance Supervisory Authority (the Italian insurance regulator since 1 January 2013, replacing the former authority, ISVAP), the Italian Competition Authority (Antitrust) and the Italian Data Protection Authority.

3 Legislative Decree No. 58 of 24 February 1998.

4 Grande Stevens and Others v. Italy, 4 March 2014.

5 For example, in cases involving the receipt of property resulting from the commission of a criminal offence, the notification of the planting of explosives at the company's location or the theft of weapons or explosives, businesses are obliged to self-report.

6 There is no obligation of disclosure; therefore, the investigating lawyer may well decide not to submit to authorities any evidence collected.

7 Engel and others v. the Netherlands, 1976, and following cases, including Grande Stevens and Others v. Italy, 2014.

8 The mere adoption of the model does not appear to be sufficient to preclude the corporation's responsibility. As Milan Trial Court stated: 'the model must have some important characteristics: a deep analysis of the corporation; the ability to find the risky areas for the different types of crimes; and ways to hinder illegal acts, keeping in mind the history [re judiciary] of the company and the characteristics of the other companies that operate in the same sector. The model has to determine what moments in the company are exposed to the risk of crime, study specific procedures to use in those moments that allow for effective control, and use preventive controls and specific protocols to plan the company's decision-making. . . . It must follow the corporation's changes, updating the model as soon as the risk structure evolves (Trib. Milano, Uff. GIP, 20 September 2004, IVRIholding-COGEFI). In another decision, the Court of Milan stated that: 'Effectiveness, specificity and dynamism are structural characteristics of compliance programs.' (Trib. Milano, Sez. XI, Giud. Riesame, Pres. Rel. Mannocci, ord. 28 October 2004, Siemens AG).

9 The Italian government nominated a review commission to empower the efficiency and the aim of prevention of Legislative Decree No. 231/2001.

10 Confindustria is an association representing manufacturing and service companies in Italy. Membership is voluntary.

11 Specified under Articles 7 to 10 of the Italian Criminal Code.

12 Court of Cassation No. 11442/2016.

13 See Section V.

14 On 30 March 2017, the court acquitted the ratings agency Standard & Poor's and five of its former and current managers of market manipulation charges relating to previous downgrades of the country's sovereign debt.

15 For example, the hearing of witnesses and accused persons, precautionary seizures and the provision of evidence or documents and other items relating to the offence.

16 For example, multilateral conventions such as the European Convention on Mutual Assistance in Criminal Matters (Strasbourg 1959), the Additional Protocol to the European Convention on Mutual Assistance in Criminal Matters (Strasbourg 1978) and the Second Additional Protocol to the European Convention on Mutual Assistance in Criminal Matters (Strasbourg 2001).

17 Extradition (and other jurisdictional relations with foreign authorities) is governed by the European Convention on Mutual Assistance in Criminal Matters signed in Strasbourg on 20 April 1959, and by 'other provisions of international treaties in force in respect of the state and the provisions of general international law' (Article 696 of the Italian Code of Criminal Procedure). Only if there is no international law – either treaty law or customary law – or where these are incomplete or contain gaps, will the provisions laid down by the Italian Code of Criminal Procedure apply.

18 The Parmalat case has been split into several different proceedings; the main one has recently been judged by the Court of Cassation (March 2014), a judgment that resulted in complete confirmation of the accusations. The Cirio case was judged by the Court of Rome; the Court of Appeal confirmed the decision in April 2015. The Court of Cassation intervened on 30 January 2018 and annulled it, with reference to another territorial court, with regard to one of the heads of indictment; however, it did not definitively close the judicial case because the verdict of 10 April 2015 was prima facie confirmed by the Court of Appeal of Rome.

19 Both of which were judged by the Court of Cassation in 2012.

20 The Milan Court of Appeal has confirmed the acquittal of Gioacchino Paolo Ligresti, accused of false accounting and stock manipulation, in relation to the past management of Fondiaria-Sai, of which he was an adviser. The Milan Public Prosecutor's Office, Consob and the consumer movement, with 900 former shareholders of the insurance group, had challenged the acquittal, but at the end of the hearing, the Deputy Attorney General Celestina Gravina requested the acquittal. Giulia Ligresti was acquitted by the Court of Appeal of Milan, which accepted the petition for revision of the first-instance judgment and revoked the first-instance plea agreement of two years and eight months in prison. This was forced after the sentence of acquittal against Paolo Ligresti became final, making the two verdicts 'irreconcilable'. The indictment of Jonella Ligresti and other managers of Fonsai has been annulled. The trial will begin again in Milan. On 12 March 2019, the first section of the Court of Appeal of Turin accepted the defence that had raised doubts about the territorial jurisdiction of the Piedmontese Court, which on 11 October 2016 had sentenced Jonella Ligresti to five years and eight months in prison.

21 Milan District Court, criminal proceedings 12473/04, hearing of 31 May 2006, p. 162 of the transcript.

22 The judgment became final in the Court of Cassation in 2012.

23 As mentioned above, on 30 March 2017, the Court of Trani acquitted the ratings agency Standard & Poor's and five of its former and current managers of market manipulation charges relating to previous downgrades of the country's sovereign debt.

24 Currently, the judges of the Second Criminal Section of the Court of Milan have rejected the plea of territorial incompetence made by the defence, which asked to bring the case back to Siena, where it was originally opened. The judges thus declared the hearing open, with the consequent formulation of their requests for evidence and documentary production.

25 Ten former executives of the bank are on trial before the Court of Milan. The trial will begin on April 20 before the judges of the second criminal section of the court of Milan. The offence of obstruction of the supervisory authority has fallen for prescription, while, of the 18 charges, four cases of bankruptcy remain.

26 The former executive director of the bank and other former executives are currently under investigation from the office of the Public Prosecutor of Arezzo.

27 The first degree trial has been concluded, which saw only two convictions among the 11 defendants for whom the Prosecutor's Office of Ferrara had requested more than 47 years. The other nine were acquitted.

28 JC Coffee, 'Gatekeeper Failure and Reform: the Challenge of Fashioning Relevant Reforms', Columbia Law School, The Center for Law and Economic Studies, Working Paper No. 237, 2003.