General context, key principles and hot topics
1 Identify the highest-profile corporate investigation under way in your country, describing and commenting on its most noteworthy aspects.
The highest-profile corporate investigations in Italy focus on international corruption involving the most important Italian companies, infiltration of organised crime in the economic sector and investigations against corporate giants for tax evasion. Italian criminal counsels observe the increased focus on regulatory topics, the higher number of dawn raids with a focus on companies’ internal audit departments, the frequent use of precautionary measures and a growing involvement in cross-border investigations.
2 Outline the legal framework for corporate liability in your country.
Although the Italian system has always recognised a civil and administrative liability for companies, it did not provide for criminal liability in relation to companies until 2001.
This criminal liability is triggered if criminal offences included in a compulsory list have been committed by persons holding representative, administrative or managerial positions in a company, or by persons working under their control, provided that these persons have committed the crimes at least ‘also’ in the interests, or for the benefit, of the company, and the company cannot demonstrate that it has taken adequate measures to prevent the commission of the crimes.
Foreign companies can also be held criminally liable for crimes committed in Italy.
3 Which law enforcement authorities regulate corporations? How is jurisdiction between the authorities allocated? Do the authorities have policies or protocols relating to the prosecution of corporations?
Several law enforcement authorities regulate corporations in Italy, including the Prosecution Service and independent administrative authorities.
Although the Prosecution Service has exclusive jurisdiction on investigations in relation to criminal matters, the independent administrative authorities, which have investigative powers and the power to impose sanctions, only have jurisdiction in specific matters, provided for by law.
As there are several enforcement authorities, the policies and protocols in this regard can differ. However, it is important to highlight that authorities usually have specific protocols relating to cooperation and the exchange of information.
4 What grounds must the authorities have to initiate an investigation? Is a certain threshold of suspicion necessary to trigger an investigation?
Although the law does not provide for a threshold of suspicion necessary to trigger an investigation by certain independent administrative authorities, the public prosecutor shall immediately enter in the dedicated register any criminal data received or acquired, and then start a criminal investigation. The duty of the public prosecutor to bring criminal action is compulsory (not discretionary).
5 How can the lawfulness or scope of a notice or subpoena from an authority be challenged in your country?
Depending on the authority and type of notice, a company may challenge the lawfulness or scope of the notice or production order by way of an application to court.
As regards criminal proceedings, the lawfulness and the scope of a search warrant, and the production of documents or a seizure, may be challenged before the courts. However, subpoenas regarding summoning of witnesses cannot be challenged. Witnesses have a duty to testify in front of a judge.
6 Does your country make use of cooperative agreements giving immunity or leniency to individuals who assist or cooperate with authorities?
Italian law does not provide for a general application of immunity or leniency in recognition of cooperation with investigative authorities.
As regards criminal proceedings, Italian law has provided several case examples of leniency for specific offences, such as criminal organisation and drug trafficking, and – more recently – immunity (for example, with regard to fiscal-related offences in the case of a voluntary collaboration procedure, or crimes against the public administration).
7 What are the top priorities for your country’s law enforcement authorities?
The fight against national and international corruption has been a top priority for the Italian government and its law enforcement authorities for the past few years.
Tax evasion is also a key priority: in recent years, a set of new laws has made the punishments for tax crimes harsher, introducing an enlarged model of confiscation and providing for vicarious corporate liability.
8 To what extent do law enforcement authorities in your jurisdiction place importance on a corporation having an effective compliance programme? What guidance exists (in the form of official guidance, speeches or case law) on what makes an effective compliance programme?
Compliance programmes in Italy are not mandatory but strongly recommended as they are necessary to avoid corporate criminal liability.
However, the adoption of a programme is not sufficient. Companies are required to prove that (1) the compliance programme has also been efficaciously implemented before the commission of the crime, (2) the person who committed the crime has fraudulently eluded it, and (3) the supervisory body has sufficiently monitored the company’s activities.
Over the years, trade associations and professional orders (such as Confindustria) have issued numerous sets of guidelines to help corporations in implementing an effective compliance programme.
Cyber-related issues
9 Does your country regulate cybersecurity? Describe the approach of local law enforcement authorities to cybersecurity-related failings.
During this century, a broad framework of laws has been developed (often as a result of international regulations). In particular, in 2018, Italy implemented Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) and Directive (EU) 2016/1148, concerning measures for a high common level in the security of network and information systems across Europe (the NIS Directive).
Moreover, Italy has ratified Directive (EU) 2018/843, which deals, among other matters, with the proper use of crypto-value to prevent money laundering.
Finally, Law No. 133/2019 provides for a series of obligations on public and private entities that carry out activities of public interest, to ensure the safety of information, systems and networks. Administrative sanctions shall apply in the event of non-compliance.
10 Does your country regulate cybercrime? What is the approach of law enforcement authorities in your country to cybercrime?
Italian law provides for a wide range of offences to prevent cybercrime. Over the years, law enforcement authorities (such as the Prosecution Service and the Italian Data Protection Authority) have given substantial attention to cybercrime.
The law punishes the conduct of hacking, phishing, infection of information technology systems with malware, possession of hacking tools, identity theft and electronic theft. Criminal offences have also been provided in the case of failure to comply with the security measures set out by the law and regulations issued by the Italian Data Protection Authority, unlawful data processing and any untrue or false statement sent to the Authority. Moreover, Law No. 133/2019 provides for a new crime in respect of false information or omissions that could impede or influence the effectiveness of the cybersecurity procedures established by the Law.
With regard to corporations, Italian law provides for financial penalties and disqualification in relation to cybercrime and illicit use of personal data.
Cross-border issues and foreign authorities
11 Does local criminal law have general extraterritorial effect? To the extent that extraterritorial effect is limited to specific offences, give details.
Italian criminal law provides that the courts have jurisdiction on all offences committed within the Italian territory; that is, when at least part of the prohibited conduct takes place in Italy or the event of the crime occurs within the Italian territory.
Italy does not have general extraterritorial jurisdiction, although there are specific cases in which it will exercise extraterritorial jurisdiction (e.g., bribery involving Italian public officials and market abuse on financial instruments admitted on an Italian regulated market, even if the offences are committed abroad). Moreover, extraterritorial jurisdiction could be raised – under certain conditions – by means of the Italian nationality of the perpetrator or the victim, or even when a crime against the state is committed.
12 Describe the principal challenges that arise in your country in cross-border investigations, and explain whether and how such challenges depend on the other countries involved.
The principal challenges derive from the need to identify which states have relevant jurisdiction and then the full cooperation of actions between the state in charge of the investigations and the other states, or all the competent agencies and organisations involved.
Cooperation is needed because of the existence of different laws and regulations in all the countries, mostly relating to privacy, professional privilege regimes and labour laws.
To facilitate coordination among (at least) the EU Member States regarding criminal matters and accelerate cross-border investigations, Directive 2014/41/EU regarding the European Investigation Order in criminal matters came into effect in July 2017. There are also bilateral and multilateral agreements between Italy and states that are not within the European Union.
13 Does double jeopardy, or a similar concept, apply to prevent a corporation from facing criminal exposure in your country after it resolves charges on the same core set of facts in another? Is there anything analogous in your jurisdiction to the ‘anti-piling on’ policy as exists in the United States (the Policy on Coordination of Corporate Resolution Penalties) to prevent multiple authorities seeking to penalise companies for the same conduct?
Pursuant to the provisions of the conventions to which Italy is a party, the international principle of ne bis in idem can be applied only in the event of res judicata (final judgment). There is no prohibition against two criminal proceedings on the same cause of action against the same person or corporation taking place at the same time in two European countries.
It is worth highlighting that in Mihalache v. Romania (8 July 2019), a Grand Chamber of the European Court of Human Rights stated that the public prosecutor’s order discontinuing criminal proceedings while imposing a fine on the applicant was a ‘final acquittal or conviction’. This triggers the application of the ne bis in idem principle, based on a series of criteria that are in line with those relied on by the Court of Justice of the European Union in similar cases.
At the EU level, Council Framework Decision 2009/948/JHA provides for a mechanism of ‘consultation’ among the Member States with the aim of achieving a consensus on any ‘agreed’ solution so as to avoid parallel proceedings in different Member States.
At the international level, there is the principle of lis alibi pendens, but no specific rules aimed at settling the issue of proceedings that are pending simultaneously.
There are no measures in Italy that are comparable to the US ‘anti-piling on’ policy.
14 Are ‘global’ settlements common in your country? What are the practical considerations?
To date, there have been no global settlements involving Italy. However, Italian law does provide for a specific discipline regarding the execution of decisions of foreign states.
15 What bearing do the decisions of foreign authorities have on an investigation of the same matter in your country?
Decisions of foreign authorities do not impede Italian investigations from going forward. Nevertheless, the law provides for final judgments issued by foreign authorities to be recognised in relation to specific aspects (such as reparation or recidivism). When there are international agreements for recognition in force between the parties, the Italian Code of Criminal Procedure provides for the possibility of enforcement in Italy, according to Italian law. Moreover, a 2010 law provides for a new type of mutual recognition of foreign criminal judgments, when they order a minimum of three years’ detention.
Economic sanctions enforcement
16 Describe your country’s sanctions programme and any recent sanctions imposed by your jurisdiction.
Italy is required to observe and enforce UN Security Council sanctions and EU restrictive measures. Furthermore, the European Union applies restrictive measures for the purposes of pursuing the specific Common Foreign and Security Policy objectives or UN Security Council Resolutions.
The restrictive measures imposed by the European Union can target the governments of third countries as well as non-state entities or physical or legal individuals; for example, embargoes on the sale of weapons, other specific or general trade restrictions (import or export bans) or financial restrictions.
Member States are obliged to undertake specific tasks regarding implementation of the measures. The Financial Security Committee is the authorised agency in Italy in charge of monitoring the system for the prevention and sanctioning of money laundering and the financing of terrorism.
The aim of an Italian law issued in 2018 is to organise and simplify the authorisation procedures for the export of dual-use items and technologies.
17 What is your country’s approach to sanctions enforcement? Has there been an increase in sanctions enforcement activity in recent years, for example?
In recent years, the European Union has often made recourse to the imposition of sanctions or restrictive measures both autonomously and in compliance with the binding resolutions of the UN Security Council.
The Italian authorities do not show a strong interest in the execution of sanctions.
18 Do the authorities responsible for sanctions compliance and enforcement in your country cooperate with their counterparts in other countries for the purposes of enforcement?
At the European level, Member States cooperate with each other, for example, as regards authorisation for European operators who intend to work in Member States affected by trade embargoes.
19 Has your country enacted any blocking legislation in relation to the sanctions measures of third countries? Describe how such legislation operates.
The European Commission adopted Council Regulation (EC) No. 2271/96 against the effects of the extraterritorial application of legislation adopted by a third country, and actions based thereon or resulting therefrom (the EU Blocking Regulation), which is directly enforceable in Italy. The measure forbids EU citizens from complying with third-country extraterritorial sanctions unless exceptionally authorised to do so by the European Commission. In August 2018, the Regulation was expanded to curtail the effects of the United States’ withdrawal from the Joint Comprehensive Plan of Action.
20 To the extent that your country has enacted any sanctions blocking legislation, how is compliance enforced by local authorities in practice?
The EU Blocking Regulation has not been subject to any binding judicial interpretation. Moreover, with the exception of the European Commission’s non-binding Guidance Note – Questions and Answers: adoption of update of the Blocking Statute, no further official guidance has been adopted at a local level by Italian authorities.
Furthermore, no cases have yet been brought before the national courts.
Before an internal investigation
21 How do allegations of misconduct most often come to light in companies in your country?
An allegation of misconduct could come to light through a report by a whistleblower, made according to a company’s procedure. Furthermore, an internal investigation could follow the execution of investigative acts, carried out by the Prosecution Service or by an independent administrative authority. Finally, an investigation could be specifically requested by the supervisory body, if anomalies have come to light in the execution of its activity. Similarly, news spread by the media regarding alleged misconduct perpetrated by an executive or an employee could suggest an opportunity for a compliance check, carried out by internal or external auditors.
Information gathering
22 Does your country have a data protection regime?
The main Italian legislation for the protection of personal data is the Privacy Code, amended according to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (GDPR). There are several sector-specific pieces of legislation that could affect a data protection regime, such as the Statute of Workers, the Consumer Code and the Telemarketing Law, and legislation on whistleblowing.
23 To the extent not dealt with above at question 9, how is the data protection regime enforced?
The Data Protection Code provides for both administrative fines and criminal penalties.
The GDPR introduced an antitrust-type sanction regime with fines of up to 4 per cent of annual global turnover or €20 million, whichever is greater. A limited number of breaches fall into a lower tier and so are subject to fines of up to 2 per cent of annual global turnover or €10 million, whichever is greater. Regulators have a range of other powers and sanctions at their disposal.
24 Are there any data protection issues that cause particular concern in internal investigations in your country?
It is necessary to be aware of the potential conflicts between data privacy concerns and the need for gathering information that implies the processing of employees’ personal data. Personal data shall be processed lawfully, fairly and in a transparent manner, and collected for specified, explicit and legitimate purposes. The affected employees shall be informed about the subject and purpose of the investigation, and their rights under the data protection laws. Additionally, in compliance with the principle of data minimisation, it shall be ensured that employees’ personal data is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
25 Does your country regulate or otherwise restrict the interception of employees’ communications? What are its features and how is the regime enforced?
According to local employment law and the Data Protection Authority, a company is prohibited from mass control and unlimited storage of employees’ company emails.
Companies should adopt specific internal guidelines, for approval by trade unions and publicised internally, to enable the employer to carry out controls on employees’ internet files and emails, with specific reference to making employees aware of the fact that the employer may execute controls on the data during internal investigations.
Dawn raids and search warrants
26 Are search warrants or dawn raids on companies a feature of law enforcement in your country? Describe any legal limitations on authorities executing search warrants or dawn raids, and what redress a company has if those limits are exceeded.
If there are reasonable grounds to believe that the corpus delicti (the item on which, or through which, the offence has been committed or the profit made from the crime), or material items relating to the crime, are located on a company’s premises, a search of those premises could be ordered by the public prosecutor.
At the beginning of the search, the accused and the person who has current access to the premises shall be given a copy of the decree ordering the search, with the notice informing them of their right to be assisted by a trusted person.
In the event of seizure ordered by the judicial authority, the person from whom the objects have been seized and the person who would be entitled to their restitution may submit a request for the re-examination of the seizure decree. The request does not suspend the enforcement of the decision.
27 How can privileged material be lawfully protected from seizure during a dawn raid or in response to a search warrant in your country?
Italian law provides for a duty to hand documents and documentary evidence to the requesting judicial authority, except if the person who possesses them by virtue of function, job, service or profession declares in writing that they are covered by either public service or professional secret. The judicial authority shall proceed with the necessary ascertainment if it has reasons to doubt the legitimacy of the declaration and if it cannot proceed without gathering the documents. If the declaration is groundless, the judicial authority shall order the seizure, which can be challenged with a request for the re-examination of the seizure decree.
28 Under what circumstances may an individual’s testimony be compelled in your country? What consequences flow from such compelled testimony? Are there any privileges that would prevent an individual or company from providing testimony?
A witness is obliged to appear before the court, follow the judicial indications and answer truthfully the questions addressed.
If a witness fails to appear, without legal impediment, the court may order the compulsory appearance of the witness and the payment of a fine and the costs arising from the failure to appear. However, if the witness is a foreign citizen, Italy will not be able to enforce the aforementioned sanctions, given lack of jurisdiction. However, some mutual assistance treaties have been signed, which allow Italian enforcement authorities to ask for cooperation.
A witness is not obliged to testify on facts that could lead to self-incrimination. Moreover, the law provides for a right of abstention for the next of kin of the accused and for persons who invoke either public service or professional secret.
Whistleblowing and employee rights
29 Describe the whistleblowing framework in your country. What financial incentive schemes exist for whistleblowers? What legal protections are in place for whistleblowers?
The protection scheme for whistleblowers is mandatory for all companies with more than 50 employees. Below this threshold, the scheme is applicable only when the company has adopted an organisational model for crime prevention. In all cases, the whistleblower’s identity is and must be kept strictly confidential.
There are no incentives provided for in relation to reporting individuals.
A whistleblower is protected from any retaliatory or discriminatory dismissal as a consequence of his or her reporting, and protection from a demotion or any other (direct or indirect) discriminatory or retaliatory measure as a consequence of the reporting.
30 What rights does local employment law confer on employees whose conduct is within the scope of an investigation? Is there any distinction between officers and directors of the company for these purposes?
In relation to internal investigations, the Italian legislator sought to regulate the scope and the limits of companies’ powers, to find a balance between the right of the corporation to protect its interests and assets and the protection of employees from any kind of abuse.
The Italian Workers’ Statute and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) require the observance of certain formalities in conducting the investigations (for example, the employee deemed to have engaged in misconduct has to receive a complete report about the ongoing investigations, with regard to the procedure, the scope and the corporate functions involved; in checking the corporate tools – such as laptops or lockers – the principles of necessity, relevance and no excess have to be respected) as well as in commencing a disciplinary proceedings against the employee who has been found guilty of the misconduct during the investigation.
There is no distinction for these purposes between officers and directors.
31 Do employees’ rights under local employment law differ if a person is deemed to have engaged in misconduct? Are there disciplinary or other steps that a company must take when an employee is implicated or suspected of misconduct, such as suspension or in relation to compensation?
All employees’ rights are safeguarded in the context of internal investigations. A difference can be noted in the ways in which an employer can terminate an employment contract, depending on the type of misconduct: (1) dismissal without notice for just cause (e.g., where there is a serious breach of the employment contract, such as gross misconduct); or (2) ordinary dismissal with notice based on either a subjective reason or an objective reason. In either case, a special disciplinary procedure must be followed: the employer must promptly send the employee a letter describing the facts that would constitute a breach of the contract, wait for the employee’s reply (which must be received within five days) and finally send the employee a letter of dismissal. If an employee is suspected of misconduct, but the company still needs to carry out an internal investigation to ascertain whether that suspicion is justified, precautionary suspension can be implemented until the end of the investigative procedure.
Suspension is not mandatory and does not deprive the employee of salary unless this is expressly provided for by the national collective contract of the particular sector or by the contract. Once the investigation is concluded, in a case of dismissal because of misconduct, the company could ask for the return of the undue salary that has been paid during the period of suspension.
32 Can an employee be dismissed for refusing to participate in an internal investigation?
There is no obligation for employees to take part in an internal investigation. However, from a disciplinary standpoint relating to a general duty of cooperation with the employer or specific provisions in a company’s policies, a refusal to participate may be relevant.
Commencing an internal investigation
33 Is it common practice in your country to prepare a document setting out terms of reference or investigatory scope before commencing an internal investigation? What issues would it cover?
A company is advised to begin each investigation with a carefully drafted action plan, which should identify the following:
- allegations of misconduct or concerns as reported by internal control bodies or whistleblowers, or resulting from media speculations or acts of an investigation;
- the functions and external parties who will manage and conduct the investigation;
- all the conceivable actions to be carried out (documentation to be analysed and individuals to be interviewed);
- the time frame for the investigation; and
- if an external counsel is appointed, how legal privilege will be maintained.
34 If an issue comes to light prior to the authorities in your country becoming aware or engaged, what internal steps should a company take? Are there internal steps that a company is legally or ethically required to take?
There are generally no formal legal obligations on a company to conduct an internal investigation. However, conduct rules issued by regulators may mean an internal investigation is required under those rules, or at least strongly recommended.
When an issue comes to light, it is strongly recommended to take all necessary steps to stop the offending behaviour, if it is continuing, to protect and preserve all material that would be relevant and to adopt preventive measures to ensure that the behaviour cannot occur again.
35 What internal steps should a company in your country take if it receives a notice or subpoena from a law enforcement authority seeking the production or preservation of documents or data?
This decision depends on the individual circumstances of the case and the nature of the request.
Under the Italian Criminal Code, it is illegal to interfere with an investigation by a law enforcement authority (for example, by destroying evidence). In addition, corporations have statutory obligations to preserve documents for certain periods (in general for 10 years).
From a strategic point of view, a company should evaluate opportunities for cooperation. In many cases, it is advisable to cooperate so as to prevent coercive measures and reputational damage.
36 At what point must a company in your country publicly disclose the existence of an internal investigation or contact from a law enforcement authority?
There is generally no requirement for privately held corporations – with no reporting obligations under the securities laws – to publicly disclose the existence of an internal investigation or contact from law enforcement.
However, listed issuers shall publicly disclose information of a precise nature, which has not been made public, relating to one or more issuers and which, if it were made public, would be likely to have a significant effect on the prices of those financial instruments. Therefore, these companies must consider whether the disclosure of an internal investigation or contact from law enforcement would be considered material.
37 How are internal investigations viewed by local enforcement bodies in your country?
There is currently no specific discipline that regulates internal investigations, and it is recommended that companies pay attention to a number of legal issues, such as data protection and employment law-related concerns, as well as the protection of whistleblowers.
Internal investigations could be approached by companies either as a reaction to an investigation started by the Prosecution Service to gather elements that are useful for the defence as part of criminal proceedings, or to cooperate with the enforcement authorities to discover misconduct.
Additional caution should be taken when a judicial investigation is likely; for example, speaking to potential witnesses could result in subornation or be seen as an attempt to obstruct the investigation.
Attorney–client privilege
38 Can the attorney–client privilege be claimed over any aspects of internal investigations in your country? What steps should a company take in your country to protect the privilege or confidentiality of an internal investigation?
Considering that communications between a company and its in-house lawyers are not privileged, it is advisable that internal investigations are carried out by external defence counsel.
To protect the documentation relating to an internal investigation, it is recommended that it be held at the premises of the lawyer (which cannot be inspected or searched), labelling any related communications as ‘Privileged and Confidential’ and restricting the circulation of privileged documents.
39 Set out the key principles or elements of the attorney–client privilege in your country as it relates to corporations. Who is the holder of the privilege? Are there any differences when the client is an individual?
Professional secrecy is usually invoked by the attorney, but in the primary interest of his or her client, who could be either a corporation or a person.
In the case of companies, privilege applies if the information was exchanged (1) for the purpose of legal assistance and (2) with an independent, external lawyer who is not bound to the client by any employment relationship and is a member of the bar.
If the lawyer is assisted by other professionals – such as technical consultants or authorised private detectives – the privilege is extended to them.
40 Does the attorney–client privilege apply equally to in-house and external counsel in your country?
Although the attorney–client privilege applies in relation to external counsel, the professional activity of an in-house counsel is neither recognised nor regulated by any legal provision or statute. In-house counsel cannot be admitted to the bar (with some limited exceptions) and thus are deprived of all rights and privileges attached to independent lawyers who are members of the Italian Bar.
41 Does the attorney–client privilege apply equally to advice sought from foreign lawyers in relation to investigations in your country?
The law provides for the attorney–client privilege to avoid intrusions that could hinder the defence; therefore, this privilege should certainly extend to foreign lawyers, provided that they are admitted to their national bar and their title is recognised by the Italian system. However, to date, there is no precedent from an Italian court to confirm this reasoning with specific reference to lawyers (only with regard to foreign private investigators).
42 To what extent is waiver of the attorney–client privilege regarded as a cooperative step in your country? Are there any contexts where privilege waiver is mandatory or required?
There is no general concept of waiving privilege under Italian law.
Public prosecutors consistently state that they cannot expect waiver of the attorney–client privilege and that waiver could not be considered a prerequisite to obtain credit for cooperation. Nevertheless, submitting privileged documents to authorities is regarded, in general, as a cooperative step.
It is mandatory to discuss any initiative with the client. Divulging a professional secret without justification (or using it for one’s own profit or that of a third party), and thereby procuring damage, is an offence.
43 Does the concept of limited waiver of privilege exist as a concept in your jurisdiction? What is its scope?
The Italian legal system does not provide for waiver of privilege (neither general nor limited). However, with reference to criminal proceedings, the jurisprudence has stated that the privilege between a client and an attorney may suffer limitation and restrictions if the lawyer is suspected or accused in criminal proceedings. Even if there is no actual waiver, in these cases all the information becomes available to third parties by means of the gathering of that information in the trial dossier.
44 If privilege has been waived on a limited basis in another country, can privilege be maintained in your own country?
There is no direct legal effect in Italy for the fact that privilege has been waived in another country. However, waiving privilege in one country by submitting documents to third parties can result in a loss of privilege, considering, for example, that documents disclosed to non-protected persons could be seized if they have lost privilege.
In addition, cooperation between enforcement agencies would be likely to render the privilege theoretical.
45 Do common interest privileges exist as concepts in your country? What are the requirements and scope?
The concept of common interest privilege does not exist in Italy. However, according to the law, all documents concerning the defence’s strategy and all the correspondence between the defending counsel and the client are privileged and cannot be gathered in the trial dossier.
Documents and correspondence in the possession of the attorney that also involve other lawyers and other accused, and which relate to the proceedings and the defence strategy of the client, have to be considered as privileged to protect the client’s rights of defence.
46 Can privilege be claimed over the assistance given by third parties to lawyers?
Privilege could be invoked by an attorney even if the defence activity is carried out with the assistance of third parties. It is possible to include third parties who are, among others, trainee lawyers, secretaries, authorised private detectives and technical consultants.
Witness interviews
47 Does your country permit the interviewing of witnesses as part of an internal investigation?
Italian law allows witnesses to be interviewed during an internal investigation (usually by an external counsel).
An employee is requested to cooperate with the investigation team with regard to any aspects connected to his or her role and tasks, and more broadly to any information learned as part of the job. In the case of a former employee, an interview may be carried out only with the consent of the person.
48 Can a company claim the attorney–client privilege over internal witness interviews or attorney reports?
In most cases it is preferable for the interviewer to be a lawyer, who acts in accordance with all the formalities provided for by the defence investigations provisions of the Italian Code of Criminal Procedure. This ensures that all findings remain exclusively available to the defence counsel and the client.
49 When conducting a witness interview of an employee in your country, what legal or ethical requirements or guidance must be adhered to? Are there different requirements when interviewing third parties?
If an internal investigation is carried out with the prerogatives of preventive defence investigations, the external counsel has to give the interviewee all the warnings as provided for by the law (such as their right to silence or not to give any statement). Moreover, the lawyer shall inform the employee about his or her role and the purpose of the interview, and shall stop the gathering of information if the interviewee makes statements revealing indications of guilt.
The aforementioned rules apply to both employees and third parties.
The Italian Workers’ Statute provides for specific rules to avoid any kind of abusive activity by the employer.
50 How is an internal interview typically conducted in your country? Are documents put to the witness? May or must employees in your country have their own legal representation at the interview?
Italian law requires certain formalities to be followed. For example, the lawyers give the witnesses a warning, then they ask the questions and listen to the answers, all of which is included in a report, which has to be signed by all the persons attending the interview.
Documents could be shown to the interviewee if necessary or helpful.
Generally, it is not possible for an employee to be assisted by a lawyer during an internal interview, unless the employee is already the subject of a criminal investigation or disciplinary proceeding.
Reporting to the authorities
51 Are there circumstances under which reporting misconduct to law enforcement authorities is mandatory in your country?
According to Italian law, there is no obligation for a private entity to report crimes to the competent authorities (only public officials have the duty to report what they become aware of within their professional activities). Moreover, a lawyer is not under any obligation to disclose incriminating evidence against a client.
However, there are specific laws that provide for this kind of duty in relation to certain crimes and specific individuals (e.g., the law on anti-money laundering and illicit funding).
52 In what circumstances might you advise a company to self-report to law enforcement even if it has no legal obligation to do so? In what circumstances would that advice to self-report extend to countries beyond your country?
The decision to disclose the findings of an investigation could be encouraged by the positive effect that cooperation with the authorities could have on a judge when quantifying the penalty. Moreover, it can contribute to avoiding the application or determining the reduction of pretrial disqualifying sanctions.
No negative consequences are provided for by law in respect of a lack of cooperation. A company under investigation – or at trial – assumes the same position as the defendant; therefore the privilege against self-incrimination (or right to silence) is granted. Nevertheless, the attitude shown by the company could lead to greater reputational risk.
53 What are the practical steps needed to self-report to law enforcement in your country?
The steps to be taken depend on the specific case at issue and the authority involved but, in any event, there is no obligation to self-report. Italian law does not provide for benefits deriving from the disclosure of information gathered through internal investigations, and does not contemplate any limitation to the investigation activity and to the possibility for the prosecutor to file a request for committal to trial.
It is important to consider in each case whether self-reporting could help in the settlement with the public prosecutor and avoid the application of a disqualifying measure.
Responding to the authorities
54 In practice, how does a company in your country respond to a notice or subpoena from a law enforcement authority? Is it possible to enter into dialogue with the authorities to address their concerns before or even after charges are brought? How?
The response will depend on the type of notice received by a company and which authority has sent it. In the case of a request for document production from the public prosecutor, the company will respond through its external legal counsel, which can also arrange a formal appointment with the authority. Meetings with the public prosecutor can be scheduled but usually they are accompanied by the filing of a pleading.
In the case of a notice received by other enforcement authorities (e.g., a chamber of commerce), under Law No. 689/1991, the company may submit a defence case, within 30 days of notification, asking to be heard.
55 Are ongoing authority investigations subject to challenge before the courts?
It depends on the kind of investigation.
Generally, a criminal investigation itself cannot be challenged before the courts but individual measures taken as part of the process (e.g., seizure of documents) can, when unlawful.
Italian law provides for the possibility to challenge a request by the public prosecutor to continue with the investigations after expiry of an initial term of six months, one year or 18 months, depending on the crime.
56 In the event that authorities in your country and one or more other countries issue separate notices or subpoenas regarding the same facts or allegations, how should the company approach this?
In general, it is a requirement to answer all requests received from the authorities. However, in criminal matters, there are now several instruments to strive for mutual cooperation and joint action teams, to prevent unnecessary duplication of effort, from both the private and the public sides.
57 If a notice or subpoena from the authorities in your country seeks production of material relating to a particular matter that crosses borders, must the company search for and produce material in other countries to satisfy the request? What are the difficulties in that regard?
If the material is under the control of a company (even by means of a parent company, therefore with a right to take possession, inspect or take copies of a subsidiary’s documents), it is required to look for and produce all the requested material, even if located in another country.
It could be that the data protection legislation in the other country does not permit the removal or transfer of the data from that jurisdiction: the requesting authority will seek help through mutual legal assistance with the foreign state.
A parent company could also raise a self-incrimination issue that impedes the delivery of data or documents.
Instead, if the document is not under the control of the company but the holder is known, the company can ask for it or indicate to the authorities the identity of the holder.
58 Does law enforcement in your country routinely share information or investigative materials with law enforcement in other countries? What framework is in place in your country for cooperation with foreign authorities?
There are several EU Directives and bilateral and multilateral agreements between Italy and countries that are not EU Member States to facilitate coordination between enforcement authorities.
Italian tax law enforcement authorities regularly exchange information based on conventions against double taxation signed with other states.
59 Do law enforcement authorities in your country have any confidentiality obligations in relation to information received during an investigation or onward disclosure and use of that information by third parties?
During criminal proceedings, the investigations are protected by secrecy, so the public prosecutor and enforcement authorities will not have to disclose information to third parties. However, some investigations are conducted within a mutual assistance regime, in which authorities cooperate and exchange all the data acquired in the respective country.
60 How would you advise a company that has received a request from a law enforcement authority in your country seeking documents from another country, where production would violate the laws of that other country?
The advice given will depend on the specific case: in fact, a comparison should be made between the benefits of cooperating with the authority in the company’s country and the legal risk of violating a rule in the other country. To achieve this, the company should analyse the relevant rules, and request the legal opinion of a lawyer in that country. In cases of gross and evident violation, the best option would be to submit the opinion received to the public prosecutor and to encourage a mutual assistance request directly from one authority to the other.
61 Does your country have secrecy or blocking statutes? What related issues arise from compliance with a notice or subpoena?
A request by an authority is usually a sufficient reason for the disclosure of data, according to the Italian Privacy Code.
62 What are the risks in voluntary production versus compelled production of material to authorities in your country? Is this material discoverable by third parties? Is there any confidentiality attached to productions to law enforcement in your country?
Voluntary production can be regarded in a positive light by a judge, as can effective cooperation with the authorities. However, it can generally not be challenged before the courts. In criminal law, even if the investigative dossier is supposed to be protected by secrecy, the company should be conscious that, once a document has been handed to the public prosecutor, it is possible that it will be given to third parties (such as consultants to the public prosecutor) even before the end of the preliminary investigations (covered by secrecy).
Prosecution and penalties
63 What types of penalties may companies or their directors, officers or employees face for misconduct in your country?
Individuals could face financial penalties and detention, as well as seizure and ancillary penalties (such as disqualification).
In respect of vicarious criminal liability, Italian law provides for four types of penalties: financial penalties, disqualifying measures, seizure and publication of the judgment.
64 Where there is a risk of a corporate’s suspension, debarment or other restrictions on continuing business in your country, what options or restrictions apply to a corporate wanting to settle in another country?
Legislative Decree No. 50/2016, which adopted Directive 2014/24/EU on public procurement, prohibits companies found guilty (in the previous five years) of specific offences (e.g., corruption, fraud, money laundering and terrorism) from competing for government contracts throughout the European Union.
65 What do the authorities in your country take into account when fixing penalties?
According to the Italian Constitution, penalties cannot consist of any treatment that is inhumane and must have the aim of rehabilitation of the convicted individual.
With regard to individuals, the judge takes into account the seriousness of the crime deriving from several aspects (such as the nature of the offence, the seriousness of the consequent damage, existing precedents, the subsequent conduct of the accused, and so on).
Corporations are punished with financial penalties based on a quota system, considering various factors: the seriousness of the deed, the degree of liability of the entity and the activity carried out by the entity to eliminate or diminish the consequences of the unlawful act and to prevent the commission of further unlawful acts. The judge also considers the economic and financial status of the entity.
Resolution and settlements short of trial
66 Are non-prosecution agreements or deferred prosecution agreements available in your jurisdiction for corporations?
Italian case law states that the law on probation is applicable only to individuals. Neither non-prosecution agreements nor deferred prosecution agreements are provided for.
It is possible for a corporation to settle a case in advance by means of a special proceeding known as an application of punishment upon request. The company may agree with the public prosecutor to request the court to impose a penalty (reduced by a maximum of a third), when:
- the employee, whose conduct triggers the corporate liability, settled the case by means of an application of punishment; or
- the only sanction applicable to the corporation is a financial one.
However, the agreement between the company and the public prosecution authority will be rejected by the judge if it is felt that a permanent disqualifying sanction is warranted.
67 Does your jurisdiction provide for reporting restrictions or anonymity for corporates that have entered into non-prosecution agreements or deferred prosecution agreements until the conclusion of criminal proceedings in relation to connected individuals to ensure fairness in those proceedings?
Neither non-prosecution agreements nor deferred prosecution agreements are provided for by Italian law.
However, proceedings for vicarious liability against a corporate entity are automatically merged with proceedings for an underlying crime allegedly committed by an individual. Therefore, the judicial authority will be aware of the choice of the company in the case of, for example, an application of punishment upon request.
68 Prior to any settlement with a law enforcement authority in your country, what considerations should companies be aware of?
A company should assess the strength of the prosecution and defence cases.
Adverse effects, such as damage to reputation, should be considered. According to Italian law, a settlement cannot be considered a confession of liability; instead, an application of punishment shall be considered equal to a judgment of conviction, unless otherwise provided by the law. However, it has no effect and cannot be used for evidence purposes in civil, disciplinary, tax or administrative proceedings, including judgments for ascertaining accounting liability.
International implications should also be considered, such as the effect in regard to ongoing investigations in other jurisdictions.
69 To what extent do law enforcement authorities in your country use external corporate compliance monitors as an enforcement tool?
External corporate compliance monitors are not used as an enforcement tool. In specific cases, the law provides for the appointment of a special commissioner (e.g., when a disqualifying measure should be applied, which results in the interruption of all corporate activities).
70 Are parallel private actions allowed? May private plaintiffs gain access to the authorities’ files?
Parallel civil actions are allowed. A civil action brought before the civil court may be transferred to criminal proceedings if, in the civil court, a judgment on merits has not been issued. If the action is brought against the accused in a civil court after joining the criminal proceedings as a civil party, or after a judgment of first instance is issued, civil proceedings shall be suspended until the delivery of a final criminal judgment. The plaintiff may have access to the public prosecutor’s dossier by making a formal request.
Publicity and reputational issues
71 Outline the law in your country surrounding publicity of criminal cases at the investigatory stage and once a case is before a court.
Under Italian law, investigative acts carried out by a public prosecutor and the police are protected by secrecy until the accused is entitled to have knowledge of them and, in any case, not beyond the closing of preliminary investigations.
Publication in the press of the aforementioned documents or their content, even if partially, is not allowed.
The publication, in whole or in part, of documents that are no longer protected by secrecy is not allowed until preliminary investigations are concluded or the preliminary hearing is terminated. However, if the proceedings reach the trial stage, publication (in whole or in part) of the documents in the investigative dossier is not allowed prior to the delivery of the appeal judgment.
Nevertheless, publication of the content of documents that are no longer protected by secrecy is allowed.
72 What steps do you take to manage corporate communications in your country? Is it common for companies to use a public relations firm to manage a corporate crisis in your country?
Corporate communication is a delicate aspect of management, which should always be evaluated carefully by experts and approved by the legal office and external legal consultants. An incorrect press release by a company could have a detrimental effect on customers and on the strategy eventually chosen during a trial.
The biggest companies in Italy rely on both internal and external professionals for public relations.
73 How is publicity managed when there are ongoing related proceedings?
It is a general rule that the court should not be influenced by press reports surrounding a trial. Therefore, during criminal proceedings, a company should avoid public communications and, when unavoidable, should make only brief and factual statements that have been approved by its external legal consultants.
Duty to the market
74 Is disclosure to the market in circumstances where a settlement has been agreed but not yet made public mandatory?
Privately owned corporations with no reporting obligations under the securities laws are generally not required to publicly disclose the existence of a settlement.
However, listed issuers shall publicly disclose information of a precise nature, relating to one or more instruments, and which, if it were made public, would be likely to have a significant effect on the prices of those financial instruments. Therefore, these companies must consider whether the disclosure of a settlement would be considered material.
Environmental, social and corporate governance (ESG)
75 Does your country regulate ESG matters?
The Italian legal framework includes numerous rules concerning ESG, including:
- Legislative Decree 152/2006 on environmental liability;
- Legislative Decree 231/2001 and Law 221/2015 on the green economy;
- Law Decree 111/2019 on air quality;
- Law 68/1999 (as modified by Legislative Decree 185/2016) on the rights of disabled workers;
- Legislative Decree 81/2008 on the protection of workers’ health and safety in the workplace;
- Law 190/2021 on the adoption of anti-corruption models by companies owned or controlled by the state; and
- Regulation (EU) 2019/2088 on sustainability‐related disclosures in the financial services sector on sustainable investment.
Law 208/2015 provides for ‘benefit corporations’, namely those that include benefits both for society and the environment in their mission, to be subject to ESG mandatory disclosures and to enjoy beneficial fiscal treatment.
With regard to ESG disclosure, Italy has enacted Legislative Decree 49/2019 (implementing EU Shareholder Rights Directives I and II), Legislative Decree 147/2018 (implementing Directive (EU) 2016/2341 on the activities and supervision of institutions for occupational retirement provision (IORPs) – European Pensions Directive IORP II) and Legislative Decree 254/2016 (implementing Decision 2014/95/EU on the mobilisation of the EU Solidarity Fund), which requires public interest entities to disclose sustainability into the reporting cycle and provides for a voluntary regime applicable to non-obliged companies.
The Italian National Action Plan on Business and Human Rights for 2021–2026 commits to implementing the United Nations’ 17 Sustainable Development Goals.
76 Do you expect to see any key regulatory or legislative changes emerge in the next year or so designed to address ESG matters?
Pursuant to Law 53/2021, the Italian government has recently adopted a series of legislative decrees to implement European directives in respect of ESG matters (e.g., Legislative Decrees No. 199/2021 on renewable sources, No. 197/2021 on port reception facilities for the delivery of waste, No. 197/2021 on the reduction of the impact of plastic products, No. 210/2021 on common rules for the internal market for electricity and No. 104/2022 on transparent and predictable working conditions in the European Union).
Other national legislation is expected to be enacted to implement Regulation (EU) 2020/852 on the establishment of a framework to facilitate sustainable investment.
As an example, Regulation (EU) 2021/241 of 12 February 2021, establishing the Recovery and Resilience Facility, establishes that all measures of the National Plans for Recovery and Resilience (PNRR) must satisfy the principle of ‘do no significant harm to environmental objectives’, with reference to the system of taxonomy of eco-sustainable activities indicated in Article 17 of Regulation (EU) 2020/852 on the establishment of a framework to facilitate sustainable investment.
In this regard, on 30 December 2021, the Ministry of Economy and Finance published an operational guide to help administrations in their evaluation of interventions that can be financed under the PNRR. Moreover, the REPowerEU proposal, the package of measures that the European Commission adopted on 18 May 2022 to reduce dependence on fossil fuels from Russia and accelerate the transition to green energy, significantly increases the objectives already set out in the ‘Fit for 55’ package (to ensure that EU policies are in line with the climate goals agreed by the European Council and the European Parliament).
77 Has there been an increase in ESG-related litigation, investigations or enforcement activity in recent years in your country?
The first Italian greenwashing case was in January 2020, when an Italian oil and gas company was fined €5 million by the Italian Competition Authority for having launched a misleading marketing campaign for its Diesel+ fuel. Another conviction for misleading marketing was issued in November 2021 against a company producing a textile fibre touted as eco-friendly.
Anticipated developments
78 Do you expect to see any key regulatory or legislative changes emerge in the next year or so designed to address corporate misconduct?
There is an ongoing debate in Italy in relation to the possibility of making the implementation of compliance programmes mandatory, when requested to exclude corporate vicarious liability. Several law proposals aim to extend the crimes that could trigger vicarious liability.
There are increasing requests for the introduction of restorative justice to stimulate self-reporting by companies, in exchange for the possibility to reach a settlement with the enforcement authorities for the dismissal of a criminal case.
Moreover, Legislative Decree No. 24 regarding the implementation of Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law (the Whistleblowing Directive) was issued on 10 March 2023.