“Mr Stevens shall, forthwith, return to Pascale all its books and records in his possession and control and, where those books and records are in electronic form, he shall perform this obligation by providing copies of all documents in electronic form on an appropriate storage device and thereafter irretrievably removing, deleting and purging all such documents from his electronic systems.”
“Without prejudice to the above paragraphs and in addition to those documents described at paragraph 6 of the Order of Deputy Master Kay KC dated9 February 2023 , by 4.00 pm on15 September 2023 , the Second Defendant’s computer and mobile phone shall also be searched for documents (whether having been deleted or not) including any correspondence and electronic communications and other documents containing any of the following keywords: (a) “Gravity”; (b) “Genii”; (c) “Ikofin”; (d) “Lopez”; (e) “Lux”; (f) “Peugeot”; (g) “Lavrov”; and (h) “Vodka”, for the period1 December 2019 up until the date of the search which evidence or relate to (i) the receipts referred to at paragraphs 2(4) and 2(7) above, (ii) the payments referred to at paragraph 2(5) above, (iii) the loan referred to at paragraph 2(6) above, and/or (iv) the sale referred to at paragraph 2(8) above, but excluding any documents which set out or refer to any legal advice.”
“However, I am not going to allow the court process to be completely frustrated simply because someone has issued a writ in Italy. That does not seem to me to be quite the proportionate approach. Nonetheless I do, I think, have to respect the fact that there are some arguments here that perhaps cannot just be dismissed out of hand. What I am going to do is I am going to make a completely revised disclosure order in relation to para.3 of Master Bard's order. It is going to keep its search terms, but the storage devices that are referred to in the protocol must be forensically digitally imaged and two copies made. One copy must be lodged at the High Court where it will be kept securely and shall not be open to inspection underCPR Part 5 or by either party without further order of the court. The second copy shall be subject to a search by an independent forensic digital consultant with the second defendant having the right to have one of his own supervising. That search shall identify the locations of files or traces of files on those digital images, and that list of hits and sufficient data to locate the potential files with those hits shall be lodged at court in a digital form, and that shall be open to the parties. When the matter returns to court next time, if so advised, argument will be heard as to the extent to which production and access to the documents which appear to be represented by those hits may or may not be given in these proceedings, and at that hearing the nine Italian companies shall have the right to be heard if so advised and may, if so advised, apply to join in and of course it goes without saying that each party may wish to apply to join those in as parties if necessary. It seems to me that that reaches the point where nobody actually has these documents, if they still can be retrieved, or has access to them, but we do know whether there are traces suggestive of those documents existing and where they are on those drives (or whatever other media it is) which will have been imaged and kept at court so that it becomes a simple step then, if the court says "produce them" for that process to be done really very swiftly, because it is a simple question of running the necessary digital software to retrieve the files from the images. But that would be the first and only time that those files actually will have been reconstituted or accessed. I think that is a position which, in my view, sufficiently respects what I can see from an English law perspective to be the potential interest of these nine companies, but also moves this case forward, respecting as I do the fact that Part 71 proceedings have to be got on with and that the judgment of the court must not be frustrated. Progress needs to be made next time. But it is necessarily the case that it may be necessary to have Italian law evidence and directions for that may need to be given next time or at least argument heard on the point in a more mature way next time, but it will at least be informed by some knowledge of what it is we are all talking about rather than proceedings in the dark. At least we will know whether there are hits at all. The second defendant is apparently accused, you know, of not having deleted these documents. We do not know whether he has. I mean, he says he has. Maybe he has. Maybe he has succeeded. It could be a flash in the pan or it may be in good faith he deleted them, but using forensic techniques it will be possible to reconstruct them, because it is incredibly difficult to delete in an absolute sense short of destroying the physical substrate of the recording medium. You can reconstruct files, as I mentioned earlier, from the indentations in the magnetic pits on the surface of the recording medium, if you really must, which is what they do in police pornography, child pornography reconstruction cases. To actually render a drive completely erasable, you have to re-write it, write it, re-write, re-write it, re-write it and keep doing it, which is tantamount to effectively destroying the disc. So it may well be that in good faith he has deleted it and maybe there are some traces. Whether that would be a breach in Italian law of the contract, we do not know. We will have some better information next time when we come to court as to whether this is something about nothing or whether there is something, and then it can be argued as to whether access to those documents, if they can be retrieved, is or is not likely to produce Italian law negative effects. That is the effect of the order I am going to make.”
“1. Paragraph 3 of the Bard Order is set aside. 2. By 4.00 pm on Thursday 26th of October 2023 the Second Defendant shall permit an independent IT consultant jointly engaged by the Claimants and the Second Defendants (“the Consultant”) to forensically image the hard drive of the Second Defendant’s computer and his mobile phone and make two copies (“the Copies”). 3. As soon as reasonably practicable after making the Copies the Consultant shall provide one of them (“the Back-Up Copy”) to the Second Defendant’s solicitors to be held subject to the Undertaking. 4. The other copy (“the Search Copy”) will be subject to a search by the Consultant (“the Search”) that shall identify: (1) File types, the location of files or traces of files, or digital images of files including any correspondence and electronic communications and other documents which: i. which were said to have been deleted and contain the following keywords: “Pascale” “Atlantic 57” “Grenda” “Grayview” “Latimore” “Lenon” “Bluestone” “Kilgore” “Giotto”; ii. for the period1 December 2019 up until the date of the search (whether having been deleted or not) and contain any of the following keywords: “Gravity” “Genii” “Ikofin” “Lopez” “Lux” “Peugeot” “Lavrov” “Vodka” (2) File types, the location of files, traces of files, and/or digital images of files which relate to any WhatsApp conversations or communications between the Second Defendant and the First Defendant and/or Gerald Smith (from14 February 2022 to the date of the search) that have been deleted or otherwise lost. 5. The Consultant shall prepare a list (“the List”) of the results of the searches undertaken pursuant to paragraph 4 above, recording sufficient information to identify the locations and file types of any files, traces of files or digital images of files identified in the course of the Search, and provide copies of the List to the Claimants’ solicitors and Second Defendant’s solicitors. 6. For the avoidance of doubt, in carrying out the Search and preparing the List the Consultant shall not retrieve or access any of the files stored on the Search Copy nor permit any other person to do so.”
“In relation to civil, I think there is slightly more credibility there. There is clearly these release deeds that impose a duty to hand back documents and to destroy digital documents. That seems to be there in black and white. So, it is fair to say that these nine companies do, on the face of it, at least appear to have an interest of sorts. It is the sort of interest that would justify them being heard if they wished to assert what should be done in respect of protecting those interests, whether at human rights or in contract law or anything else.”
“The United [States] Supreme Court famously said in Hilton v Guyot, a case on the recognition of foreign judgments: “‘Comity,’ in the legal sense, is neither a matter of absolute obligation, on the one hand, nor of mere courtesy and good will, upon the other. But it is the recognition which one nation allows within its territory to the legislative, executive, or judicial acts of another nation, having due regard both to international duty and convenience, and to the rights of its own citizens or of other persons who are under the protection of its laws.”
“In my view comity is capable of playing a freestanding part in the judicial decision-making process, and (contrary to a submission made by PIFSS) does not arise for consideration solely when a real risk of prosecution has been shown.”
“The proper approach to evidence of foreign law is well-established. In summary: (i) foreign law is a question of fact to be proved, generally, by a qualified expert in the law of the foreign country and whose expertise extends to the interpretation and application of the foreign law; (ii) the court will not undertake its own research but is not inhibited from using its own intelligence and common sense; (iii) where expert evidence is uncontradicted the court should be reluctant to reject it …”
“[I]. Anyone who unduly accesses a computer or telematic system protected by security measures or interferes with it against the wishes, implied or otherwise, of the person who has the right to exclude him shall be punished with imprisonment for up to three years.”
“So the legislation wants to protect the owner of the digital space from third parties. … So this article protects the owner of the digital space and subsequently, also people that are inside the system. But this is not the meaning, this is not what that article wants. So what it says is only protects the owner of the digital space.”
“So the legislation is clear. So it says that the owner has the right of exclusion and we talk about the system, the whole system, the whole data, not the singularity”
“We have to divide the owner of the data and the owner of the system. So we can have the owner of the system allowing third party entering the system and access the data. But you can’t deny access to the data in this case. So the owner of the single file in this case, it can’t prevent third party from entering the system. So – it can’t prevent if a court ordered this.”
“Indeed, this Court (Division 5, decision number 1727 of30/09/2008 , Romano, file number 242938) has stated that the offence of unauthorised access to a computer system may occur concurrently with that of computer fraud, as the legal interests they protect and the behaviours they sanction are different. The first protects the digital domicile under the profile of “ius excludendi alios [right to exclude others]”, including in relation to methods of access by authorised persons, while the second provides for alteration of the data stored in the system in pursuit of undue profit.”
“3.1. As has been observed in the legal literature and case law, the offence set out by Section 615-ter ICC comes under the category of computer offences, aimed at deterring illicit conduct with the object or instrument of information and data creation or storage systems or the automatic transfer of these. To ensure ever greater attention to the interest of confidentiality, protected under traditional criminal law by Law number 547 of23 December 1993 , the new offence outlined in Section 613-ter ICC was introduced, which considers the modern form of attack on or illicit interference with privacy, carried out by accessing or remaining connected to computer or telecommunications systems without authorisation, against the express or tacit wishes of the right-holder, with possible acquisition of data recorded electronically. Whether or not the offence in question is placed in the section for offences against the inviolability of the home depends, as can be seen from the report accompanying the relevant draft law, on whether computer systems are considered “an abstract extension of the area to be respected pertinent to the holder of the interest, guaranteed by article 14 of the Constitution, and the most traditional and essential aspects of which are protected in criminal law by Sections 614 and 615 ICC”.”
“As clarified by a consolidated approach, which can already be defined in terms of “current law”, the criminal offence of unauthorised access to a protected computer or telecommunications system, set out by Section 615 ter ICC, also covers the behaviour of accessing or remaining in the system not only (as is obvious on the part of someone unauthorised to access it, but also on the part of someone who, despite being authorised, violates the conditions and limits resulting from the set of rules laid down by the owner of the system to objectively delimit access thereto, or on the part of someone who puts in place operations different in essence from those for which access is permitted. For the offence to be committed, the aims and purposes which may have subjectively led to access to the system are irrelevant.”
“The legal interest protected by the law in question is consistently identified by the case law of the supreme courts as the digital domicile, under the profile of ius excludendi alios [right to exclude others], also in relation to methods governing access by any authorised persons. In the reconstruction of the facts submitted for its examination, in particular, the court ruling on the merits must follow the approach indicated, in order to verify whether the accessing of or remaining in the computer system, including by someone with the right to access it, took place in compliance or against the wishes of the owner of the same system, whose wishes may be expressed explicitly or tacitly. Some applicable convictions of the Supreme Court fit into this approach. These emphasise that, for the offence in question to be committed, if a person with the login details to access it withdraws information from a confidential database, it is necessary to assert whether or not the defendant's conduct in copying/duplicating the files falls within the scope of their powers, in relation to their duties carried out within the organisation whose computer system it is, i.e. whether or not the copying and duplication fall outside the duties of the worker, going against the rules on accessing or remaining in the computer system, contained in organisational provisions imparted by the owner thereof. These principles outlined can also be seen in more recent cases, in which it is shown how the offence set out by Section 615-ter is carried out by virtue of the conduct of the person who, despite having authorised access and not breaking the formal rules set out by the owner of a protected computer or telecommunications system to delimit access thereto, accesses or stays in the system for reasons which are, in essence, extraneous to those for which they were given access powers. Therefore, criminal liability for that offence can be identified in the transfer, via “email”, of confidential client data, from a bank employee to another employee not authorised to view said data or in the conduct of a collaborator with a law firm - only entrusted with management of a specific number of clients - who accesses the law firm's computer archives, proceeding to copy and duplicate, by transferring them onto other computer devices, files regarding all of the law firm's clients and, therefore, acting outside the duties with which they were entrusted. And yet again, in the case of access “invito domino [without the owner's consent]”, carried out by using the access "passwords" known to the defendants by virtue of their previous employment relationship, of data, information and programs contained in the computer system of the company which had previously employed them, in order to divert away its clients and thereby obtain undue profit to the detriment of the aggrieved party. Finally, in reference to the psychological aspect of the offence, this is identified in the awareness and desire to access or remain in the electronic or computer system of others against the wishes of the holder of the exclusion right.”
“After due consideration, it may therefore be maintained that “Dropbox”, as a virtual space, used by the beneficiary of the service to collate “files” or folders containing “files”, in order to facilitate access to them, view them and use them, is both a telecommunications system and, at the same time, a computer system, which contains digital documents. This has been maintained by the case law of the supreme courts, in affirming that email messages not sent by the user, but saved in the “drafts” folder of their “account” or in a virtual space for this purpose (such as Dropbox or Google Drive), only accessible by entering a username and password, constitute digital documents. It therefore seems clear (and it is also uncontested by the appellants) that the “Dropbox” service constitutes a digital domicile, the protection of which is provided for by Section 615-ter ICC. It should also be mentioned that in computer science, the term “account” indicates that set of functionalities, instruments and content attributed to a username which, in specific operating contexts, the system makes available to the user: an environment with content and functionalities that can be personalised, along with a convenient level of isolation from other parallel users.”
“In other words, it is a case of verifying, for the purpose of the decision on whether the objective aspect and psychological aspect requirements for the crime under discussion were met, whether the Dropbox” storage space belonged exclusively to the defendants, given that they created it, the use of which they temporarily granted to “Strabla” during their employment relationship, without this use reducing the power of Bolsoni and of Redolfi to amend the conditions of access to the space in question, making it belong exclusively to them; or if, on the other hand, once created, purely on the initiative of the defendants, that space became the exclusive property of “Strabla”, then access by the appellants to the system to modify the account by changing the email address, to prevent it being used by “Strabla”, must be considered to have been carried out for reasons, in essence, extraneous to those for which they were attributed powers to access and remain in the system; and whether, finally, the “Dropbox” space was shared between the defendants and “Strabla”, by virtue of which each of these could deem themselves the holder of one ius excludendi alios, a shared use which, however, can no longer be considered shared after termination of their employment relationship and creation of the new company by Bolsoni and Redolfi.”
“[I] Anyone who, having knowledge, by reason of his status or position, or his profession or trade, of a secret, who then reveals it without just cause, or uses it for his own or another person’s profit, shall be punished if the act can result in actual harm, with imprisonment for up to one year or a fine of€ 30 to€ 516 , [II] The penalty shall be increased if the crime is committed by directors, general managers, persons responsible for preparing a company’s financial statements, statutory auditors or liquidators, or if it is committed by the auditors of the company. [III] The crime shall be punishable upon legal action by the victim of the crime.” [III] The crime shall be punishable upon legal action by the victim of the crime.”
“In the United Kingdom, as well as in the Member States in situations involving the United Kingdom, the following acts or provisions shall apply as follows in respect of the recognition and enforcement of judgments, decisions, authentic instruments, court settlements and agreements: a) Regulation (EU) No 1215/2012 shall apply to the recognition and enforcement of judgments given in legal proceedings instituted before the end of the transition period, and to authentic instruments formally drawn up or registered and court settlements approved or concluded before the end of the transition period;” a) Regulation (EU) No 1215/2012 shall apply to the recognition and enforcement of judgments given in legal proceedings instituted before the end of the transition period, and to authentic instruments formally drawn up or registered and court settlements approved or concluded before the end of the transition period;”
“Whether there could be any effect on the above issues [principally, the legal issues concerning Articles 615-ter and 622] if there was an agreement between Mr Stevens and the 9 Companies of which Mr Stevens was director to only fictitiously terminate their relationship and allow those 9 Companies to take legal action in Italy for the sole purpose of allowing Mr Stevens to avoid compliance with the McCloud Order?”