TO REIMBURSE OR NOT TO REIMBURSE? A recent judgement on scientific evidence and appropriateness of care.

A judgment by the Italian Supreme Court published on April 10, 2015, determined that an alternative cure must be covered by the Italian National Health Service even in the absence of compelling scientific evidence as to its efficacy.

Health is protected by Italian law as a fundamental right of the individual, as well as a collective interest of the community, and dignity and freedom of the human being must always be respected. These general principles are enshrined in the Italian Constitution (section 32) and in section 1 of Legislative Decree no. 502/1992. Therefore, the right to health is framed as an absolute and fundamental right, a theoretical approach that – given the many restraints affecting patients’ access to care – may appear almost fictional.

Further, Italian legislation sets forth that the National Health Service must offer uniform essential levels of care and assistance, taking into account human dignity, equal access to care, quality and appropriateness of therapy, as well as economic factors. (These latter economic factors often appear most pressing, as patients affected by hepatitis C are currently learning!).

With regard to reimbursement, the Italian National Health Service must cover assistance services which show, for specific clinical or risk conditions, scientific evidence of a significant health benefit, from an individual and collective standpoint, compared to the resources employed. Such concept is often called “appropriateness” and is something with which doctors, hospitals, patients and authorities struggle daily. Nobody will deny that all the above mentioned factors are of primary importance, but balancing them can be difficult in practice.

The recent decision by the Italian Supreme Court (Corte di Cassazione, judgement no. 7279 of 2015) determined that a quadriplegic patient was entitled to free access to a non conventional therapy (so called “DIKUL” therapy), even in the absence of compelling scientific evidence as to its efficacy, when it was proven that the patient benefited from it through a sworn appraisal of a Court appointed expert. The Court pointed out that, while no compelling scientific evidence was offered, the efficacy of the therapy was in doubt, but not openly proven as not efficacious.

In its reasoning, the Court reiterated the higher hierarchy of the constitutional right to health over the discretional administrative decision of the hospital to administer a certain therapy. Further, the Court emphasized that the efficacy principle set forth in Italian law may be based on actual benefits to the patient brought by the DIKUL therapy: the mere absence of available scientific evidence in favor of the DIKUL therapy was not sufficient to deny its access to the patient. Only if there had been scientific evidence proving that the DIKUL therapy was inefficacious, then its reimbursement could have been denied.

We have already commented on the infamous Stamina case in this blog, a case where the well intentioned desire of Courts and Parliament to help otherwise helpless patients prompted the recourse to a therapy which completely lacked any scientific basis and breached many legal provisions actually aimed at protecting patients (e.g., GMP manufacturing requirements, informed consent of patients).

The recent Supreme Court decision confirms the sometimes difficult relationship between scientific evidence and access to a certain therapy, particularly in cases of patients affected by diseases for which there are limited therapy options.

New Environmental Crimes Introduced: Time to Update Your Corporate Compliance Program!

On May 19, 2015 the Italian Senate passed bill no. 1345-B, introducing new environmental crimes. The law will become effective the day after its publication on the Official Gazette, following promulgation by the President of the Republic. The law introduces the following environmental crimes in the form of delitti (i.e. the most serious form of crimes), punishable with imprisonment and fines. It is important to note that such crimes are included among the crimes that give rise to criminal corporate liability pursuant to Legislative Decree 231/2001 (“Decree”).  As a result, companies who have already set up an organizational and control model aimed at exempting it from criminal corporate liability must update it in order to take into account prevention of the newly introduced criminal conducts. The new crimes can be described as follows:

  • Polluting.    Anyone who unlawfully damages or jeopardizes in a significant and measurable way waters, air, the surface or the underground, as well as ecosystems, plants or animals, is punishable with imprisonment between 2 and 6 years plus a fine between Euro 10,000.00 and 100,000.00. Sanctions may be higher in case of pollution of protected areas (such as historical sites) or protected plants or animal species. Also, imprisonment can reach as far as 20 years in case of death or injury as a consequence of pollution. As far as companies are concerned, commission of such crime leads to the imposition of monetary sanction between 250 and 600 quotas as per the Decree. Blacklisting sanctions set forth in the Decree may also apply.
  • Environmental disaster. This crime punishes, alternatively, the irreversible alteration of an ecosystem’s equilibrium, the alteration of an ecosystem’s equilibrium the restoring of which is particularly burdensome or can be achieved only by extraordinary measures, or the offense to public safety in light of its effects or the number of people affected. The mentioned conducts are punishable with imprisonment between 5 and 15 years. Also in this case, if protected areas or species are damaged, imprisonment can be increased by one third. The commission of such crime by a company leads to the imposition of monetary sanctions between 400 and 800 quotas, as per the Decree. Also in this case, blacklisting sanctions may apply.
  • Trafficking and disposal of highly radioactive materials.                       Unlawful sale, purchase, receipt, transportation, importation, exportation, supply, detention, transfer and disposal of highly radioactive materials are punished with imprisonment between 2 and 6 years, plus a fine between Euro 10,000.00 and 50,000.00. Sanctions may be increased in case of danger of damage or deterioration of waters, air, the surface or the underground, as well as ecosystems, plants or animals. Also, if any of the conducts jeopardizes the life or safety of individuals, sanctions may be increased by one half. Companies may be punished with monetary sanctions between 250 and 600 quotas in accordance with the Decree.
  • Hindered control. Hindrance of vigilance and control activities on environment, hygiene and safety on the workplace is punished with imprisonment between 6 months and 3 years.

If the above crimes are committed in the form of organized crime, sanctions already set forth against organized crime are increased by one third, and, if companies are involved, they may face sanctions between 300 and 1000 quotas as per the Decree. Sanctions are increased by one third to one half in case any public official or person in charge of a public service carrying out environmental-related offices partakes in the criminal organization. Not only the law provides for new crimes, but it also incentivizes remedial actions. Sanctions are in fact diminished by one half to two thirds in case remedial actions are taken to prevent occurrence of further consequences or to restore the status quo ante. Also, whistle-blowing is incentivized by reducing sanctions by one third to one half. Quite interestingly, the law prevents the statute of limitations from running in case of stay of proceedings ordered to allow remedial actions to be taken. Lastly, failure to take remedial actions, if ordered by a judge or by the law, is punished with imprisonment between one and four years plus a fine between Euro 20,000.00 to 80,000.00.

Italian Corporate Criminal Liability 101: Basic Facts You Should Know

Are Companies Criminally Liable under Italian Law? Yes!

Legislative Decree no. 231/2001 (the “231 Decree”) has introduced in Italy the principle that companies are responsible for crimes committed by:

  • Individuals vested with powers of company’s representation, control, direction, or management;
  • Individuals subject to the authority or control by the above-mentioned individuals, including employees, consultants, non subordinate employees and whoever acts on behalf of the company.
  • As a result, a company may now be considered liable for crimes committed by individuals in the interest or to the benefit of the company (while crimes committed by individuals in their exclusive interest or in the exclusive interest of third parties do not trigger company’s liability). The company’s liability is separate and distinct from the liability of the individual who committed the crime.

Which Crimes Trigger Liability? Several (not just corruption!).

The 231 Decree lists a number of crimes for which companies may be liable, which include:

  • Corporate crimes;
  • Crimes against public administrations;
  • Crimes against the dignity of individuals;
  • Conspiracies and terrorism;
  • Crimes arising out of breach of laws protecting the environment and health and safety at work;
  • Crimes related to criminal associations;
  • Money laundering.

Which Sanctions Apply? Monetary and blacklisting sanctions.

If a company is found liable, the following sanctions may apply:

  • monetary sanctions up to a maximum amount of Euro 1,549,370.69 (and precautionary seizure of the price or profit arising from the crime),
  • blacklisting sanctions (applicable also as a precautionary measure), with duration between 3 to 24 months, which can consist of, inter alia, the prohibition to conduct the Business’ commercial activity, the prohibition to contract with the public administration, the prohibition to advertise goods or services, seizure, or the publication of the court’s decision (if a blacklisting sanction is applied).

Are There any Grounds of Exemption from Criminal Corporate Liability?  Yes!

A company is not liable pursuant to the 231 Decree if it proves that:

  1. The management has adopted and effectively implemented a so-called ‘Organizational Model’ in order to prevent the commission of the criminal offences listed in the 231 Decree by subjects acting on behalf of the company;
  2. The company has established an internal body (‘Compliance Committee’) entrusted with the task of supervising the proper functioning and update of the Organizational Model, as well as the actual compliance by all those who must abide by it;
  3. Crimes were committed by individuals vested with management powers who have fraudulently avoided compliance with the Organizational Model;
  4. The Compliance Committee has not omitted to perform, or negligently performed its supervision duties.
  5. This explains why companies operating in Italy typically devote substantial resources in the setting up of an Organizational Model.

How to Set up an Organizational Model?  Risk assessment, gap analysis, preventive measures.

In order to prepare an Organizational Model the following process is usually followed:

  1. Examination of areas of risk: on the basis of the company’s Organizational Model and relevant job descriptions, the risk of commission of each crime set forth in the 231 Decree is assessed.
  2. Analysis of existing procedures: all existing procedures and ethical principles are reviewed in order to identify procedures that may reduce the risk of commission of the crimes.
  3. Possible implementation of new measures: should the analysis of existing procedures lead to conclude that some of the risks are not properly reduced, new procedures should be implemented.

The Organizational Model must be Effective.  A compliance program on paper will not help!

Once a company has adopted an Organizational Model by means of a resolution of the Board of Directors, the company must ensure that it is effectively implemented, that employees and other individuals acting on behalf of the company are duly trained on the model and that any breach of the Model is sanctioned.

In particular, the appointed Compliance Committee must actively supervise the effective functioning and adequacy of the Model on an ongoing basis and in independent fashion. The Compliance Committee is generally in charge of:

  • Monitoring the activity carried out within the company and the areas considered at risk;
  • Assessment of the actual implementation of, and compliance with the Organizational Model;
  • Cooperation and consultation with the management as regards the application of disciplinary sanctions to employees in the event of breach of the internal procedures provided by the Organizational Model.

Legality Rating by the Italian Antitrust Authority: Is It Useful?

“Not only must we punish corrupt companies but also encourage healthy businesses“. The statement released by Mr. Raffaele Cantone, Chairman of the Italian Anti Corruption Authority, summarizes the rationale underpinning the so called “legality rating”, i.e. a score that the Italian Antitrust Authority assigns to companies who apply for it. In fact, Law no. 62/2012, converting Law Decree no. 29/2012, requires the Italian Antitrust Authority to assign a score ranging from one to three “stars”, to any applying company who complies with a series of legal requirements (inter alia, the absence of criminal sanctions or preventive/precautionary measures against key personnel of the company, no judgments pursuant to Legislative Decree No. 231/2001, no breaches in the field of health and safety at work, and no definitive tax assessments against the company).

The instrument, available to entities generating a turnover in excess of Euro two million per year, is completely optional, but continues to be widely utilized. A statement of the Antitrust Authority shows in fact that, in January 2015, the Authority  received respectively 14% more applications than in the previous month and the trend seems to continue.

So, companies line up as schoolboys in order to show that they are worth a certain number of “stars” in an effort to demonstrate the soundness of their compliance program: is it worth it? To respond, we have looked into the benefits of the legality rating to understand the actual relevance of a practice that is becoming widespread. Below is a summary of the alleged benefits.

  • A new Regulation, developed by the Italian Antitrust Authority in collaboration with the National Anti Corruption Authority, entered into force on November 14, 2012, sets forth that companies benefitting from a legality rating are enrolled in a register of virtuous firms. Such registration is supposed tofacilitate relations with banks or the granting of public funding as well as the possibility to participate in public tenders.
  • The first example of a public procurement process taking into account the legality rating refers to postal services. The procurement documentation (Decision of December 9, 2014, published in the Official Gazette no. 1 of the January 2, 2015) stated for the first time that “for the public procurement of large size, the contracting authorities can evaluate the opportunity to give an additional and proportionate score to companies that benefit from a legality rating issued by the Antitrust Authority pursuant to §. 5 ter of Law-Decree no. 1 of January 24, 2012, or that have equivalent certifications issued to foreign firms from other agencies or public authorities”. For the first time, legality rating actually mattered as it gave a chance to companies to score additional points in public tenders.Some have criticized the use of a legality rating in this context, given that section 83 of the Italian Public Procurement Code (Legislative Decree no. 163/2006) requires that contracting authorities assess bidding companies on the basis of objective requirements only. It has been in fact argued that making reference to a legality rating is too discretionary. However, the Antitrust Authority, in opinion no. 163/2013, seemingly admits the possibility of using discretionary requirements, such as “the curriculum of the company, possession of licenses or quality certifications, availability of business assets, the providing of services or similar work, and in general, skills and references” as “factors that can be weighedas criteria for admission to tenders”.

In conclusion, if public procurement tenders give some weight to the legality rating, then obtaining it may actually be a good idea.

The risk is, as with any type of certification, that it will become a merely formal requirement, which does not attest the actual compliance efforts or a corporation’s culture.

The last event of our HEALTH INNOVATION ACADEMY is coming up!

On May 21, 2015 our HEALTH INNOVATION ACADEMY series will hold its last event. Join us to hear speakers on the topic of networks for innovation at Via Francesco Sforza 28, Milano (Aula Milani) followed by drinks.

As always, the event is organized in cooperation with the hospital IRCSS Cà Granda – Ospedale Maggiore Policlinico di Milano and with Politecnico di Milano – e-Health LAB – Informatica BioMedica e Sanità Digitale

To find out more about the May 21 program or about HEALTH INNOVATION ACADEMY’s past events, click here: http://healthinnovationacademy.weebly.com/reti-dellinnovazione.html

EMA Issues New Guidelines to Prevent Medication Errors

On April 14, 2015 the European Medicines Agency (“EMA”) released two drafts of good practice guides aimed at improving the reporting, evaluation and prevention of medication errors. The new guides are addressed to regulatory authorities, as well as the pharmaceutical industry.

Medication errors generally refer to unintended mistakes in the processes of prescribing, dispensing or administering of medicinal products in clinical practice and according to EMA they account for an estimated 18.7 – 56% of all adverse drug events among hospitalized patients.

The first guide released by EMA provides an overview of the main sources and types of medication errors, as well as measures to minimize the risks that such errors are made. The second guide, on the other hand, focuses on suspected adverse reactions caused by medication errors, providing guidance and recommendations on how to record, code, report and assess such errors.

The guidelines from EMA recommend a number of actions to marketing authorization holders, including the periodical reporting of information concerning medication errors. Recommendations to the industry include periodical safety update reports and risk management plans to be adopted for each marketed pharmaceutical product. The overall scope of these reporting obligations is to implement a real-life continuous evaluation of the risks and benefits of all medicines placed on the European market.

The two draft guidelines are now open to comments from all relevant stakeholders: the public consultation procedure will expire on June 14, 2015. The final version of the guidelines is expected to be finally adopted later in 2015.

More information and the new draft guides can be found here: http://www.ema.europa.eu/ema/index.jsp?curl=pages/news_and_events/news/2015/04/news_detail_002307.jsp&mid=WC0b01ac058004d5c1.

Medical Malpractice: Contractual or Tortious Nature?

The Rise of Medical Malpractice Cases and of Defensive Medicine.  Over the last two decades, medical malpractice has become a prominent issue in the Italian healthcare debate. Medical malpractice litigation has dramatically increased, with dire reflections on prices and availability of professional liability insurance. Insurance premiums have rapidly risen and insurers have often been unable to provide insurance coverage to physicians. As a consequence, physicians have been adopting changes to their practices, by taking allegedly unnecessary precautions or by refusing treatments that may be in the patients’ best interests but may also give rise to their  complaints (the so-called phenomenon of “defensive medicine”).   Different Interpretations of Malpractice by Courts.  Such phenomenon has been exacerbated by the fluctuating approach taken by civil courts in dealing with medical malpractice cases. In fact, Italian Courts have been advancing different interpretations on the nature of the relationship between a physician and a patient.

  1. Medical Malpractice as a Tort. Until 1999, liability arising from medical malpractice was deemed to be a tort. Interpreters believed that the absence of a formal agreement between the parties would trigger tort liability. As no contractual relationship was established between  physicians and patients, the latters, as injured parties, could rely  exclusively on proceedings based on section 2043 of the Italian Civil Code[1]. In light of this interpretation, medical negligence was considered to be a violation of a general duty of care, while patients bore the burden of proving damages suffered, a medical act negligent and a causation link between the two.
  1. Medical Malpractice as Contractual Liability. The above view has been gradually replaced by several opposing theories, which lean towards a contractual interpretation of the relationship between physicians and patients. Accordingly, medical negligence is currently held to be the failure to fulfil a specific obligation, and liability arising from such failure has been considered as contractual liability.

The more convincing approach to define the nature of physician’s liability was introduced by the Italian Supreme Court (Corte di Cassazione) with judgment no. 589/1999. According to such judgment, physicians can be held contractually liable under the theory of  “social contact” (contatto sociale). Such theory is based on the contractual liability of physicians for breaching the duty to protect patients’ health. Given the contractual nature of medical responsibility, damages can be awarded to patients if they produce evidence of the breach of contract committed by physicians, unless  physicians are able to prove that such breach is a result of conditions not attributable to them. In other words, physicians bear the burden to prove the exact fulfilment of the contractual obligation.   A New Statutory Provision on the Role of Guidelines in Medical Practice.  By enacting Law no. 189/2012, the Italian legislator has tried to counter the spread of defensive medicine. Section 3 of the aforementioned Law states that: “The health professional who, in her medical practice, adheres to guidelines and best practices accredited by the scientific community cannot be held criminally liable for ordinary negligence. In such cases however she remains subject to the obligation set out by section 2043 of the Civil Code. The judge, even when determining damages, shall take due account of the conduct referred to above”.   Renewed Controversy on the Nature of Medical Malpractice.  Reference to section 2043 of the Italian Civil Code in Law no. 189/2012 has sparked a new debate among scholars and in courts, some of which maintained that the legislator clearly meant to endorse the tort liability theory. For example, the Court of Milan[2] has recently stated that the theory of “social contact” has been repealed by the 2012 statutory provision and that, absent a specific contractual relationship established between patients and physicians, malpractice must be deemed a tort liability.   Others[3] have pointed out that the provision of Law no. 189/2012 merely states that, in the event of ordinary negligence, the obligation to compensate damages remains, without referring to the nature of medical liability, and that nothing in the statutory provision appears to be in conflict with previous case law on the contractual nature of medical liability.   The “social contact” theory therefore still stands, but the phenomenon of “defensive medicine” has yet to find a solution. [1] Section 2043 of the Italian Civil Code translates as follows: “Any willful or negligent fact causing to a third party an unfair damage triggers the obligation to reimburse such damage”. [2] Decisions no. 9693 of July 23, 2014 and no. 1430 of December 2, 2014. [3] For example, the Italian Supreme Court states this view in its decisions no. 8940 of April 17, 2014.

Defective Medical Devices: an Interesting Decision by the ECJ

On March 5, 2015 the European Court of Justice (“ECJ”) delivered a ruling on product liability that could have consequences for manufacturers of medical devices.

FACTS OF THE CASE. The quality control system of a company selling pacemakers and implantable defibrillators in Germany found that a component utilized to hermetically seal pacemakers may experience a gradual degradation. That defect could lead to premature battery depletion, resulting in loss of telemetry and/or loss of pacing output without warning. In light of such circumstances, the manufacturer issued a warning recommending physicians to replace the implanted pacemakers with others provided free of charge. At the same time, the manufacturer also recommended physicians to turn off a switch in the defibrillators.

PROCEEDINGS. The insurance companies, covering patients whose pacemakers or defibrillators had been replaced, instituted legal proceedings to obtain reimbursement of costs relating to such replacements. The German High Court raised a preliminary question before the ECJ asking whether the devices that had been replaced may be classified as defective, despite lack of evidence that the actual product implanted was defective, on the basis of the corrective measures recommended by the manufacturer. Moreover, the German Court asked whether costs of replacing those pacemakers and defibrillators could be classified as damages, for which the manufacturer may be liable pursuant to the Product Liability Directive[1].

ECJ RULING. In its ruling, the ECJ stated that, in order to determine whether or not the manufacturer was liable, (i) the function of such products, (ii) the vulnerability of patients utilizing them, (iii) the costs borne to replace them, and (iv) the costs relating to turning off the switch of defibrillators had to be taken into account and balanced. In this respect, the ECJ observed that even the potential lack of safety of those products gave rise to the manufacturer’s liability, in light of safety standards that patients could expect from that kind of products and the abnormal possibility of damages to patients, who would be at risk of death. In addition, and in more general terms, the ECJ affirmed that costs borne to replace potential defective devices may constitute damages inasmuch as the expenses incurred are necessary to remedy the defect. However, such a judgment, as pointed out by the ECJ, pertained to the merits of the claim, and must therefore be ascertained by a national Court.

CONSEQUENCES OF THE RULING. Under the Product Liability Directive claimants must produce evidence of the defect, damages arising therefrom and a causation link between the two. By contrast, the ECJ’s decision establishes that even potential defects may be considered as defects. As a consequence, consumers appear to be relieved from the burden of proof that products are actually defective. By the same token, manufacturers’ right of defense seems to be compressed, as – when there are corrective measures recommended by them – the ruling does not leave any room for proof of lack of liability.

WHAT WILL BE THE IMPACT OF THE RULING.  The ECJ’s approach to product liability adopted in the ruling at hand appears to be skewed towards consumers’ protection. A cynical reading of the ECJ’s judgment may even prompt manufacturers to be reluctant to “admit their own mistakes” and issue safety warnings regarding their products! As often happens with legal issues affecting innovation and health policies, balancing of interests is key.

[1] Council Directive 85/374/EEC of July 1985 on the approximation of the laws, regulations and administrative provisions of the Member States concerning liability for defective products. According to the Directive, the producer is liable for damages caused by a defect in his product.

Medical Apps and the Law, Part II – Medical Apps: Helpful or Harmful?

A BOOMING MARKET. The idea of running software on a mobile device with healthcare uses has been discussed as early as 1996[1]. However, the issue has assumed explosive proportions in recent years, thanks to the spreading of an “app mentality” among health care professionals and consumers, and its potential, given cloud computing, social networks and big data analytics, could be yet to be realized. According to a March 2014 BCC report, this growing trend will be continuing in the next years[2]. App stores offering thousands of medical app also confirm the trend, as about 97,000 mobile health apps in 62 app stores according to a Research2Guidance market report of last year. Hardware manufacturers are certainly not immune to the medical app fervor, and – for example – the new smartphone Gear 2 Neo by Samsung, launched on April 11, 2014 by Samsung in 125 countries, incorporates a heart rate sensor.

 

ACCORDING TO THE EU COMMISSION, MEDICAL APPS AND E-HEALTH HAVE GREAT POTENTIAL.  What is the view of the authorities on this phenomenon? The potential of apps makes them app enthusiasts, the reality of apps worries them. The European Commission believes in medical apps, which can be leveraged in order to eliminate barriers to “smarter, safer, patient-centred health services”. Further, digital health could also be a promising factor to cut Member States’ budget[3] while – in the words of the Commission – “putting patients in the driving seat”[4]. The reality of the app market, however, does not necessarily boost patient empowerment. In fact, the Commission noted that there are substantial risks connected with the way apps are currently marketed: information to consumers is not clear, the trader’s contact details are not easy to find, the use of the term “free” is often misleading[5].

 

ENFORCEMENT ACTION BY THE ITALIAN DATA PROTECTION AUTHORITY. On September 10, 2014 the Italian Data Protection Authority has issued a warning regarding data protection risks inherent to medical apps (“Medical Apps: More Transparency Is Needed On Data Use”) promising future sanctions. The Authority found that insufficient information to users prior to installation, as well as the processing of excessive data. The survey conducted by the Italian Data Protection Authority involved a total of 1,200 apps and the findings thus obtained were striking: (i) barely 15% of them provided meaningful privacy notices; and (ii) in 59% of the apps reviewed the Authority found it hard to locate pre-installation privacy notices. The stance taken by the Italian Data Protection Authority echoes the Opinion 02/2013 by The “Article 29 Data Protection Working Party”, which had identified lack of transparency, lack of free informed consent; poor security measures; disregard for the principle of purpose limitation requiring processing of personal data only for specific and legitimate purposes.

 

CONSENT IN WRITTEN FORM: A REQUIREMENT PECULIAR TO ITALIAN LAW.  Italian legislation includes a couple of additional requirements, which could kill the medical app market. We note, however, that they have not been mentioned by the Italian Data Protection Authority in their September 10, 2014 warning so it is unclear whether there is any appetite for enforcing them. In addition to a specific authorization by the Data Protection Authority, typically substituted by a general authorization such as this, Section 23 of the Data Protection Code requires that consent to process sensitive data, such as health data, must be given in written form, a requirement which is not satisfied by a mere “click” on the smartphone, but would only be satisfied by the digital or qualified electronic signature in accordance with Italian legislation. This obstacle could be solved only when (and if) the proposed EU Data Protection Regulation enters into force and repeals the existing Italian Data Protection Code, as consent to process sensitive data shall have to be “freely given, specific, informed and explicit” and the controller shall bear the burden of proof of such consent, but consent in written form would no longer be required.

[1] “Regulation of health apps: a practical guide”, d4Research, January 2012, citing material from the Conference of the American Medical Informatics Association Fall Symposium of 1996.

[2] “This market is expected to grow to $2.4 billion in 2013 and $21.5 billion in 2018 with a compound annual growth rate (CAGR) of 54.9% over the five-year period from 2013 to 2018”.

[3] “In Italy, overall savings from the introduction of ICTs in the Health Sector are estimated to be around 11.7% of National health expenditure (i.e., €12.4 billion). Savings from digital prescriptions alone are estimated to be around €2 billion”. European Commission Memo of December 7, 2012 “eHealth Action Plan 2012-2020: Frequently Asked Questions”.

[4] It should be noted that, while the Commission is a fervent proponent of eHealth (see also the recent Green Paper on mHealth), there are strong limitations to its actions given its lack of competence in healthcare delivery and financing, which is entirely up to Member States. The effectiveness of eHealth solutions in Europe require the commitment of Member States to implement organizational changes which make patient-centric eHealth solutions an integral part of their healthcare systems, a task that each Member State is pursuing with various degrees. A March 24, 2014 press release by the European Commission commenting on two European surveys on the use of eHealth (including Electronic Health Records, Health Information Exchange, Tele-health and Personal Health Records) showed that many critical issues still exist: lack of penetration, lack of interoperability, and lack of regulatory certainty, to name a few.

[5] Focus of the Italian Antitrust Authority has so far been on game apps, rather than medical apps: it, too, found that apps were misleadingly presented to users as free, while they were not.