Information assets & management

View Risk & Compliance by content type:

Practice notes

Precedents

Q&As

Featured Risk & Compliance content

Money Laundering Regulations 2017—simplified due diligence

You may apply simplified customer due diligence (SDD) measures in relation to particular business relationships or transactions which you determine...

Facilitation payments under the Bribery Act 2010

Facilitating the performance of a duty by public officialsFacilitation payments, also known as facilitating or grease payments, are generally small...

What is a solicitor's undertaking?

An undertaking is a commitment by a solicitor to do something. It can be enforced against the solicitor by the courts. Failure to comply with an...

Dawn raid—who can raid my organisation and why?

The UK Government has legislated to permit a number of UK authorities to obtain search warrants to 'raid' a business premises. The potential for a...

Practice notes

Active bribery, passive bribery and bribing foreign public officials

The purpose of this Practice Note is to provide a general understanding of the offences under section 1, 2 and 6 of the Bribery Act 2010 (BA 2010). It...

Produced in partnership with Joanne Kane of Carmelite Chambers 9th Nov

Practice notes

High-risk third countries tracker

This Practice Note lists high-risk third countries identified by the Financial Action Task Force (FATF), HM Treasury and the European Commission as...

9th Nov

In-house

Practice notes

Getting the Deal Through: Merger Control 2021

Jurisdictions coveredThe following jurisdictions are covered in this report:Albania; Australia; Austria; Belgium; Bosnia and Herzegovina; Brazil;...

9th Nov

Precedents

Modern slavery: contract clauses

1DefinitionsModern Slavery Policy•means the Customer's anti-slavery and human trafficking policy as set out in Schedule [insert] as updated by the...

9th Nov

In-house

Practice notes

AML and counter-terrorist financing—source of funds

Source of funds and wealth was a key focus of the SRA’s Preventing Money Laundering and Financing of Terrorism thematic review, published in March...

9th Nov

In-house

Practice notes

Introduction to retained EU law

This Practice Note provides an introduction to retained EU law, which is an entirely new legal concept introduced to UK domestic law in preparation...

9th Nov

Brexit

Precedents

Standard contractual clauses—set II—controller to controller (Model Clauses)

DRAFTING FOR BREXIT: For the latest information on the impact of Brexit on the drafting, negotiation and enforceability of this Precedent, see...

9th Nov

Practice notes

Money Laundering Regulations 2017—nominated officer

This Practice Note sets out when organisations must appoint a nominated officer, the duties of the nominated officer and practical steps nominated...

9th Nov

In-house

Most recent Information assets & management content

Precedents

Data processing register

This Precedent Data processing register will enable you to keep a record of the personal data you process and how it is protected. It is designed to...

25th Nov

Precedents

Information management and security—annual review

1General informationDate of review[insert date of review]Person(s) conducting review[insert name or role, eg data protection officer]2Review and...

19th Nov

Precedents

Records retention schedule

IntroductionThis Record retention schedule accompanies and is incorporated into [insert organisation’s name]’s Record management policy. It sets out...

19th Nov

Practice notes

Mitigating information and data security risks

Brexit: As of exit day (31 January 2020), the UK is no longer an EU Member State, but it has entered an implementation period during which it...

19th Nov

Practice notes

Managing personal data breaches

Brexit: As of exit day (31 January 2020), the UK is no longer an EU Member State, but it has entered an implementation period during which it...

19th Nov

Practice notes

Websites—compliance requirements

This Practice Note provides guidance on the key legal and compliance requirements that a website operator should consider, including:•Brexit•The type...

18th Nov

Practice notes

Information security—passwords

Brexit: As of exit day (31 January 2020), the UK is no longer an EU Member State, but it has entered an implementation period during which it...

12th Nov

Precedents

Website terms and conditions of use

1About our terms1.1These terms and conditions of use (Terms) explain how you may use this website and any of its content (Site). These Terms apply...

Produced in partnership with Guy Wilmot of Russell-Cooke and Sapna Desai of Russell-Cooke 11th Nov

In-house

Precedents

Records management policy

1Introduction1.1Maintaining business records in a systematic and reliable manner is essential to comply with our legal and regulatory requirements, eg...

10th Nov

Precedents

Policy—bring your own device (BYOD)

1Introduction1.1The Company is committed to the highest standards of information security and treats confidentiality and data security extremely...

Produced in partnership with Bird & Bird LLP 16th Oct

COVID-19

Practice notes

Getting the Deal Through: Cybersecurity 2020

Jurisdictions coveredThe following jurisdictions are covered in this report:Australia; Austria; China; France; Germany; Hong Kong; India; Italy;...

16th Oct

Precedents

Policy—GDPR data protection

You must read this policy because it gives important information about:•the data protection principles with which the Company must comply;•what is...

15th Oct

In-house

Precedents

Information security review

1Policies and proceduresICO expectationAdditional guidanceAction points (if any)☐ You have a process to identify, assess and manage information...

13th Oct

Precedents

Cybercrime prevention strategy and incident management plan

1Introduction1.1This strategy and plan builds on and supplements our other data management and security policies and procedures, namely...

9th Oct

Precedents

Cybercrime risk assessment

1Introduction1.1We have performed an organisation-wide assessment of the risk of our systems and/or services falling victim to cybercrime.1.2The...

9th Oct

Precedents

Information and cybersecurity—supplier questionnaire

1Background informationName of[ prospective] supplier[To be completed by customer]Address[To be completed by customer]Brief description of services[...

9th Oct

Practice notes

Cyber attacks in the professional services sector

Professional services firms make attractive targets for cyber criminals and are experiencing an increase in cyber attacks. The professional services...

Produced in partnership with Lockton Companies insurance brokers 9th Oct

Practice notes

Solicitors' cyber insurance—a practical guide

Law firms make attractive targets for cyber criminals and are experiencing an increase in cyber attacks. Legal businesses hold sensitive, personal and...

Produced in partnership with Lockton Companies insurance brokers 9th Oct

Q&As

What cybercrime risks do I need to consider during a pandemic (eg coronavirus (COVID-19))?

This Q&A sets out cybercrime threats which are relevant to businesses particularly in a pandemic situation (eg coronavirus (COVID-19) and outlines how...

9th Oct

COVID-19

Practice notes

Pandemic management—information and cybersecurity—challenges and practical responses

Pandemics are exceptional events which present organisations with difficult business conditions, uncertainty and particularly challenging information...

9th Oct