Sign-in Help

Q&As

View Risk & Compliance by content type:

News
Practice notes
Precedents
Q&As

Latest Risk & Compliance News

Ringing the changes with the CPS’s Economic Crime Strategy 2025

Ringing the changes with the CPS’s Economic Crime Strategy 2025

The following Corporate Crime news provides comprehensive and up to date legal information on Ringing the changes with the CPS’s Economic Crime Strategy 2025

Risk & Compliance weekly highlights—8 April 2021

Risk & Compliance weekly highlights—8 April 2021

The following Risk & Compliance news provides comprehensive and up to date legal information on Risk & Compliance weekly highlights—8 April 2021

LexisPSL and MLex trial new interactive EU GDPR enforcement tracker

LexisPSL and MLex trial new interactive EU GDPR enforcement tracker

The following Commercial news provides comprehensive and up to date legal information on LexisPSL and MLex trial new interactive EU GDPR enforcement tracker

DPAs may not be receiving sufficient judicial scrutiny

DPAs may not be receiving sufficient judicial scrutiny

The following Corporate Crime news provides comprehensive and up to date legal information on DPAs may not be receiving sufficient judicial scrutiny

Featured Risk & Compliance content

Money Laundering Regulations 2017—simplified due diligence

Money Laundering Regulations 2017—simplified due diligence

You may apply simplified customer due diligence (SDD) measures in relation to particular business relationships or transactions which you determine...

Facilitation payments under the Bribery Act 2010

Facilitation payments under the Bribery Act 2010

Facilitating the performance of a duty by public officialsFacilitation payments, also known as facilitating or grease payments, are generally small...

What is a solicitor's undertaking?

What is a solicitor's undertaking?

An undertaking is a commitment by a solicitor to do something. It can be enforced against the solicitor by the courts. Failure to comply with an...

Dawn raid—who can raid my organisation and why?

Dawn raid—who can raid my organisation and why?

The UK Government has legislated to permit a number of UK authorities to obtain search warrants to 'raid' a business premises. The potential for a...

Practice notes

Active bribery, passive bribery and bribing foreign public officials

The purpose of this Practice Note is to provide a general understanding of the offences under section 1, 2 and 6 of the Bribery Act 2010 (BA 2010). It...
Read More >
Produced in partnership with Joanne Kane of Carmelite Chambers 12th Jan
Practice notes

High-risk third countries tracker

This Practice Note lists high-risk third countries identified by the Financial Action Task Force (FATF), HM Treasury and the European Commission as...
Read More >
9th Nov
tag iconIn-house
Practice notes

Getting the Deal Through: Merger Control 2021

Jurisdictions coveredThe following jurisdictions are covered in this report:Albania; Australia; Austria; Belgium; Bosnia and Herzegovina; Brazil;...
Read More >
9th Nov
Precedents

Modern slavery: contract clauses

1DefinitionsModern Slavery Policy•means the Customer's anti-slavery and human trafficking policy as set out in Schedule [insert] as updated by the...
Read More >
9th Nov
tag iconIn-house
Practice notes

AML and counter-terrorist financing—source of funds

Source of funds and wealth was a key focus of the SRA’s Preventing Money Laundering and Financing of Terrorism thematic review, published in March...
Read More >
9th Nov
tag iconIn-house
Practice notes

Introduction to retained EU law

This Practice Note provides an introduction to retained EU law, which is an entirely new legal concept introduced to UK domestic law in preparation...
Read More >
9th Nov
tag iconBrexit
Precedents

Standard contractual clauses—set II—controller to controller (Model Clauses)

DRAFTING FOR BREXIT: For the latest information on the impact of Brexit on the drafting, negotiation and enforceability of this Precedent, see...
Read More >
9th Nov
Practice notes

Money Laundering Regulations 2017—nominated officer

This Practice Note sets out when organisations must appoint a nominated officer, the duties of the nominated officer and practical steps nominated...
Read More >
9th Nov
tag iconIn-house

Most recent Q&As content

Q&As

Can I still practice EU law if the UK is no longer in the EU?

Only lawyers qualified in an EU Member State are able to practise EU law or argue before EU tribunals such as the Court of Justice of the European...
Read More >
8th Apr
tag iconBrexit
Q&As

Do I have to establish the source of funds for every transaction?

This Q&A reflects the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017), SI 2017/692,...
Read More >
6th Apr
Q&As

When barristers receive papers from instructing solicitors, are they obliged to serve a privacy notice on the lay client?

The Q&A: When a solicitor instructs counsel to appear at a hearing and advise generally in respect of a matter, should the barrister be considered a...
Read More >
29th Mar
Q&As

Do we have to provide a translation of our privacy notice for clients or customers whose first language is not English?

See Practice Note: Privacy notices—information requirements which sets out information requirements that are contained at various places in the...
Read More >
29th Mar
Q&As

Is a Housing Association required to have a Data Protection Officer or is it just recommended as good practice?

Article 37 of Retained Retained Regulation (EU) 2016/679, UK General Data Protection Regulation (UK GDPR) requires a data controller or processor to...
Read More >
29th Mar
Q&As

Is a DPIA required where I am under a legal obligation to process personal data?

Practice Note: Data protection impact assessments—DPIAs sets out when a DPIA is required.DPIA requiredA DPIA is compulsory in the case of:•a...
Read More >
29th Mar
Q&As

Does the GDPR apply to an online forum, if the members use nicknames or pseudonyms?

There are two issues to consider:•territorial scope•the definition of personal dataTerritorial scopeSee Practice Note: The General Data Protection...
Read More >
29th Mar
Q&As

Can we put privacy information on our website for people to find?

Practice Note: Privacy notices—information requirements sets out the information you have to provide to data subjects when you collect or receive...
Read More >
29th Mar
Q&As

If a multinational company with entities in a number of EU states has registered a data protection officer (DPO) with the Information Commissioner’s Office (ICO), does it need to register a DPO in the other EU states where it has entities or is registration in one country sufficient?

Under Article 37 of the General Data Protection Regulation, Regulation (EU) 2016/679 (the GDPR), companies have to appoint a data protection officer...
Read More >
Produced in partnership with Alex Dittel 29th Mar
Q&As

Do I need consent to process the personal data of existing and new clients—law firms?

Whether you need consent to process the personal data of existing and future clients depends what data you are processing, why and how.Processing...
Read More >
29th Mar
Q&As

Do I have to send my new or updated privacy policy to former clients?

If you hold personal data of former clients, then you will be processing it for the purposes of the General Data Protection Regulation, Regulation...
Read More >
29th Mar
Q&As

Do I have to send my new or updated privacy policy to existing customers?

The General Data Protection Regulation (GDPR) contains extensive information requirements. See Practice Note: Privacy notices—information requirements...
Read More >
29th Mar
Q&As

Is it necessary for law firms to have a website privacy policy and a separate privacy policy?

There is no specific requirement to have a general client-facing privacy policy and a separate website privacy policy. You should, however, satisfy...
Read More >
29th Mar
Q&As

When making a data subject access request to a law firm, is a client entitled to copies of the firm’s own internal communications relating to allegations of negligence by the client against the firm? Is the answer the same for a client complaint rather than an actual or potential claim?

Personal data that is subject to a duty of client confidentiality or contained within communications that are considered to be legally privileged may...
Read More >
Produced in partnership with Peter Steel of Augury Consulting Limited 24th Mar
Q&As

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal data must we provide?

This Q&A draws on the Information Commissioner’s Office’s (ICO’s) guidance on business-to-business marketing, which may or may not be relevant...
Read More >
Produced in partnership with Peter Steel of Bevan Brittan 24th Mar
Q&As

When complying with a data subject erasure request, do we have to delete information in our backups?

Article 17 of Retained Retained Regulation (EU) 2016/679, UK General Data Protection Regulation (UK GDPR) grants data subjects the right to have their...
Read More >
24th Mar
Q&As

How do I calculate the time limit for responding to a data subject request?

The General Data Protection Regulation, Regulation (EU) 2016/679 (GDPR) provides for enhanced rights for data subjects, including providing rights of...
Read More >
24th Mar
Q&As

Refusing a data subject request—what is ‘manifestly unfounded or excessive’?

The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects, including providing rights of access, rectification,...
Read More >
24th Mar
Q&As

When receiving a subject access request in relation to CCTV images, how do I deal with images of individuals other than the person to whom the request relates? What if the data subject to whom the request relates is a child?

Practice Note: Handling data subject requests explains that you do not have to comply with a data subject access request if doing so means disclosing...
Read More >
24th Mar
Q&As

What data/information can a data subject request from me under the right of access?

The General Data Protection Regulation provides for enhanced rights for data subjects including providing rights of rectification, erasure and...
Read More >
24th Mar

Popular documents

LEXISNEXIS

Contract interpretation—express terms in contracts

Express and implied contractual terms distinguishedContractual terms may be either express or implied:•express terms—are terms which are actually recorded in a written contract or openly expressed in an oral contract at the time the contract is made (or there may be a combination of written and oral

LEXISNEXIS

Issue estoppel

Issue estoppel is a sub-species of the res judicata doctrine (see Practice Note: The doctrine of res judicata). In addition to the general key requirements for establishing a res judicata (see Practice Note: Key requirements to establish a res judicata), this Practice Note considers the specific

LEXISNEXIS

What is a certificate of title?

A certificate of title (also known as a certificate on title) is a particular species of report on title.When solicitors are instructed to investigate title to land (for instance, when land is being acquired or offered up as security), they will write a report on title for their client, which sets

LEXISNEXIS

Tomlin orders

Brexit: The UK's departure from the EU on exit day ie Friday 31 January 2020 has implications for practitioners dealing with provisions in the CPR relevant to cross border matters, including CPR 5.4C (discussed below). For guidance on the impact of Brexit on the CPR, see Cross border