IT systems and services

This subtopic includes guidance and precedent documents relating to the procurement and use of IT systems and the provision of IT services. IT systems can include software, hardware or both, as well as associated communications networks. This subtopic supplements other topics and subtopics dealing specifically with IT outsourcing, cloud computing, software and telecommunications.

Systems development and integration

System development agreements govern a wide range of projects from the straightforward to the large, complex and costly. The objective is usually simple: to create an IT system meeting the customer’s needs in a trouble-free way, by an agreed time and for an agreed price. However, this simple ambition often masks a mass of complexity reflecting the underlying complexity of IT systems themselves.

Practical matters, including the methodology for the project, the components of the system and how the system should work in real-life conditions, each fundamentally affect the issues that a development agreement must address. Without a clear working knowledge of the commercial and technical issues, there is a good chance that lawyers will produce contracts which are divorced from reality and inadequately address the risks.

In addition,

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest TMT News

Commission launches consultation on repeal of RED cybersecurity Delegated Regulation

The European Commission has launched a public consultation on its proposal to repeal Delegated Regulation (EU) 2022/30 (RED Delegated Regulation on cybersecurity). The repeal is scheduled to take effect on 11 December 2027, coinciding with the full application of the Cyber Resilience Act (CRA). This is intended to avoid any overlap between the cybersecurity requirements of the Radio Equipment Directive (RED) and those of the CRA, and to provide legal certainty. The consultation closes on 7 January 2026.

Ofcom consults on draft guidance for deceased child user duties under Online Safety Act

Ofcom has published draft guidance for consultation on how online service providers should comply with deceased child user duties under section 75 of the Online Safety Act 2023. The consultation aims to help providers understand their obligations when bereaved parents request information about their deceased child's use of online services. The guidance proposes requirements for clear disclosure policies, timely responses and sensitive treatment of bereaved parents. Ofcom has also updated its Online Safety Information Powers Guidance to include Data Preservation Notices and Coroner Information Notices provisions. The consultation ends on 23 March 2026.

Ofcom publishes updated guidance on Online Safety Act information powers

Ofcom has published updated guidance on its information gathering powers under the Online Safety Act 2023, effective 15 December 2025. The guidance covers Ofcom's statutory powers to issue information notices, require skilled person reports, conduct interviews, and exercise audit, entry and inspection powers in relation to regulated online services. Key provisions include Remote Viewing Information Notices enabling real-time viewing of algorithmic operations, Data Preservation Notices requiring retention of information relating to deceased children's service use, and Coroner Information Notices for responding to coroner requests during child death investigations. The guidance sets out typical processes for each power, including draft notice procedures, service requirements, and compliance obligations. Non-compliance may result in enforcement action including financial penalties up to 10% of qualifying worldwide revenue or £18m, whichever is greater, and criminal liability for individuals and entities. The December 2025 update reflects recent amendments to the Online Safety Act 2023 regarding Data Preservation Notices. While non-binding, the guidance indicates Ofcom's general approach to exercising these powers proportionately and explains consequences for regulated services, ancillary service providers, and other stakeholders subject to these information gathering requirements.

DSIT, IPO and DCMS report on progress towards statutory copyright and AI assessments required by the DUAA 2025

The Department for Science, Innovation and Technology (DSIT), the Intellectual Property Office (IPO) and the Department for Culture, Media and Sport (DCMS) have published a progress report under section 137 of the Data (Use and Access) Act 2025 (DUAA 2025), which outlines the government’s current work on copyright and artificial intelligence (AI), and sets out the steps being taken to prepare both the economic impact assessment required by section 135 and the report on the use of copyright works in AI development required by section 136. The report confirms that both documents must be laid before Parliament by 18 March 2026.