How do I ensure my use of video conferencing calls complies with GDPR?
With the loss of face-to-face meetings in the current situation, video conferencing has taken centre stage. But how do you do that in a compliant way? Here are some of the main high-level data protection issues to consider when selecting and implementing a new third party provider’s video conferencing system.
- Make sure you do your due diligence on the security measures offered by the provider. Clearly you can’t visit them, so look at the information offered publicly by the provider and read good quality, reliable, third party sources and ask the provider questions directly. Also ask any other organisations you know that use the provider. Document all this.
- If personal information is being sent outside of the UK/European Economic Area, make sure that transfer complies with GDPR. If it’s a US provider, is it registered in the EU-US Privacy Shield list or does it offer a model clause contract (you’re likely to need the 2010 version)? Or is the service provided from a country whose data protection laws offer equivalent protection to those in Europe? Look at the support service as well as the hosting. Document this.
- Make sure you put a compliant processor agreement in place. The provider should offer one as part of the contract terms. Check it meets GDPR requirements.
- You’re likely to need to update your privacy notice, particularly if you’re going to record calls. Provide participants with a short message and link to the privacy notice in the meeting invite and on any registration page.
- Create or update other GDPR-mandated documentation – for example, depending on your use, you may need a legitimate interests assessment and to update your record of processing.
- Finally, configure and use the system in a secure and compliant way. Look at the settings/options carefully and think through the security and compliance implications of each. That could include deciding who in the meeting can share their screen; whether or not you use passwords for participants; whether or not to record, and if you’re going to record, where to store the recording. Document your decisions and the reasons for them.
The ICO has said it understands that resources, whether they are finances or people, might be diverted away from usual compliance work during the pandemic. However the last thing you need at the moment is to create a bigger problem than the one you are trying to solve. So do the best you can, ask for help from one of our specialists if you need it, and keep the whole thing under review.
On 16 April 2020, Ian Hulme, the ICO’s Director of Assurance, posted a blog for business owners, employers and managers about how to safely roll out the latest video conferencing technology.
On 21 April 2020, the NCSC published security guidance for organisations on choosing, configuring and deploying video conferencing services.
Related FAQs
Although these measures fall short of the level of assurance given to employees both in terms of eligibility for an immediacy of access to payments, they are a vast improvement on the support for self-employed workers that has been put in place until now. Current support includes:
- Access to business interruption loans
- Self-assessment tax payments that were due in July 2020 have been deferred until January 2021
- VAT is deferred until the next quarter
- The introduction of Time to Pay arrangements under which deferrals for HMRC payments can be agreed
- The minimum income floor for universal credit has been suspended which will allow self-employed workers to access the equivalent of Statutory Sick Pay (SSP)
- Universal credit and tax credit payments to increase by £1000 per year
The Government published guidelines on 23 March 2020 concerning house sales.
Estate Agents have been required to close their offices and although staff are allowed to work from home they must not attend properties for any reason.
Therefore, if the property has not yet been put onto the market you will be unable to obtain a proper valuation at present. Also, restrictions on movement means that people must not view properties in person. Therefore you ought to delay marketing.
If you have found a buyer and the property is empty then the transaction can go ahead but you may experience delays in the transaction. For example, if your buyer needs a mortgage there will be a delay in getting a mortgage offer and even if it’s a cash purchase there are likely to be delays with Local Authority Searches.
You should discuss with your conveyancer whether to include special contract conditions. These could take into account what happens if the buyer or someone in the chain falls ill between exchange and completion and cannot move on the anticipated completion date.
If you have exchanged contracts the Government guidelines indicate that the sale of an empty property can go ahead to completion. However, if the contents of the property have not been removed you may have difficulty getting it cleared. Similarly, your buyer or someone else in the conveyancing chain may find that their removers are unable to move them. If this happens, you ought to discuss this with your conveyancer and your buyer as soon as possible to see if completion can be delayed to a later date.
You should speak to your advisors. We do not know presently how existing petitions will be dealt with by the Court. We do know that if any winding up order is made (based on a petition presented after 27 April), it could be found to be void and a creditor may face challenges. Even for petitions presented before 27th April, there is a risk that the Court will not be keen to make a winding up order so it is important that you look at the facts of your debt and weigh up all of the factors before deciding how to proceed.
During these unusual times, we are all having to adapt to what has become the ‘new normal’ and implement changes in how we carry out civil cases. If you are to give evidence in a remote hearing, whether this is by Microsoft Teams, Skype for Business or the Cloud Video Platform, we have pulled together a quick and useful guide below on what would be expected by the courts:
Before the hearing
- Make sure that you have access to the video-conferencing software that will be needed for the hearing. We will tell our clients and their witnesses in advance which platform will be used. The courts have increasingly been using Skype for Business to conduct the hearings (but you may find other platforms being used)
- Test that your camera and microphone are working and it is clear to see/hear you.
- Dress appropriately, as if it was an in-person hearing, and use the same formalities.
- Ensure that the background which is visible on your screen is appropriate and allows for your face to be clearly seen. A ‘blur background’ option may also be available on your settings which you may prefer.
- Make sure that your mobile phone is on silent and you are in a location where there will be no/minimal distractions. You should be on your own in a room when giving evidence, however, as we have all experienced with working from home, sometimes interruptions such as children appearing cannot be avoided.
- Join the call ahead of the allocated time, in order to allow for any small technical difficulties.
During the hearing
- Have a copy of the hearing bundle to hand, so that you can follow the proceedings (this may be in hard copy or soft copy). You are not allowed any other notes or papers, whether hard copy or electronic, in front of you when giving evidence.
- Unless addressing the Judge or you have been directly asked a question, keep your microphone muted.
- When giving evidence, you must make sure both your camera and your microphone are switched on.
- Remote hearings can be difficult and if you do not understand or you do not hear a question properly, then do ask for the question to be repeated/re-framed.
- You should not move away from the screen without permission from the Judge. The Judge will allow time for breaks.
- Address the judiciary and other advocates the same way as you would if you were in a physical courtroom.
- It is permitted to drink water throughout the hearing, but mugs of tea and/or coffee are probably best avoided. It is also not permitted to eat food during the hearing.
- Don’t panic if someone walks into the room or the dog starts barking because there is a knock at the door. Judges are only too aware about what might happen. Communication is key and if the interruption has interfered with your train of thought or the evidence you are giving then do say so.
- Be aware that all evidence is recorded and that a transcript of all evidence can be obtained at a later date.
To be eligible for CBILS, the British Business Bank has confirmed that businesses should be able to answer YES to the following points:
- Your application must be for business purposes
- You must be a UK-based SME with an annual turnover of up to £45m. This includes sole traders, freelances, body corporates, limited partnerships and limited liability partnerships. For sole traders to be eligible it is expected that sole traders will need to have a business account with its funders and not be operating via a personal account
- Your business must generate more than 50% of its turnover from trading activity
- Your CBILS-backed facility will be used to support primarily trading in the UK
- You wish to borrow up to a maximum of £5m.
Businesses meeting these criteria from all sectors can apply save for Banks, Building Societies, Insurers and Reinsurers (but not insurance brokers), the public sector including state-funded primary and secondary schools, employer, professional, religious or political membership organisation or trade unions which are not eligible.
Your borrowing proposals must be considered viable by the relevant lender under normal circumstances aside from the Covid-19 outbreak, and the lender believes the provision of finance will enable the business to trade out of any short-to-medium term difficulty. Lending decisions are delegated to the accredited lenders and lenders will need further information to confirm eligibility.
The eligibility criteria for CBILS does not require lenders to take into account other forms of Government support that SME’s may already be benefiting from, most notably business rate relief.
We understand that ownership structure is not taken into account when confirming eligibility and that businesses back by a PE funder or a subsidiary of an overseas entity can be eligible if it meets the other criteria.
An update on eligibility – 3 April 2020
Previously, for facilities above £250,000, the lender must establish a lack or absence of security prior to businesses using the Scheme. The requirement for insufficient collateral has been removed allowing those SMEs who are considered to have sufficient collateral to access the Scheme. We would expect that where security is available, a lender will seek to take security over the relevant assets.