What are the new Procurement Policy Notes (PPN)?

With the loss of face-to-face meetings in the current situation, video conferencing has taken centre stage. But how do you do that in a compliant way? Here are some of the main high-level data protection issues to consider when selecting and implementing a new third party provider’s video conferencing system.

1. Make sure you do your due diligence on the security measures offered by the provider. Clearly you can’t visit them, so look at the information offered publicly by the provider and read good quality, reliable, third party sources and ask the provider questions directly. Also ask any other organisations you know that use the provider. Document all this.
2. If personal information is being sent outside of the UK/European Economic Area, make sure that transfer complies with GDPR. If it’s a US provider, is it registered in the EU-US Privacy Shield list or does it offer a model clause contract (you’re likely to need the 2010 version)? Or is the service provided from a country whose data protection laws offer equivalent protection to those in Europe? Look at the support service as well as the hosting. Document this.
3. Make sure you put a compliant processor agreement in place. The provider should offer one as part of the contract terms. Check it meets GDPR requirements.
4. You’re likely to need to update your privacy notice, particularly if you’re going to record calls. Provide participants with a short message and link to the privacy notice in the meeting invite and on any registration page.
5. Create or update other GDPR-mandated documentation – for example, depending on your use, you may need a legitimate interests assessment and to update your record of processing.
6. Finally, configure and use the system in a secure and compliant way. Look at the settings/options carefully and think through the security and compliance implications of each. That could include deciding who in the meeting can share their screen; whether or not you use passwords for participants; whether or not to record, and if you’re going to record, where to store the recording. Document your decisions and the reasons for them.

The ICO has said it understands that resources, whether they are finances or people, might be diverted away from usual compliance work during the pandemic. However the last thing you need at the moment is to create a bigger problem than the one you are trying to solve. So do the best you can, ask for help from one of our specialists if you need it, and keep the whole thing under review.

On 16 April 2020, Ian Hulme, the ICO’s Director of Assurance, posted a blog for business owners, employers and managers about how to safely roll out the latest video conferencing technology.

On 21 April 2020, the NCSC published security guidance for organisations on choosing, configuring and deploying video conferencing services.

 Aside from the CBILS Scheme, the Government have, or are in the process of, implementing several different schemes to support businesses financially through the Covid-19 outbreak.

If you are eligible you will get a taxable grant of 80% of the average profits from the following tax years (where applicable):

2016-2017

2017-2018

2018-2019

HMRC will add the total profit in each of the three tax years (if applicable). This will then determine the monthly payment, subject to the cap of £2500.

Under CBILS, for the purposes of calculating the applicant’s annual turnover, approved lenders have been aggregating turnover across the whole of the private equity investor’s portfolio meaning they failed to qualify for the scheme as they were deemed to exceed the £45 million threshold.

For private equity-backed businesses, the removal of the upper limit on annual turnover criteria for CLBILS seemingly avoids the issue of turnover aggregation across investment portfolios seen with the CBILS, potentially enabling more private equity sponsor portfolio companies to be able to access the CLBILS funding.

During the Covid 19 crisis lawyers and the courts have had to adapt with hearings being heard remotely and with more electronic communication. It is clear that going forward, some of these changes will become more permanent.

The Lord Chancellor, Robert Buckland QC MP, has spoken last week regarding changes to the justice system following the COVID-19 pandemic and we know that there is a significant backlog of work that needs to be processed.

Firstly, 10 sites have been identified for ‘Nightingale courts’ which will allow for better social distancing. The authorities have suggested that it is a possibility that courts will need to stay open for a longer time or at weekends, to increase the number of cases that can be heard safely on any given day. This will enable more cases to be heard in a day and therefore a swifter outcome for your case. The standard of video technology will also continue to improve, with plans for new technology being rolled out across all courts form July onwards. The enhanced use of technology may result in matters being heard more efficiently, decreasing the time spent during each hearing.

HMCTS is working to expand access to audio and video technology to support more and new types of hearings. There has been an increase in the use of new and varying equipment over the lock-down period. With the appropriate systems in place, many more hearings could take place on platforms such as the Cloud Video Platform (CVP). Throughout July, the CVP will be more readily available to Country courts. There will be further hardware rolled out to improve the quality of video hearings, and there will be more efficient methods used to organise video lists.

The increased use and training of CVP means that witnesses and advocates may not need to attend court and could attend the hearing remotely. This will give you increased flexibility, enabling you to attend from your office or home. The CVP is efficient and simple to use, with no complex functions; making it user-friendly. This should make litigation more time and cost effective (albeit that there will be the cultural challenge of having less contact with your legal team or the court experience).