What form does the relaxation take?
The European Commission has reintroduced its “comfort letter” system for cooperation in relation to shortage of supply. This allows cooperating businesses to check what the Commission’s view of their proposals are before implementing them.
In the UK context the SMA has introduced an exemption for suppliers of healthcare services to the NHS. This allows:
- Sharing information about capacity
- Coordination of staff deployment
- Joint purchasing of goods, services and facilities
- Sharing or lending of facilities
- Division of activities, including agreeing whether to expand or reduce the volume or type of services provided by suppliers
In relation to whether the CMA will investigate cooperation, it has indicated:
- The CMA will use its discretion as to the prioritisation of its enforcement action to permit some agreements/collaboration which would otherwise potentially give rise to enforcement action (including potentially attracting fines of up to 10% of group worldwide turnover)
- The CMA will use its existing power to exempt certain agreements under the Competition Act 1998 where these are in the public interest
Related FAQs
On 18 April 2020, it was announced that an exception to the current stay in possession proceedings and ban on all evictions has been made to allow possession orders to be made against trespassers.
This means land owners can take action to remove unauthorised persons occupying their land. Trespassers include: squatters; travellers; failed successors of secure tenancies; and licensees whose licences have been terminated.
Further, the automatic stay to possession proceedings currently imposed no longer applies to applications for interim possession orders meaning any persons found to be “squatting” on land without permission may again be subject to an order requiring them to leave your premises within 24 hours of service of that order.
Yes. The Government has confirmed that those on furlough will also be permitted to volunteer to help the NHS during the coronavirus outbreak without risking their pay.
It remains the case that anyone who has symptoms, however mild, or is in a household where someone has symptoms, should not leave their house to go to work. Those people should self-isolate, as should those in their households.
The Thriving at Work Report and the recent NICE Workplace Mental Health Guidelines provide a good baseline for what all organisations should be doing on workplace mental health – this includes some guidance on training. There does need to be a plan in place and we recommend taking a holistic view of the integration of mental health first aiders into a business – ie it should be one component in a strategy that also comprises training for line managers, awareness training and education for all staff, peer support, and a documented framework for support and signposting. It is also worth ensuring you have senior manager sponsorship, strong links with Occupational Health if available and also raising awareness via any works councils or employee forums helps ensure there is buy in at all levels.
With the loss of face-to-face meetings in the current situation, video conferencing has taken centre stage. But how do you do that in a compliant way? Here are some of the main high-level data protection issues to consider when selecting and implementing a new third party provider’s video conferencing system.
- Make sure you do your due diligence on the security measures offered by the provider. Clearly you can’t visit them, so look at the information offered publicly by the provider and read good quality, reliable, third party sources and ask the provider questions directly. Also ask any other organisations you know that use the provider. Document all this.
- If personal information is being sent outside of the UK/European Economic Area, make sure that transfer complies with GDPR. If it’s a US provider, is it registered in the EU-US Privacy Shield list or does it offer a model clause contract (you’re likely to need the 2010 version)? Or is the service provided from a country whose data protection laws offer equivalent protection to those in Europe? Look at the support service as well as the hosting. Document this.
- Make sure you put a compliant processor agreement in place. The provider should offer one as part of the contract terms. Check it meets GDPR requirements.
- You’re likely to need to update your privacy notice, particularly if you’re going to record calls. Provide participants with a short message and link to the privacy notice in the meeting invite and on any registration page.
- Create or update other GDPR-mandated documentation – for example, depending on your use, you may need a legitimate interests assessment and to update your record of processing.
- Finally, configure and use the system in a secure and compliant way. Look at the settings/options carefully and think through the security and compliance implications of each. That could include deciding who in the meeting can share their screen; whether or not you use passwords for participants; whether or not to record, and if you’re going to record, where to store the recording. Document your decisions and the reasons for them.
The ICO has said it understands that resources, whether they are finances or people, might be diverted away from usual compliance work during the pandemic. However the last thing you need at the moment is to create a bigger problem than the one you are trying to solve. So do the best you can, ask for help from one of our specialists if you need it, and keep the whole thing under review.
On 16 April 2020, Ian Hulme, the ICO’s Director of Assurance, posted a blog for business owners, employers and managers about how to safely roll out the latest video conferencing technology.
On 21 April 2020, the NCSC published security guidance for organisations on choosing, configuring and deploying video conferencing services.