Blog archive

Mills & Reeve’s procurement portal has highlighted some points to note about the Government’s proposed approach to procurement in a “no deal” scenario.

Mills & Reeve's Life Science Law blog has been tracking Brexit developments relevant to the life sciences sector. The blog has analysis of the Government’s no deal Brexit guidance for life sciences businesses as well as on patents and “supplementary protection certificates”.

“Exit Day” is defined in the European Union (Withdrawal) Act not as a whole day, but as 11 pm on 29 March 2019.  The draft UK-EU Withdrawal Agreement envisages a transition or implementation period until 31 December 2020. 

The transition from school to university can be extremely rewarding, but it can also be a potentially challenging time for new students. 

A new Freedom of Information Code of Practice, published by the Cabinet office in July, provides new guidance to public authorities on the discharge of their functions and responsibilities under the Freedom of Information Act 2000 (the Act). 

The UK Government issued the first batch of its technical guidance notes on 23 August 2018 setting out the implications of the UK and the EU failing to reach agreement on the terms of the UK's withdrawal from the EU which will take place on 29 March 2019.

In the final blog of our series on data breach reporting, we look at when it is necessary to report a personal data breach to individuals whose data has been affected.

Data controllers are required to report personal data breaches to the ICO without undue delay and where feasible within 72 hours of becoming aware of them, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals. 

The ICO suggests that organisations should consider reporting breaches via telephone, particularly where the data controller needs to obtain advice from the ICO.  Issues can then be explored, and reassurance and advice dispensed, at the time of the call.

Currently, the ICO says it is experiencing significant over-reporting. The ICO has confirmed that, before reporting, data controllers must assess the likelihood and severity of any consequences of the breach.

This is the first in a series of blogs on aspects of personal data breach reporting under GDPR.  Last week the Information Commissioner’s Office (ICO) hosted a webinar on data breach reporting and confirmed that since GDPR was implemented, the number of breaches being reported monthly has more than quadrupled.

Targeting students with alcohol advertising can be risky;  there is a useful Advertising Standards' Authority (ASA)  adjudication in June 2018 on Diageo's Captain Morgan on marketing celebratory drinking.