Blog archive

Cyber criminals based in Russia, China and other competing economies are using common techniques to access protected systems and steal proprietary information.

HEFCE-funded Universities are required to submit their second annual statement in relation to Prevent compliance to HEFCE on 1st December 2017, with Alternative Providers due to submit on 1 March 2018. 

The Bribery Act 2010 was introduced some time ago now, so Universities would be well-advised to review their anti-bribery policies, and consider whether their adequate procedures are still fit for purpose and are actually being followed. 

The new students are safely enrolled, the numbers are in, and thoughts may have turned (amongst other things) to making changes to current and future academic provision.

Universities with an annual turnover of £36 million or more should have already published their first Modern Slavery Act Statement. 

The Race Disparity Audit data published this week by the Government collates pre-existing data for various public services, analysed by ethnicity. 

Following our earlier blog, the Government published the Data Protection Bill last week and it will now be debated in Parliament over the coming months. 

Ransomware is malicious software that either encrypts, or enables a perpetrator to obtain and threaten to publish, the victim’s data.  Access to data, or non-publication, is then offered in exchange for a monetary ransom, to be paid within a specified time.

Password protection is one aspect of such measures – yet many employers have not kept up with best practice.  ICO guidance on this obligation under the current Data Protection Act requires that you...

A recent Court of Appeal decision (SAE Education Ltd v HMRC) significantly narrows the scope of VAT exemption for supplies made by “a college of” a university.

Culture cannot be imposed via edicts issued by remote or indifferent executives. Culture is a way of acting, based on the informed values and priorities of an organisation’s leadership, embedded within governance processes.

Whilst the EU General Data Protection Regulation (“GDPR”) will be directly enforceable in the UK by 25 May 2018, it also provides for limited aspects to be governed by member state law.