What measures can be taken without notification to the European Commission?
There have always been ways for public bodies to assist without being required to notify these for approval. These continue to be available during the financial crisis, and are likely to be increasingly useful for measures which need to be introduced quickly. The measures include:
Those where it is possible to conclude that there is no effect on trade between Member States – for example, measures which are likely to have only a limited local effect. The European Commission has concluded, for example, that measures to assist locally-focused cultural activity can be assumed to have no effect on inter-State trade.
Those where it is possible to conclude that the State is acting in a way consistent with a commercial operator (the so-called Market Economy Operator Principle) – particular care will need to be taken in the context of current economic conditions to ensure that it can reasonably be asserted that a commercial operator would act in the same way as the public body.
Measures under the General Block Exemption Regulation – this legislation allows various types of aid, or aid schemes, to be employed.
Examples include aid for SMEs, aid for research and development, aid for local infrastructure and aid to ports and airports.
De Minimis Measures – Member States are permitted to grant small amounts of aid to undertakings over three fiscal years (the current year and the previous two years). This allows undertakings to receive up to €200,000 (or €500,000 where they are providing public services).
Related FAQs
Yes. For further guidance, please see our FAQs section on Furlough.
Follow up to date UK Government advice. This can be found at: https://www.gov.uk/government/publications/guidance-to-employers-and-businesses-about-covid-19/guidance-for-employers-and-businesses-on-coronavirus-covid-19
For best practice and more detailed information; consult the HSE’s website at https://www.hse.gov.uk/news/coronavirus.htm
Failing to follow the guidance is likely to be regarded as failing to take all reasonably practicable steps.
CBILS is made available through the British Business Bank’s 40+ accredited lenders and partners, which are listed on their website (https://www.british-business-bank.co.uk/ourpartners/coronavirus-business-interruption-loan-scheme-cbils/accredited-lenders/).
Businesses should initially approach their own lender and only consider other lenders if they are unable to access the finance they need. Note, not every accredited lender can provide every type of finance listed.
Some banks/lenders are not included in the list of accredited lenders which appears to mean that they cannot provide support through the Scheme. We understand from the British Business Bank that further lenders are applying to be accredited but that this may take a little time to process. If the provider of your senior debt is not on the accredited list you should consider approaching the bank which provides your day to day account banking services.
If you wish or need to access the Scheme via an alternative funder the process may take longer as usual on-boarding and KYC processes will need to be undertaken.
If changed circumstances mean that a business wants to exit from a contractual arrangement, then before trying to terminate it, a careful review should be carried out to see whether a right to terminate actually exists. For example:
- Not every contract for the sale of goods contains the right for the buyer to terminate in circumstances where the supplier hasn’t done anything wrong. If a business has entered into a contract on the supplier’s standard terms, it is unlikely to contain any such provision
- A contract for the provision of services is unlikely, if drafted by the customer, to contain a provision that allows the supplier to walk away from the arrangement at short notice, or perhaps at all
If a party tries to terminate a contract when it doesn’t have the right to do so, the other party will likely claim breach of contract and could sue for damages. In the case of a long term or high-value contract, this could amount to a very significant liability.
Even if the right to terminate the contract does exist, there might be particular rules about the following:
- How much notice has to be given
- How such notice has to be served (for example, it might have to be in writing to a particular address)
- When the notice can be served (perhaps on an anniversary of the start of the contract)
- How much a party has to pay if it cancels (for example, for raw materials, for work done to date, or even the whole contract price)
All of these factors must be taken into account, and any contractual processes for termination are followed.
With the loss of face-to-face meetings in the current situation, video conferencing has taken centre stage. But how do you do that in a compliant way? Here are some of the main high-level data protection issues to consider when selecting and implementing a new third party provider’s video conferencing system.
- Make sure you do your due diligence on the security measures offered by the provider. Clearly you can’t visit them, so look at the information offered publicly by the provider and read good quality, reliable, third party sources and ask the provider questions directly. Also ask any other organisations you know that use the provider. Document all this.
- If personal information is being sent outside of the UK/European Economic Area, make sure that transfer complies with GDPR. If it’s a US provider, is it registered in the EU-US Privacy Shield list or does it offer a model clause contract (you’re likely to need the 2010 version)? Or is the service provided from a country whose data protection laws offer equivalent protection to those in Europe? Look at the support service as well as the hosting. Document this.
- Make sure you put a compliant processor agreement in place. The provider should offer one as part of the contract terms. Check it meets GDPR requirements.
- You’re likely to need to update your privacy notice, particularly if you’re going to record calls. Provide participants with a short message and link to the privacy notice in the meeting invite and on any registration page.
- Create or update other GDPR-mandated documentation – for example, depending on your use, you may need a legitimate interests assessment and to update your record of processing.
- Finally, configure and use the system in a secure and compliant way. Look at the settings/options carefully and think through the security and compliance implications of each. That could include deciding who in the meeting can share their screen; whether or not you use passwords for participants; whether or not to record, and if you’re going to record, where to store the recording. Document your decisions and the reasons for them.
The ICO has said it understands that resources, whether they are finances or people, might be diverted away from usual compliance work during the pandemic. However the last thing you need at the moment is to create a bigger problem than the one you are trying to solve. So do the best you can, ask for help from one of our specialists if you need it, and keep the whole thing under review.
On 16 April 2020, Ian Hulme, the ICO’s Director of Assurance, posted a blog for business owners, employers and managers about how to safely roll out the latest video conferencing technology.
On 21 April 2020, the NCSC published security guidance for organisations on choosing, configuring and deploying video conferencing services.