Legal Precedents

1 Introduction This policy explains the typical duration we retain employment-related records and identifies the time at which such data is securely disposed of......

[ Insert name of organisation ] This notice outlines the personal data (information) we keep about you, how we obtain it, and the ways in which we use and may share it during your employment and once it has concluded. Data protection legislation requires us to give you this information. Please make sure you read this notice (sometimes called a ‘privacy notice’) and any similar notice we may issue from time to time whenever we collect or handle your personal data... Who collects the data [ Insert name of employer ] [ trading as [ insert trading name, if different ] ] (‘ Company’) is the ‘controller’ of personal data and collects and uses certain information about you. [ This information is also used by our affiliated entities and group companies, namely [ insert details or a link, or otherwise show where details of group...

This Agreement is entered into on [ date ] Parties [ insert name of Party A ] [ of OR a company incorporated in [ England and Wales ] under number [ insert registered number ], with its registered office at OR [ insert address ] ] ( Party A); and [ insert name of Party B ] [ of OR a company incorporated in [ England and Wales ] under number [ insert registered number ], with its registered office at OR [ insert address ] ] ( Party B), (each of Party A and Party B being a party and, together, Party A and Party B constitute the parties). Background Party A conducts the business of [ insert description of Party A’s business ]. Party B conducts the business of [ insert description of Party B’s business ]. Party A and Party B have agreed to [ insert...

This Agreement is made on [ date ]. Parties [ insert name of disclosing party ] [ of OR a company incorporated in [ England and Wales ] under number [ insert registered number ] whose registered office is at ] [ insert address ] (the Disclosing Party) [ insert name of receiving party ] [ of OR a company incorporated in [ England and Wales ] under number [ insert registered number ] whose registered office is at ] [ insert address ] (the Receiving Party) Together, the Disclosing Party and the Receiving Party are the parties, and each is a party. Background ( A) The parties have recognised a need to share the Shared Data for the Permitted Purpose. ( B) The parties have elected to put in place a framework for the [ systematic OR ad-hoc OR one-off ]...

1 DPO details Name of organisation [ Insert name of organisation ] Name of DPO [ Insert name ] Reports to [ Insert name and/or position ] Full time/part time [ Insert ] Details of any other roles held within the organisation [ Insert details of any other roles held ] Date appointed [ Insert date ] 2 Role summary To serve as the data protection officer ( DPO) for [ insert name of organisation ] under the UK General Data Protection Regulation ( UK GDPR) and to: 2.1 enable [ insert name of organisation ]’s compliance with the UK GDPR and other applicable data protection legislation by ensuring effective systems and controls are in place to enable [ insert name of organisation ], including its managers and employees, to comply with their legal obligations 2.2 act as intermediary between relevant stakeholders, including the Information Commissioner’s Office ( ICO), data subjects and...

This Precedent anticipates particular scenarios in which the parties prefer to place data processing terms in a dedicated Schedule rather than embedding them as clauses in the main text of the agreement, for instance because fully compliant wording can be lengthy. It derives from Precedent: Personal data processing clause—short-form—pro-controller. It also employs the additional defined expressions ‘ Agreement’, ‘ Business Day’, ‘ Customer’, ‘ Services’, ‘ Supplier’ and ‘ Supplier Personnel’, which are not unique to data processing, and it is assumed they are defined separately within the relevant agreement......

This Precedent has been prepared with scenarios in mind where the parties prefer to place data processing terms in a Schedule rather than as clauses in the agreement’s main body, for instance because compliant wording is lengthy. It draws on Precedent: Personal data processing clause—short-form—pro-processor. The Schedule also relies on additional defined expressions ‘ Agreement’, ‘ Business Day’, ‘ Charges’, ‘ Customer’, ‘ Services’, ‘ Supplier’ and ‘ Supplier Personnel’, which are not unique to data processing and are expected to be defined elsewhere in the relevant agreement......

This Agreement is dated [ insert date ]. Parties [ insert name ] [ of OR a company incorporated in [ England and Wales ] under number [ insert registered number ], with its registered office at ] [ insert address ] ( Assignor ); and [ insert name ] [ of OR a company incorporated in [ England and Wales ] under number [ insert registered number ], with its registered office at ] [ insert address ] ( Assignee ) ( Each of the Assignor and the Assignee is a party and, together, the Assignor and the Assignee are the parties.) Background The Assignor holds the copyright and database rights in the Database. The Assignee is [ insert description of the Assignee’s background/background to assignment or relevant transaction ]. The Assignor agrees to assign all such copyright and...

Claim Number: HQ [ insert number ] IN THE HIGH COURT OF JUSTICE KING’ S BENCH DIVISION ROYAL COURTS OF JUSTICE MEDIA AND COMMUNICATIONS LIST Parties: (1) [ Insert full name of first claimant ] (2) [ Insert full name of second claimant ] [ Claimant OR Claimants ] against [ Insert full name of defendant ] Defendant Particulars of Claim The [ Claimant OR Claimants ] At all material times, the [ First ] Claimant has held the role of [ role or nature of work of the First Claimant ]. [ In addition, the First Claimant serves as [ office or post ] of the Second Claimant [ if the second claimant is a corporation ] ]. [ The Second Claimant was formed on [ date ] and conducts business as [ set out the nature of the second claimant’s business or services ]. ] The...

The purpose of the claim form The claim form commences proceedings. It sets out the key information for the case, including the court reference to be used on all subsequent court documents, the identities of the parties, the relief sought, the particulars of claim (including any claim for interest), and the claimant’s contact details (typically the claimant’s solicitor). General guidance on the content of a claim form is available in the Practice Note: Claim form—the contents. This Precedent offers a template with suggested wording for use in a defamation claim. It is intended to assist with the particular issues to consider when completing a claim form for such proceedings. The claim form forms part of a suite of Precedents and should be read alongside: Particulars of claim (defamation) Defence (defamation) Reply (defamation) Final Order (defamation) In particular, it should be considered with the Precedent: Particulars of claim...

Claim No.: HQ [ insert claim number ] IN THE HIGH COURT OF JUSTICE KING’ S BENCH DIVISION ROYAL COURTS OF JUSTICE MEDIA AND COMMUNICATIONS LIST PARTIES: (1) [ Insert full name of claimant/first claimant ] (2) [ [ Insert full name of second claimant ] ] [ Claimant OR Claimants ] and [ Insert full name of defendant ] Defendant REPLY Save for the admissions contained within it and any averments expressly accepted below, the [ Claimant joins OR Claimants join ] issue with the Defendant upon his Defence. References to paragraphs are to the Defence. The [ Claimant denies OR Claimants deny ] that the words complained of, in the meanings alleged at paragraph 8.1 of the Defence, are true. Without limiting the breadth of that denial as regards the particulars of truth advanced in support of those imputations, the [ Claimant pleads OR Claimants plead ] as follows: ...

Claim No.: HQ [ insert claim number ] IN THE HIGH COURT OF JUSTICE KING' S BENCH DIVISION ROYAL COURTS OF JUSTICE MEDIA AND COMMUNICATIONS LIST Parties: (1) [ Insert full name of claimant/first claimant ] (2) [ [ Insert full name of second claimant ] ] [ Claimant OR Claimants ] and [ Insert full name of defendant ] Defendant DEFENCE The Defendant admits paragraph 1 of the Particulars of Claim. It is asserted that [ add facts and matters about the claimant(s) relevant to defence ] Paragraphs 2 and 3 are accepted. The Defendant accepts having published an article called '[ insert title of article or heading or description of publication ]' on [ insert date ] at [ insert URL of website in cases of publication online ], which contained the words complained of as identified at paragraph 7 of the...

Claim No.: HQ [ insert claim number ] IN THE HIGH COURT OF JUSTICEKING’ S BENCH DIVISIONROYAL COURTS OF JUSTICEMEDIA AND COMMUNICATIONS LIST THE HONOURABLE JUDGE [ insert name of judge ][ Insert date(s) of hearings ] Parties: (1) [ Insert full name of claimant/first claimant ] (2) [ [ Insert full name of second claimant ] ] [ Claimant OR Claimants ] and [ Insert full name of defendant ] Defendant ORDER UPON the trial of this Claim having taken place on [ dates ] AND UPON HEARING [ insert name ] of Counsel for the [ Claimant OR Claimants ], and [ insert name ] of Counsel for the Defendant(s), including at the hearing addressing matters that were consequential to......

1 Introduction 1.1 This document sits alongside, and forms part of, [ insert organisation’s name ]’s Records management policy. It specifies and outlines the periods for which various categories of business records (as defined within the Records management policy) should be kept to meet operational and legal needs and obligations. [ You need not read the full retention schedule; instead, concentrate on the record categories relevant to your duties. ] 1.2 The schedule’s retention periods reflect operational needs and legal obligations, including our duty under data protection law not to retain personal data for longer than is necessary. When a retention period comes to an end, the data or record should be reviewed and, if no longer required, destroyed. 1.3 If you hold any records not described in this schedule, and it is not apparent from the existing...

Stop press: The Data ( Use and Access) Act 2025 ( Commencement No 6 and Transitional and Saving Provisions) Regulations 2026, SI 2026/82 bring into effect the remaining provisions of the Data ( Use and Access) Act 2025 ( DUAA 2025). Provisions relating to subject access requests, legitimate interests, purpose limitation, automated decision-making, international transfers and enforcement are operative from 5 February 2026, and those dealing with penalty notices and complaints take effect from 19 June 2026. For more information, see Practice Note: Data ( Use and Access) Act 2025—employment implications. This Precedent will be updated shortly to take account of these changes. 1 Introduction 1.1 The Company maintains personal data (or information) concerning job applicants, employees, clients, customers, suppliers, business contacts and other individuals for a variety of business purposes. 1.2 Under Assimilated Regulation ( EU) 2016/679, UK General Data...

ARCHIVED: This Precedent has been archived and is no longer maintained. Provided for background purposes only, it points to international data transfer templates once valid under the United Kingdom General Data Protection Regulation, Assimilated Regulation ( EU) 2016/679 ( UK GDPR) that have since been replaced. Those templates stopped being acceptable for use as international transfer mechanisms for contracts signed after 21 September 2022, and for all contracts, regardless of signature date, from 21 March 2024. For details of current international data transfer mechanisms recognised under the UK GDPR, see Practice Note: UK GDPR—transfers of personal data internationally and to international organisations. In brief This Precedent links to: a template produced by the UK Information Commissioner's Office ( ICO) for the ‘ Set II’ or ‘2004’ EU Standard Contractual Clauses (also referred to as the Model Clauses or SCCs), originally adopted by Commission Decision...

ARCHIVED: This Precedent has been archived and is not maintained This material is retained solely for background reference. It points to international data transfer templates that were originally valid under the United Kingdom General Data Protection Regulation, Assimilated Regulation ( EU) 2016/679 ( UK GDPR), and which have since been superseded... These templates are no longer acceptable as international transfer mechanisms for contracts entered into after 21 September 2022, and they became invalid for all contracts, irrespective of signature date, from 21 March 2024... For details of current, compliant international data transfer mechanisms under the UK GDPR, see Practice Note: UK GDPR—transfers of personal data internationally and to international organisations... In brief A link to a template produced by the UK Information Commissioner’s Office ( ICO) for the ‘2010’ EU Standard Contractual Clauses (also called Model Clauses or SCCs), first introduced by Commission Decision 2010/87/ EU of 5...

[ insert address of sender ] Our ref: [ insert reference ] Your ref: [ insert reference ] [ Insert address of recipient ] Date: [ insert date ] Dear [ insert organisation name ], [ insert purpose or project ] (the Purpose ) 1 We write in respect of the Purpose. Each party may provide Confidential Information to the other, to be used solely for the Purpose, in line with the provisions set out in this letter (the Agreement )......

[ Insert name and address of recipient ] Dear [ insert organisation name ], [ Name of client ] and confidential information We act for [ insert name of client ] of [ address ]. We write regarding the unlawful disclosure [ and unauthorised use ] of our client’s confidential information. This correspondence is issued pursuant to the [ Practice Direction Pre- Action Conduct and Protocols under the Civil Procedure Rules OR Pre-action Protocol for Media and Communications Claims ]. Our client trades in [ describe client’s business and any other background information ]. They hold highly sensitive commercial material, including [ [ identify the confidential information ] OR [ identify the categories of confidential information ] ] (the Confidential Information). The Confidential Information was provided to [ you OR [ name of individual ] ] on [ provide details about the...

This Agreement is entered into on [ date ] Parties [ insert name of party ] [ of [ insert details ] OR a company incorporated in [ England and Wales ] with registration number [ insert registered number ] and whose registered office is at [ insert address ] ] ( Party A); [ insert name of party ] [ of [ insert details ] OR a company incorporated in [ England and Wales ] with registration number [ insert registered number ] and whose registered office is at [ insert address ] ] ( Party B), each of Party A and Party B being a party and, collectively, the parties. Background Party A is [ insert details ], whilst Party B is [ insert details ]. The parties intend to share Confidential Information with one another strictly for the...