Stop press: The Data (Use and Access) Act 2025 (Commencement No 6 and Transitional and Saving Provisions) Regulations 2026, SI 2026/82 now activate the outstanding parts of the Data (Use and Access) Act 2025 (DUAA 2025). Measures covering subject access requests, legitimate interests, purpose limitation, automated decision-making, cross-border transfers and enforcement take effect from 5 February 2026, while those on penalty notices and complaints apply from 19 June 2026. For further detail, refer to Practice Note: Data (Use and Access) Act 2025—employment implications. This Precedent will shortly be revised to reflect these developments. [to be printed on employer letterhead] [ Name of Employee ][ Address ][ Date ] Dear [ insert employee's name ] Secondment to [ insert name of host company ] Following our recent conversations, I am writing to confirm the arrangements we have agreed for your secondment to [ insert name of host company ] (the
[ Insert name and address of client ] [ insert date ] Dear [ insert name of contact at the client ] Explaining the disclosure process and your obligations Thank you for instructing us in relation to [ insert matter name / details ]. [ This letter accompanies our retainer OR Our retainer will follow under separate cover ]. It [ has been confirmed OR is likely OR is possible ] that your dispute with [ describe other parties ] will be determined in the Business and Property Courts [ if it proceeds to formal litigation ]. This letter explains what disclosure under the Disclosure Scheme ( DS ) in the Business and Property Courts involves, and what you must know about the procedure. The DS seeks a fundamental cultural shift in the approach to disclosure in civil litigation. So, even if you have handled
This Agreement is entered into on [ insert date ] between: 1 [ insert name of manufacturer ] [ of OR a company incorporated in [ England and Wales ] under number [ insert registered number ] whose registered office is at ] [ insert address ] (Manufacturer); and 2 [ insert name of customer ] [ of OR a company incorporated in [ England and Wales ] under number [ insert registered number ] whose registered office is at ] [ insert address ] (Customer). Each of the Manufacturer and the Customer is a party and, together, the Manufacturer and the Customer constitute the parties... Background: (A) The Manufacturer manufactures [ insert ]... (B) The Customer Group manages the distribution and sale of [ insert ]... (C) The Manufacturer intends to manufacture and sell the Product to the
This Deed is dated on [ insert day and month ] 20[ insert year ] Parties [ Insert name of Chargor ], being a company incorporated in England and Wales, bearing registered number [ insert company number ], and whose registered office is situate at [ insert address ] (the Chargor); and [ Insert name of Lender ] of [ insert address ] (the Lender). Recitals The Lender makes facilities available to the Chargor under various financing arrangements. It is a condition of the Lender making the facilities available to the Chargor that the Chargor enter into this Deed in favour of the Lender. ...
In the event of a dawn raid During a dawn raid, please complete this schedule of documents and secure investigators’ signatures once the process is concluded. Retain copies of every document referenced here, and ensure each bundle is numbered in strict sequence, aligning precisely with this index as detailed......
To: [ All staff in [ insert ] office ] From: Response Team Leader RE: Regulatory investigation—prompt attention required Privileged and confidential Dear All Investigators from [ insert ] [ are OR will be ] arriving on site beginning today to commence an investigation. [ Insert organisation name ] treats its legal duties seriously and will co-operate with the investigators, addressing their requests in line with [ our [ Dawn raid action plan ] ]. A ‘dawn raid’ is when representatives of a regulator attend our premises without prior notice to gather evidence for an investigation. Refusing to co-operate with the investigation, or impeding the investigators, will put [ insert organisation’s name ] and individuals at risk of sanctions. Further information is contained in our [ Dawn raid action plan ]......
STOP PRESS: On 19 June 2025, the Data ( Use and Access) Bill secured Royal Assent, transforming into the Data ( Use and Access) Act 2025 ( DUAA 2025) and taking partial effect on that date. A number of DUAA 2025 provisions — covering issues such as handling data subject access requests and the conferral of authority to create further regulations — commenced immediately on 19 June 2025. Other elements, including measures on notices from the Information Commissioner and particular aspects of law enforcement processing, took effect on 19 August 2025 (two months after Royal Assent). The greater part of DUAA 2025’s framework will, however, only come into operation once additional regulations, in the form of statutory instruments, are made to commence them. Parts 5 and 6 of DUAA 2025 introduce amendments to aspects of UK data protection and e Privacy law,...
Use this decision tree for gifts to determine if you should give or receive a corporate gift. If you are unsure, please reach out directly to [ insert name ] Notes Note 1— Secret gifts All gifts, whether offered or accepted, must be handled transparently, never in secret. Note 2— Gifts to individuals We consider gifts made or taken in an individual’s name, rather than the organisation’s, to be improper. Note 3— Cash Gifts of cash, cash equivalent (eg American Express or Visa gift cards), or securities are prohibited......
This table outlines country-specific thresholds for the value of allowable gifts and hospitality. If you require details for a nation not shown here, reach out to [ insert name ]. All figures apply per person, per occasion, or per item......
We conduct our business [ es ] with integrity. We must all work together to ensure our business [ es ] remain [ s ] free from bribery and corruption. This FAQ, which is central to that aim, sets out how we can achieve our business objectives in a way that aligns with our commitment to combating bribery and corruption. 1 Do the same rules and regulations relating to gifts and hospitality apply in every country? No. Rules and regulations vary from country to country, and in the United States the rules for the federal government are different from those for individual states, and they also differ among the various states. [ Insert organisation’s name ] specifies the appropriate limits for gifts and hospitality in the countries where it operates in our [ international permissible...
Use this hospitality decision tree to judge whether to extend corporate hospitality. If you are unsure, please reach out to [ insert name ]. Please review the notes below before proceeding too. Notes Note 1— Government officials: For public officials, local legislation sets even tighter lawful limits on giving hospitality—see our Gifts and hospitality—government officials policy, available at [ insert where staff can find the policy ]. Note 2— Decision making: The offer of hospitality must not reasonably give rise to an inference that it was meant to directly influence the recipient’s decision making. ......
We conduct our business with integrity. Together, we must protect our business from bribery and corruption. This FAQ, central to that effort, sets out how we can pursue our objectives while staying true to our pledge to counter bribery and corruption. 1 Who is a government or public official? A public official is any person who occupies a legislative, administrative or judicial role of any sort, whether appointed or elected. It also covers anyone carrying out public duties within any arm of national, local or municipal government of a country or territory, or performing a public function for a public agency or a state-owned enterprise—such as professionals employed by public health bodies and officers discharging public functions in state-owned companies. The term also includes an official or agent of a public international organisation, for example the United Nations or the World Bank. 2 Why do we need a...
Top-level commitment We conduct our business [ es ] with integrity. All of us must act together to ensure our business [ es ] remain [ s ] untainted by bribery and corruption. This approval request form is central to that endeavour. [ Please see our [ insert, eg Gifts and hospitality policy ]. ] This form must be completed in every instance where a gift or hospitality is of a value above our permitted limit of £[ insert limit ]......
Statement by [ insert name of organisation ] concerning a significant [ cyber-attack OR data protection breach ] on [ insert date ] On [ insert date ], we became aware of an event that posed a risk to the security of personal data in our care. [ We OR [ Insert name of investigating party—eg the Metropolitan Police or the Information Commissioner’s Office ] ] [ have OR has ] initiated [ a OR an ] [ criminal ] investigation. We are collaborating with forensic specialists and other data security professionals to determine the source, nature and scope of this incident. We are undertaking a detailed review of the incident. We are also working closely with [ our insurer, ] [ the Information Commissioner’s Office, ] [ insert name of any relevant professional regulator or trade body, ] [ major financial...
1 General information Monitoring review date [ insert date ] Individual overseeing the monitoring review [ insert name and job title ] 2 Volume of data breaches identified and reported Consult your Data breach register for the previous 12 months and provide the required details below......
If you become aware of, or suspect, a personal data breach has taken place, please do the following: complete this form; and email it or deliver it to the [ insert, eg the data protection officer ], making sure the email or the form is clearly marked as urgent With data breaches, acting swiftly is critical. You must submit this report immediately once you know of, or suspect, a data breach......
1 General information Review date [ enter date of review ] Date of previous review [ enter date of last review ] Reviewer(s) [ enter name(s) or role(s), eg data protection officer ] 2 Review and findings Is your data processing register current? ☐ Yes ☐ No If No, make sure you note an action in section 3 below Have you carried out a data protection risk assessment since the previous review? ☐ Yes ☐ No If No, ensure an action is recorded in section 3 below Have you undertaken an information security review since the previous review? ☐ Yes ☐ No If No, set an action in section 3 below Are the policies listed below up to date and suitable for purpose?......
1 Purpose and application 1.1 This policy outlines the measures you are required to take in order to safeguard personal data and confidential information. 1.2 This policy covers all members of staff. 2 Responsibility 2.1 [ State who ] is accountable for this policy. 2.2 They are tasked with communicating the contents of this policy to all staff, ensuring compliance, keeping the policy under review, and arranging any amendments or updates to the policy. 3 Requirements—do 3.1 If you will be away from your desk for a prolonged period, make sure you have taken reasonable steps to prevent unauthorised access to confidential information......
Please select to obtain an Excel version of this register. The register (often referred to as a data breach log) mirrors the reporting and recording obligations under Assimilated Regulation ( EU) 2016/679, the UK General Data Protection Regulation ( UK GDPR). It can be used to help you record, manage and monitor data breaches. It will ensure you capture the information you are required to record under the UK GDPR, as well as the information you will need to notify a data breach to the Information Commissioner’s Office ( ICO) and/or affected data subjects. This register has been prepared in Excel and therefore it cannot be downloaded to Word. See also Precedent: Personal data breach plan. Requirement to keep a record You are required to document any personal data breaches—record the facts relating to each personal data breach, its effects and the remedial action...
1 Introduction This personal data breach plan: requires staff to report actual or suspected personal data breaches; and outlines our procedure for dealing with and documenting actual or suspected breaches. This plan applies to all staff [ in the UK ], and to all personal data and special category personal data held by [ insert organisation’s name ]. It supplements our policies relating to [ insert policies, eg data protection, information security and any other relevant policies ]. Key terminology used in this plan includes: Personal data breach: A data security breach resulting in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data that is transmitted, stored or otherwise processed; for example, accidental loss, destruction, theft, corruption or unauthorised disclosure of personal data. Personal data: Information about a living person who can be identified, directly or...
1 Management and organisational information security ICO expectation and current status Further details: Lexis Nexis® Precedents Your business identifies, evaluates and controls information security risks Not yet implemented or planned Partially implemented or planned Successfully implemented Not applicable Before deciding the right level of protection for your organisation, audit the personal data you hold and gauge the threats to it. Review every stage of handling: collection, storage, use, sharing and disposal. Weigh the sensitivity or confidentiality of the data and the potential harm or distress to people, alongside any reputational impact on your business, if a breach occurred. With this understanding, select security controls proportionate to your needs. Embedding data protection by design also means undertaking a data protection impact assessment ( DPIA) in defined scenarios to evaluate privacy risks. You must complete a DPIA prior to...
1 Introduction This policy explains how we make sure: a uniform naming convention is used for all [ paper and ] electronic files; all electronic documents are suitably stored and accessible; staff have the latest version of any document; and changes to documents can be monitored through version numbering. 2 File [ and matter ] naming convention [ Set out your file and, where appropriate, matter naming conventions. You may choose different file and matter naming conventions for internal files and client/customer-facing files ] 3 Document naming convention Each electronic iteration of a document must be named so that it can be easily identified and, if required, located by search. Each document name should state the: [ matter OR customer [ name AND/ OR reference ] ] [...
The Bribery Act 2010 ( BA 2010) The Bribery Act 2010 ( BA 2010) extends to all companies formed in, or conducting business within, the UK. It encompasses bribery carried out by the company, or by others on its behalf, wherever it happens worldwide. This Precedent presentation is created as a learning tool for briefing your personnel on BA 2010 and your own internal anti-bribery and corruption rules and processes. The training resources can be readily tailored......
1 Data breach team The initial action is to convene a team to handle and respond to the breach. Data breach team lead [ insert the name or description of the person who will lead the data breach team, eg DPO ] [ Data protection officer ( DPO) ] [ [ insert name ] ] Head of legal [ insert name ] Head of compliance [ insert name ] Head of IT [ insert name ] [ insert any other, eg head of HR if the breach involves employee data ] [ insert name ] 2 Background information Refer to the Data breach report form, if appropriate......
When evaluating a general damages claim, the practitioner ought initially to refer to the Judicial College Guidelines (JCG)...
This Practice Note This Practice Note reviews mechanisms used in settling litigation. A Tomlin order consists of a consent order paired with a schedule. It operates to stay proceedings on terms that have been agreed. The provisions contained in the schedule may remain confidential. This Practice Note describes the scope of confidentiality attaching to the schedule and sets out how it differs from a standard consent order. Sample wording for a Tomlin order is included, alongside links to precedents, as well as guidance on court approval. It also addresses varying, setting aside and enforcing a Tomlin order, including the considerations the court will take into account when handling applications for each. Further guidance is provided on interpreting and applying the relevant provisions of the CPR; however, some courts and divisions impose very specific requirements for both drafting and approval, and for approaching the schedule and confidentiality issues. Accordingly, you must consider the particular rules and court guide provisions in the forum where your claim is proceeding when drawing up the Tomlin order...
Date [ date ] Parties [ name of Landlord ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Landlord) [ name of Tenant ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Tenant) [ [ name of Guarantor ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Guarantor) ] [ [ name of Mortgagee ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Mortgagee) ] Definitions Within this Deed, the terms below shall be interpreted as follows: [ Annual Rent • the annual sum reserved under the Lease; ] [ Insurance Rent • the Tenant’s share of the Landlord’s costs of insuring the Property (as set out in the Lease); ] Lease • the lease of the Property dated [ date ], entered into between (1) [ the Landlord OR [ name ...
I, [ name ], of [ address ], solemnly and sincerely state that: [ Matters to be verified, set out in numbered paragraphs ] I make this solemn statement in good conscience, believing it to be true, and pursuant to the provisions of the Statutory Declarations Act 1835. DECLARED at [ details ] this [ day ] day of [ month and year ] Before me ................................................................................ [ signature of the person before whom the declaration is made ] A [ commissioner for oaths OR [ solicitor OR [ insert other qualification ] ] authorised to administer oaths ]...