Stop press: The Data (Use and Access) Act 2025 (Commencement No 6 and Transitional and Saving Provisions) Regulations 2026, SI 2026/82 now activate the outstanding parts of the Data (Use and Access) Act 2025 (DUAA 2025). Measures covering subject access requests, legitimate interests, purpose limitation, automated decision-making, cross-border transfers and enforcement take effect from 5 February 2026, while those on penalty notices and complaints apply from 19 June 2026. For further detail, refer to Practice Note: Data (Use and Access) Act 2025—employment implications. This Precedent will shortly be revised to reflect these developments. [to be printed on employer letterhead] [ Name of Employee ][ Address ][ Date ] Dear [ insert employee's name ] Secondment to [ insert name of host company ] Following our recent conversations, I am writing to confirm the arrangements we have agreed for your secondment to [ insert name of host company ] (the
[ Insert name and address of client ] [ insert date ] Dear [ insert name of contact at the client ] Explaining the disclosure process and your obligations Thank you for instructing us in relation to [ insert matter name / details ]. [ This letter accompanies our retainer OR Our retainer will follow under separate cover ]. It [ has been confirmed OR is likely OR is possible ] that your dispute with [ describe other parties ] will be determined in the Business and Property Courts [ if it proceeds to formal litigation ]. This letter explains what disclosure under the Disclosure Scheme ( DS ) in the Business and Property Courts involves, and what you must know about the procedure. The DS seeks a fundamental cultural shift in the approach to disclosure in civil litigation. So, even if you have handled
This Agreement is entered into on [ insert date ] between: 1 [ insert name of manufacturer ] [ of OR a company incorporated in [ England and Wales ] under number [ insert registered number ] whose registered office is at ] [ insert address ] (Manufacturer); and 2 [ insert name of customer ] [ of OR a company incorporated in [ England and Wales ] under number [ insert registered number ] whose registered office is at ] [ insert address ] (Customer). Each of the Manufacturer and the Customer is a party and, together, the Manufacturer and the Customer constitute the parties... Background: (A) The Manufacturer manufactures [ insert ]... (B) The Customer Group manages the distribution and sale of [ insert ]... (C) The Manufacturer intends to manufacture and sell the Product to the
This Deed is dated on [ insert day and month ] 20[ insert year ] Parties [ Insert name of Chargor ], being a company incorporated in England and Wales, bearing registered number [ insert company number ], and whose registered office is situate at [ insert address ] (the Chargor); and [ Insert name of Lender ] of [ insert address ] (the Lender). Recitals The Lender makes facilities available to the Chargor under various financing arrangements. It is a condition of the Lender making the facilities available to the Chargor that the Chargor enter into this Deed in favour of the Lender. ...
We are dedicated to delivering a high-quality service, in line with data protection legislation and obligations. At all times, we aim to follow data protection principles by ensuring that we consistently: handle personal data lawfully, fairly and in a transparent manner; gather personal data for explicit, legitimate and defined aims and refrain from processing it in any manner that conflicts with those aims; collect and utilise only adequate, pertinent and suitably limited personal data; take sensible measures to ensure personal data is correct and remains current and regularly reviewed; do not retain personal data beyond what is necessary for our purposes; and apply suitable security safeguards and...
This form has been designed to assist you in lodging a data protection complaint so that we can examine and resolve it as swiftly as possible. Completing the form is optional; if you would rather, you may write to us or email your complaint using the contact details in section 5. 1 About you Fill in this section with details of the person submitting the complaint, even if the matter relates to someone else. Your name [ Details to be inserted here ] Your contact details [ Details to be inserted here ] [ Account OR Customer OR Client ] number, if known [ Details to be inserted here ] [ Your identity information ] [ For security reasons, we cannot respond to a complaint until your identity has been verified. Please provide [ insert details of identity...
[ insert complainant’s name ] [ insert complainant’s contact address ] Our ref: [ insert complaint reference number ] Dear [ insert complainant’s name ] I write to confirm that the review of your complaint, received on [ insert date complaint received ], has now been concluded accordingly......
[ Insert complainant’s name ] [ Insert complainant’s contact address ] Our ref: [ insert complaint reference number ] Dear [ insert complainant’s name ] I am [ insert name of person dealing with complaint ], serving as [ insert job title of person dealing with complaint ]. I will be handling your data protection complaint, which we received on [ insert date complaint received ]......
[ Insert complainant’s name ] [ Insert complainant’s contact address ] Our ref: [ insert complaint reference number ] Dear [ insert complainant’s name ] Your complaint I am still reviewing your data protection complaint, which was received here on [ insert date complaint received ]......
[ Insert complainant’s name ][ Insert complainant’s contact address ] Our reference: [ insert complaint reference number ] Dear [ insert complainant’s name ] Your complaint I am still handling your data protection complaint, which was received on [ insert date complaint received ]. [ Identity information For security purposes, we cannot give a detailed response to your complaint until we are satisfied about your identity [ , and that of the data subject ] .......
1 Assemble an incident team Form a tax evasion facilitation incident team without delay, bringing together your head of legal/compliance, nominated officer, risk manager and head of HR. Designate one person to chair and direct the team. 2 Consider reporting obligations Seek legal advice before opting to self-report to HMRC. Rapid self-reporting of a tax evasion facilitation incident does not assure immunity from prosecution, but it can: assist your defence where there is liability for the failure-to-prevent offence; be considered by prosecutors when deciding whether to bring a case; and be reflected in any penalties if the organisation is convicted. Also assess whether a suspicious activity report ( SAR) should be submitted to the National Crime Agency......
Precedent training aid presentation This Precedent training aid presentation is designed for private sector organisations in the UK and addresses members of staff engaged in direct marketing activities. It offers high-level guidance on data protection legislation relevant to direct marketing. Please click to access the Power Point presentation. The majority of commercial organisations undertake some form of direct marketing, including postal direct marketing, live telephone direct marketing or email direct marketing......
1 Lawfulness, fairness and transparency ICO expectation and current status Your business has undertaken an information audit to map data flows: ☐ Not yet implemented or planned ☐ Partially implemented or planned ☐ Successfully implemented ☐ Not applicable More information Arrange an information audit across the whole organisation or targeted areas. A single person with deep knowledge of your practices may complete it. This will reveal the data you process and how it enters, moves within, and leaves your organisation. A data flow can also be a transfer between locations. For example, data may remain in-house but a transfer still occurs because a department or other office operates off site. Once you have audited your information, you can then spot any risks. Lexis Nexis® tools and guidance Resources within subtopics: Data mapping Identifying and assessing data protection...
Key function Impact/consequences if disrupted Resources required for recovery Time by which function would need to be resumed Priority rating Other issues/considerations [ Insert, eg Case management ] [ Insert, eg Accounting—processing payments ] [ Insert relevant key function ] [ Insert relevant key function ] Impacts by timeframe if disrupted: First 24 hours: [ insert impact ]; 24–48 hours: [ insert impact ]; Up to one week: [ insert impact ]; Up to two weeks: [ insert impact ]; More than two weeks: [ insert impact ] Resources for recovery: Key personnel: [ insert resources ]; Technology: [ insert resources ]; Data & documents: [ insert resources ]; External support: [ insert resources ]; Operational equipment & premises: [ insert resources ] Time by which function would need to be resumed: [ Insert time ] | Priority rating: [ Insert rating ] |...
1 Introduction 1.1 This direct marketing policy is for members of staff engaged in direct marketing activities. It offers high-level guidance on data protection law relevant to direct marketing and sets out the internal procedures we have put in place to ensure we comply with the law. 1.2 Direct marketing is significant. It is a core part of our business operations and can help our business to grow. It can also enhance the customer experience by making people aware of new products and services they may value, and by giving them opportunities to participate in events or take up offers. 1.3 That said, direct marketing can create nuisance for people and, in some instances, may even lead to distress. 1.4 We conduct our business with integrity and in an ethical way. We are committed to ensuring our direct marketing complies with the data protection regime and is...
STOP PRESS This document is currently being revised to account for the introduction of the Data ( Use and Access) Act 2025 ( DUAA 2025), which alters the UK GDPR and the Data Protection Act 2018. For added guidance on the compliance effects of DUAA 2025, see Practice Note: Data ( Use and Access) Act 2025—compliance implications. 1 Background information Name and position of person(s) conducting assessment [ Insert name ] Date of assessment [ Insert date ] Original purpose for processing [ Insert response ] 2 Proposed new purpose for processing Outline your intended new purpose for processing that is the subject of this compatibility assessment. Provide a concise summary of the proposed new purpose to which this assessment pertains. [ Insert response ] Your rationale for processing the data for a different purpose? You may wish to address: The benefit you...
Introduction We are all required to act in the organisation’s best interests. A conflict of interest arises where someone’s personal, financial, or other concerns cut across the organisation’s interests. Even the suggestion of a conflict is unacceptable and can harm the organisation and its reputation. The actions of family members and close associates can also create conflicts. Conflicts can appear in many guises, commonly including: external employment; holdings or influence in other companies; commercial prospects; and familial and close personal relationships. These examples are outlined in greater detail below. This is not an exhaustive account of every circumstance in which a conflict might occur. If you feel pulled by ‘conflicting loyalties’, or others could reasonably think that you are, a conflict may exist and should be addressed. Many real or potential conflicts can be managed in a way that works for both you and the...
I am legal counsel for [ insert organisation name ]. I act exclusively for [ insert organisation name ] and do not represent you. I am conducting this interview to obtain facts to enable me to provide legal advice to [ insert organisation name ]......
Chapter V ( Transfers of personal data to third countries or international organisations) In brief, the United Kingdom General Data Protection Regulation, Assimilated Regulation ( EU) 2016/679 ( UK GDPR), restricts the transfer of personal data beyond the UK (and to certain ‘international organisations’). ‘ Assimilated law’ is the label applied to retained EU law that continues in force after the end of 2023. For further information, see Practice Note: Assimilated law and News Analysis: Implications of the move to ‘assimilated’ law, and the Retained EU Law ( Revocation and Reform) Act 2023, for data protection lawyers. One of the most frequently relied upon transfer mechanisms used to comply with those international transfer restrictions is commonly known as standard contractual clauses ( SCCs). This document includes a link to a template SCC issued by the UK Information...
Chapter V ( Transfers of personal data to third countries or international organisations) In summary, Chapter V of the United Kingdom General Data Protection Regulation, Assimilated Regulation ( EU) 2016/679 ( UK GDPR), places limits on sending personal data outside the UK and to certain ‘international organisations’. A frequently used route to satisfy these international transfer rules is the use of standard contractual clauses ( SCCs). This document provides a link to a template SCC released by the UK Information Commissioner’s Office ( ICO) in 2022. The key details of that template SCC are: Name: International data transfer addendum to the European Commission’s standard contractual clauses for international data transfers (the Addendum) Purpose: An addendum that can be used to rely on the SCCs issued by the European Commission in June 2021 for use under the EU’s General Data Protection Regulation, Regulation ( EU) 2016/679 ( EU GDPR) as an SCC...
1 General information Review timeframe [ Insert review period ] Review date [ Insert date ] Individual(s) carrying out the review [ Insert name(s) ] 2 Data Total count of high-risk clients [ Insert number ] Total count of high-risk matters [ Insert number ] Total count of these that pertain to PEPs [ Insert number ] Total count of these that concern false or stolen identification documentation [ Insert number ] Total count of these that involve sanctioned entities [ Insert number ] Total count of these that present a proliferation financing concern [ Insert number ] Total count of these that involve clients who are beneficiaries of life insurance policies where the retainer has a direct link to the policy [ Insert number ] Total count of these that concern clients...
This Precedent enables you to maintain a centralised record of all high‑risk clients and matters. It also features a separate tab for politically exposed persons ( PEPs). It can assist in evaluating and overseeing the firm’s risk much more efficiently, accelerate client due diligence (and enhanced due diligence), and simplify the continuing monitoring process overall......
This Precedent serves to log when client ID documents acquired for /client due diligence ( CDD) purposes will expire. This register is built in Excel, and as such, it cannot be exported directly to Word at all......
This approval form sets out the grounds on which the project described in your [ data protection impact assessment ( DPIA) OR privacy impact assessment ( PIA) ] has been approved, alongside the data protection compliance steps you must implement. The final [ DPIA OR PIA ] is attached and contains full particulars of the guidance summarised below—please review both documents carefully before implementing your project. If you need any additional details or assistance, please contact [ insert relevant point of contact, eg your organisation’s data protection officer ( DPO) or data protection manager ( DPM) ]......
When evaluating a general damages claim, the practitioner ought initially to refer to the Judicial College Guidelines (JCG)...
This Practice Note This Practice Note reviews mechanisms used in settling litigation. A Tomlin order consists of a consent order paired with a schedule. It operates to stay proceedings on terms that have been agreed. The provisions contained in the schedule may remain confidential. This Practice Note describes the scope of confidentiality attaching to the schedule and sets out how it differs from a standard consent order. Sample wording for a Tomlin order is included, alongside links to precedents, as well as guidance on court approval. It also addresses varying, setting aside and enforcing a Tomlin order, including the considerations the court will take into account when handling applications for each. Further guidance is provided on interpreting and applying the relevant provisions of the CPR; however, some courts and divisions impose very specific requirements for both drafting and approval, and for approaching the schedule and confidentiality issues. Accordingly, you must consider the particular rules and court guide provisions in the forum where your claim is proceeding when drawing up the Tomlin order...
Date [ date ] Parties [ name of Landlord ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Landlord) [ name of Tenant ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Tenant) [ [ name of Guarantor ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Guarantor) ] [ [ name of Mortgagee ] [ of OR incorporated in England and Wales (company registration number [ number ]) with its registered office at ] [ address ] (Mortgagee) ] Definitions Within this Deed, the terms below shall be interpreted as follows: [ Annual Rent • the annual sum reserved under the Lease; ] [ Insurance Rent • the Tenant’s share of the Landlord’s costs of insuring the Property (as set out in the Lease); ] Lease • the lease of the Property dated [ date ], entered into between (1) [ the Landlord OR [ name ...
I, [ name ], of [ address ], solemnly and sincerely state that: [ Matters to be verified, set out in numbered paragraphs ] I make this solemn statement in good conscience, believing it to be true, and pursuant to the provisions of the Statutory Declarations Act 1835. DECLARED at [ details ] this [ day ] day of [ month and year ] Before me ................................................................................ [ signature of the person before whom the declaration is made ] A [ commissioner for oaths OR [ solicitor OR [ insert other qualification ] ] authorised to administer oaths ]...