Search results

Hong Kong data protection: cross-border transfers of personal data

Published on 20 Jun 2022. By Jonathan Crompton, Partner and Andrea Randall, Partner

We take a closer look at businesses' obligations under Hong Kong law to protect personal data in a cross-border transfer and the new recommended model contractual clauses.

The Role of AI in Disputes

Published on 03 Jun 2024. By Daniel Hemming, Partner and Olivia Dhein, Knowledge Lawyer and Ricky Cella, Senior Associate

While lawyers have had various forms of AI available to them for years, it is generative AI and the development of large language models (LLMs) which is likely to represent a fundamental shift for dispute resolution. This technology now offers language capabilities that have never been seen before, and is likely to transform the way lawyers conduct proceedings.

Hong Kong Employment Law Update: Mandatory Provident Fund offsetting mechanism to be abolished after decade-long debate and campaigning

Published on 24 Jun 2022. By Andrea Randall, Partner and Lillian Wong, Associate

Following on from our brief update published on 9 June 2022, this article provides a detailed overview of the amendments put forward by the long-awaited Employment and Retirement Schemes Legislation (Offsetting Arrangement) (Amendment) Bill 2022 (the "Bill"), which was finally passed by the Legislative Council on 9 June 2022. The main feature of the Bill is the abolishment of the offsetting mechanism of the Mandatory Provident Fund ("MPF").

Hong Kong Wage Subsidy Update – Government announces new round of Employment Support Scheme

Published on 27 Apr 2022. By Andrea Randall, Partner and Lillian Wong, Associate

The Government has at last finalized the details of the new round of Employment Support Scheme ("2022 ESS"). The purpose of the 2022 ESS to offer limited time financial support to small and medium-sized enterprises through providing wage subsidies to encourage enterprises to increase employment and to retain employees who would otherwise be made redundant.

Increased penalty for employers who employ overstayers

Published on 29 Nov 2021. By Andrea Randall, Partner

Immigration (Amendment) Ordinance 2021 (“IAO”)

Hong Kong's Legislative Council to consider Cancellation of MPF Offsetting

Published on 06 Oct 2021. By Andrea Randall, Partner

Under the Employment Ordinance, employers can offset long service payment or severance payment due to an employee against the employer's mandatory and voluntary contributions to the Mandatory Provident Fund (MPF), Hong Kong's pension system.

Reimbursement of Maternity Leave Pay Scheme in Hong Kong

Published on 12 Apr 2021. By Andrea Randall, Partner

Hong Kong's statutory maternity leave has been extended from 10 weeks to 14 weeks with effect from 11 December 2020. From 1 April 2021, the Hong Kong Government has started accepting applications to reimburse employers' payment in respect of the extended period of maternity leave.

COVID 19 Your workforce: What on earth is "furlough"?

Published on 24 Mar 2020. By Kelly Thomson, Partner, ESG Strategy Lead and Patrick Brodie, Partner

Meaning of furlough, especially in the context of companies dealing with the impact of COVID-19.

COVID-19 Your workforce: pay and costs - practical ideas our clients are exploring

Published on 24 Mar 2020. By Patrick Brodie, Partner and Kelly Thomson, Partner, ESG Strategy Lead

COVID-19 Your workforce: pay and costs - practical ideas our clients are exploring. These are extraordinary times that place extraordinary pressures on all of us, including dealing with your workforce. We set out below some ideas that we are hearing about from our clients and some areas you may wish to think about in terms of your employee costs.

COVID-19 Your workforce: supporting mental health when home working

Published on 24 Mar 2020. By Kelly Thomson, Partner, ESG Strategy Lead and Patrick Brodie, Partner

COVID-19 Your workforce: supporting mental health when home working. Many of us are working from home during this crisis and while this can be an effective way of working for some, it is less happy for others; loneliness, caring for vulnerable dependants and challenging home environments are all being experienced. There may be members of your teams who fall into these categories.

Cyber_Bytes Issue 70

Published on 31 Dec 2024. By Richard Breavington, Partner and Daniel Guilfoyle, Partner and Rachel Ford, Partner and Ian Dinning, Senior Associate and Christopher Ashton, Senior Associate and Bethan Griffiths, Senior Associate and Elizabeth Zang, Associate and Emanuele Santella , Associate and Lauren Kerr, Associate

Welcome to Cyber_Bytes, our regular round-up of key developments in cyber, tech and evolving risks.

New guidance on balancing data protection with the FCA's Consumer Duty and the TPR's Code of Practice

Published on 19 Dec 2024. By Helen Yost, Senior Associate and Jon Bartley, Partner and Jonathan Charwat, Partner

The Financial Conduct Authority (FCA), Information Commissioner's Office (ICO) and The Pensions Regulator (TPR) have published welcome guidance (Joint Statement) aimed at retail investment firms and pension providers on how to ensure their customer communications comply with the FCA's Consumer Duty (Consumer Duty) and the TPR’s Code of Practice (Code of Practice), whilst ensuring they follow the rules on direct marketing and data protection.

Privacy developments – looking back and looking forward

Published on 19 Dec 2024. By Oliver Bray, Senior Partner and Jon Bartley, Partner and Joe Lippitt, Partner and Praveeta Thayalan, Knowledge Lawyer

In this article, we give you a high-level snapshot of the key data protection and privacy developments in the UK and EU in 2024 as well as developments we anticipate for 2025.

New Standard Contractual Clauses for data importers outside the EAA but subject to the GDPR

Published on 10 Dec 2024. By Oliver Bray, Senior Partner

Are the EU’s Standard Contractual Clauses (SCCs) needed if a data importer is located outside the European Economic Area (EEA) and already directly subject to the EU General Data Protection Regulation (EU GDPR)? In other words, where third party controllers and processors are based outside the EAA but subject to the GDPR, do you still need the SCCs to enable a lawful international transfer to them?

The UK’s new Data (Use and Access) Bill

Published on 10 Dec 2024. By Oliver Bray, Senior Partner

What does the UK’s new Data (Use and Access) Bill (the Data Bill) mean for businesses?

The EU's Cyber Resilience Act: 10 on the 10

Published on 10 Dec 2024. By Richard Breavington, Partner and Dorian Nunzek, Trainee Solicitor

Today the EU's Cyber Resilience Act (Regulation (EU) 2024/2847) ('CRA') enters into force. The CRA recognises that the continuously evolving world of smart products is frequently challenged by vulnerabilities which can potentially lead to cyber-security incidents. Whilst most of the Act's obligations will not be applicable until three years from now, 10 December is the day when the EU takes a big step towards it's ten-year Cybersecurity Strategy. To mark the occasion, we have outlined ten key points that entities in scope must be aware of in preparation for compliance with the CRA.

Snapshots Winter 2024

Published on 10 Dec 2024. By Oliver Bray, Senior Partner and David Cran, Partner, Head of IP & Tech

A roundup of key legal developments for the modern commercial lawyer.

EDPB’s new publications on the ePrivacy Directive, processors and legitimate interests

Published on 09 Dec 2024. By Oliver Bray, Senior Partner

What are the key takeaways for organisations processing personal data set out in the recent Guidelines and Opinions adopted by the European Data Protection Board (EDPB)?

ICO Statement on Generative AI Model Training

Published on 09 Dec 2024. By Oliver Bray, Senior Partner

What position does the Information Commissioner’s Office (ICO) continue to take on Generative AI Model training?

ICO reprimands Sky Betting and Gaming for using non-essential cookies without users’ consent

Published on 09 Dec 2024. By Oliver Bray, Senior Partner

What proactive steps should website operators take to ensure that their use of cookies complies with UK data protection law? Put another way, are you sure personal data is not being collected by your website’s advertising cookies before users have consented to their deployment?

Irish DPC fines LinkedIn €310m for behavioural analysis and targeted advertising breaches

Published on 09 Dec 2024. By Oliver Bray, Senior Partner

How certain do data controllers need to be of their lawful basis for processing personal data when engaging in behavioural analysis and targeted advertising, and how clearly must this be reflected in a privacy policy?

DORA Watch - November 2024

Published on 04 Dec 2024. By Jon Bartley, Partner

As financial entities and ICT service providers undergo the final stages of implementation of the Digital Operational Resilience Act (DORA) requirements into their systems and processes, it is imperative to understand the legal developments and ongoing updates arising from EU Member States as they go through their respective transposition and alignment processes. Through TerraLex - our global legal network, which provides us with access to 22,000 lawyers from highly regarded and carefully vetted law firms stretching more than 120 countries – we have collated legal updates focusing on DORA and its implications in EU jurisdictions.

Data Dispatch - November 2024

Published on 28 Nov 2024. By Jon Bartley, Partner and Helen Yost, Senior Associate and Amy Blackburn, Senior Associate and Praveeta Thayalan, Knowledge Lawyer and Kiran Dhoot, Associate

Welcome to the eighth edition of Data Dispatch from the Data Advisory team at RPC. Our aim is to provide you on a regular basis with an easy-to-digest summary of key developments in data protection law.

New Data (Use and Access) Bill

Published on 26 Nov 2024. By Jon Bartley, Partner and Praveeta Thayalan, Knowledge Lawyer

What does the new Data (Use and Access) Bill (the Data Bill) mean for businesses?

Cyber_Bytes Issue 69

Published on 21 Nov 2024. By Richard Breavington, Partner and Daniel Guilfoyle, Partner and Rachel Ford, Partner and Ian Dinning, Senior Associate and Christopher Ashton, Senior Associate and Bethan Griffiths, Senior Associate and Elizabeth Zang, Associate and Emanuele Santella , Associate and Lauren Kerr, Associate

Welcome to Cyber_Bytes, our regular round-up of key developments in cyber, tech and evolving risks.

Navigating a cyber breach

Published on 20 Nov 2024. By Richard Breavington, Partner and Daniel Guilfoyle, Partner and Rachel Ford, Partner

Cyber attacks remain a board-level concern for companies given their ability to disrupt services and unleash serious repercussions on financial, reputational, and operational fronts.

DORA Developments Compilation – October 2024

Published on 15 Nov 2024. By Jon Bartley, Partner and Richard Breavington, Partner

As financial entities and ICT service providers undergo the final stages of implementation of the Digital Operational Resilience Act (DORA) requirements into their systems and processes, it is imperative to understand the legal developments and ongoing updates arising from EU Member States as they go through their respective transposition and alignment processes. Through TerraLex - our global legal network, which provides us with access to 22,000 lawyers from highly regarded and carefully vetted law firms stretching more than 120 countries – we have collated legal updates focusing on DORA and its implications in EU jurisdictions.

Digital operational resilience: the UK regulatory landscape

Published on 15 Nov 2024. By Richard Breavington, Partner

Operational Resilience in the supply chain has become an undeniable priority for all financial service providers across the continent.

Data Dispatch - October 2024

Published on 28 Oct 2024. By Jon Bartley, Partner

Welcome to the seventh edition of Data Dispatch from the Data Advisory team at RPC. Our aim is to provide you on a regular basis with an easy-to-digest summary of key developments in data protection law.

The EU Cyber Resilience Act targets digital components made available in the EU market throughout the entire supply chain of a product

Published on 28 Oct 2024. By Elizabeth Tucker, Associate and Lauren Kerr, Associate

Last month, the EDPB published their "Guidelines on Examples regarding Personal Data Breach Notification" (the Guidelines). These are intended to provide "practice-oriented, case-based" guidance on when it is necessary to notify the relevant supervisory authorities (the SA) under Article 33(1) of the GDPR and/or data subjects under Article 34(1) of the GDPR following a personal data breach.

Snapshots Autumn 2024

Published on 17 Oct 2024. By Oliver Bray, Senior Partner and David Cran, Partner, Head of IP & Tech

A roundup of key legal developments for the modern commercial lawyer.

UK's new AI Cyber Security Code of Practice

Published on 17 Oct 2024. By Oliver Bray, Senior Partner

What is the UK's proposed AI Cyber Security Code of Practice?

EU AI Act into force 1 August 2024

Published on 17 Oct 2024. By Oliver Bray, Senior Partner

The EU AI Act came into force across all 27 EU member states on 1 August 2024. The aim of the legislation is to ensure AI systems used in the EU are safe and transparent.

New Minister for Data Protection Sir Chris Bryant

Published on 17 Oct 2024. By Oliver Bray, Senior Partner

On 8 July 2024, the Government appointed Sir Chris Bryant as the Minister of State for Data Protection and Telecoms (as well as Minister of State for Creative Industries, Arts and Tourism).

Social media and video sharing platforms targeted by ICO over children's privacy practices

Published on 17 Oct 2024. By Oliver Bray, Senior Partner

What must social technology platforms be aware of to ensure they are following the ICO's codes of practice for children's online safety?

Uber hit with €290m fine for transferring European driver data to its US HQ

Published on 17 Oct 2024. By Oliver Bray, Senior Partner

What does the Uber fine signal for international data transfers and the consequences of failing to comply with the EU General Data Protection Regulation (EU GDPR)?

X suspends personal data training of AI chatbot Grok following Irish DPC pressure

Published on 17 Oct 2024. By Oliver Bray, Senior Partner

How are the data regulators addressing the use of personal data when training AI language models?

The UK's new AI Bill

Published on 17 Oct 2024. By Oliver Bray, Senior Partner

The UK's Digital Information and Smart Data Bill

Published on 17 Oct 2024. By Oliver Bray, Senior Partner

What can we expect from the new Digital Information and Smart Data Bill (the DISD Bill)?

Cyber_Bytes Issue 68

Published on 15 Oct 2024. By Richard Breavington, Partner and Daniel Guilfoyle, Partner and Rachel Ford, Partner and Ian Dinning, Senior Associate and Christopher Ashton, Senior Associate and Bethan Griffiths, Senior Associate and Elizabeth Zang, Associate and Emanuele Santella , Associate and Lauren Kerr, Associate

Welcome to Cyber_Bytes, our regular round-up of key developments in cyber, tech and evolving risks.

AI-as-a-Service – Key Issues

Published on 04 Oct 2024. By Praveeta Thayalan, Knowledge Lawyer and Tom James, Associate and Paul Joukador, Partner

Artificial Intelligence-as-a-Service (AIaaS), in the same vein as Software-as-a-Service and Infrastructure-as-a-Service, refers to cloud-based tools that allow businesses to gain access to an AI model hosted by a third party provider.

Procuring AI – Commercial Considerations Checklist

Published on 04 Oct 2024. By Praveeta Thayalan, Knowledge Lawyer and Paul Joukador, Partner

Many companies will no doubt be considering using AI within their business to take advantage of the massive opportunities for increased productivity and cost efficiencies promised.

AI and Privacy – 10 Questions to Ask

Published on 04 Oct 2024. By Jon Bartley, Partner and Praveeta Thayalan, Knowledge Lawyer

We set out in this section 10 key questions to ask yourself at the outset when developing or deploying AI solutions in your business.

Generative AI – Addressing Copyright

Published on 04 Oct 2024. By Ciara Cullen, Partner and Joshy Thomas, Knowledge Lawyer and Emma Dunnill, Senior Associate

When it comes to the interaction of AI and IP rights, bar a flurry of activity surrounding the inevitable outcome by the courts in the Thaler, Dabus case (see here) and the Court of Appeal's ruling on the potential for exclusion from patentability of artificial neural networks in the Emotional Perception case, most attention has been focused on copyright issues. There are three main potentially thorny issues and all have been extensively covered by the mainstream media.

Part 6 – Practical Considerations

Published on 04 Oct 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

AI focussed actors and providers have been focussing on their forthcoming AI obligations and on governance for some time, but it is now prudent for the majority of organisations to assess how their use of AI will come within the scope of regulation in key territories and become familiar with each regime (and devise a means to keep up with the anticipated fast moving changes). Planning for the costs of compliance and for AI governance including systems and procedures for data retention and record keeping should also be part of current business strategy together with building expertise on AI internally and identifying trusted advisors from the "noise" of what is being offered externally.

Part 5 – AI Regulation Globally

Published on 04 Oct 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

On 30 October 2023 the G7 published its international guiding principles on AI, in addition to a voluntary code of conduct for AI developers. The G7 principles are a non-exhaustive list of guiding principles aimed at promoting safe, secure and trustworthy AI and are intended to build on the OECD's AI Principles, adopted back in May 2019.

Part 3 - AI regulation in the US

Published on 04 Oct 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

Back in October 2022, the White House published federal guidance – a Blueprint for an AI Bill of Rights identifying five principles aiming to guide the design, use, and deployment of automated systems. It was designed to operate as a roadmap to protect the public from AI harms and was followed in October 2023 by the US President's Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence. The Executive Order sets out eight "guiding principles and priorities", detailing how those principles and priorities should be put into effect, and reporting requirements

Part 2 - AI regulation in the EU

Published on 04 Oct 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

The EU AI Act, the main elements of which are covered in our previous article, entered into force on 1 August 2024. Most provisions apply from August 2026 but some apply earlier, or later.

Part 1 - UK AI regulation

Published on 04 Oct 2024. By Caroline Tuck, Partner and Joshy Thomas, Knowledge Lawyer and Ricky Cella, Senior Associate

There has been consistent messaging from the UK Conservative-led government that the UK has decided to adopt a light touch approach to regulating AI. This was evident in the AI white paper published in March 2023 which outlined a principles based framework (see ['The Ethics of AI – the Digital Dilemma'] for more information about the principles themselves and see here for additional coverage of the AI white paper). The UK government held a consultation on the AI white paper in 2023 and published a response on 6 February 2024 that adds slightly more flesh to the bones of the UK framework.