Regulation of e-payments in the UAE as businesses cash-in on cash-less solutions

In recent times, we have seen the introduction of the concept of ‘cashless’ ways to pay for goods and services, offering more convenience and security benefits than traditional payment methods. There are e-wallets, retail-based digital reward exchanges, there is direct carrier billing, and there is even the ability to pre-load cash onto mobiles, wristbands and other gadgets to spend later. Getting on board with evolving consumer demands might well be key to giving your business the competitive edge, but if you are using or planning to introduce any of these types of digital or e-payment methods into your business, you would be wise to consider the associated legal and regulatory issues. The nature of the precise activities to be undertaken by your business may mean that you will need Central Bank or other approvals to keep you compliant in the UAE. Continue reading “Regulation of e-payments in the UAE as businesses cash-in on cash-less solutions”

GC 2.0

Do you know your cash-burn phase from your TLDNR? Welcome to the buccaneering, hierarchy-lite world of the fast-growth, tech-driven ‘disruptors’, the kind of business that a growing number of lawyers aspire to work in or advise.

Continue reading “GC 2.0”

Mark Cooper, Cadent Gas

Within a month of Mark Cooper joining National Grid (NG)’s in-house team in 2015, things became very busy very quickly. UK general counsel Rachael Davidson told him that one of the businesses he was looking after – NG’s gas distribution network – was going to be sold off.

Continue reading “Mark Cooper, Cadent Gas”

Taking advantage of group litigation offerings

Corporate clients are of course no strangers to litigation. Listening to in-house counsel talk about how they approach litigation, they will often regard it as an inevitable, if undesirable, by-product of doing business. When it arises out of their core business activity, and particularly for large organisations – banks and insurance companies, for instance – they will frequently regard themselves as sophisticated users of the litigation or arbitration process. In run-of-the-mill cases for which they budget and, where necessary, appropriately reserve, they will typically consider that they and their advisers are well placed to understand and manage the risks. Not all litigation claims of course fall within this category and from time to time businesses will be drawn into one-off disputes, often as defendant, but on those they are likely to have no (or little) choice but to engage.

There is, however, a third category of claims, which are neither run-of-the-mill nor so significant as to be unavoidable, where in-house counsel have a choice whether or not to get involved. Competition damages claims are a good example. A company may have suffered as a result of anti-competitive activity, and may have a good claim, but pursuit of the claim is not a business priority and certainly not one which would justify diverting scarce resources away from core activities. This will be exacerbated where the costs involved may compare unfavourably against the losses suffered by that individual claimant. The natural tendency on the part of in-house counsel in such cases will often be to conserve resources to support business-critical activities and to leave the value of such claims on the table.

This reluctance to invest in realising the value of claims is unsurprising given the way that the cost and value of litigation claims are accounted for. Broadly speaking, companies will treat the costs of litigation as an expense in the year in which it is incurred. This will drive up expenses as the costs are incurred and correspondingly drive down profitability.

At the same time, the company will be unable to reflect the value of unrealised claims in their balance sheet. So, while the company’s cash decreases, the litigation asset in which the company is investing has no corresponding value on the balance sheet. This gives a worst-of-all-worlds outcome while the case is ongoing.

The company takes an ongoing hit to its profitability which will be reflected (possibly many times over) in the company’s share price (if that reflects a methodology referencing profit), while the company’s net assets are reduced by the expenditure without reflecting any value for the asset being realised. Even should the claim conclude successfully (and there is of course no guarantee of that), the revenue is likely to be regarded as a one-off item not included in gross profit and therefore may be stripped out by analysts in their assessment of the company’s underlying profitability for valuation purposes. Any in-house counsel considering allocating resources to pursuing a claim will therefore have to consider whether the future benefit from the claim outweighs the negative impact of tying up cash, the drain on management time and also the drag on the company’s perceived financial performance for the life of the case.

In recent years, however, in the UK, we have seen offerings to corporates which ameliorate these effects through the use of litigation funding and adopting a group approach to litigation. By utilising litigation funding, companies are relieved of the ongoing burden of funding the claim, as well as the risk if the case is unsuccessful. The effect is to tip the balance away from a likelihood of not pursuing the claim towards pursing it providing that the risks are properly addressed. By joining forces with other claimants, companies are able to share the legal costs and funding cost, making the proposition attractive for funding, making the case more robust commercially and therefore protecting the company’s economics.

In the competition space, recent examples include the claims being pursued with funding from Therium by Humphries Kerstetter on behalf of a group of companies, including the Co-op, against Visa and Mastercard for damages relating to the practice of overcharging of merchant interchange fees to merchants. Similarly, Therium is funding the Road Haulage Association in bringing collective proceedings in the Competition Appeal Tribunal on behalf of hauliers and other buyers of trucks against manufacturers who have been fined by the European Commission for fixing prices of certain kinds of trucks over a 14-year period. Such claims are not restricted to the competition space; the recent shareholder claims against The Royal Bank of Scotland, Lloyds Bank and Tesco are also examples of group litigation involving litigation funding and the clients included large institutional investors.

Funded group litigation offerings like these provide corporate clients with alternatives to shouldering the entire burden of litigation alone. As issues emerge in the public domain which are likely to give rise to a claim in which a company is a potential claimant, in-house counsel should now be considering what options are likely to be available to prosecute the claim, whether their interest in the issue is sufficient that they would wish to issue proceedings individually as against the benefits of joining a broader group, and whether to use third-party funding rather than self-funding. It may even be possible to answer the issues of individual versus group claim and funding independently – for instance pursuing the case individually on a funded basis or joining a group but with the company self-funding, bearing its own share of the costs. Whatever the answer in an individual case, it is clear that the emergence of these litigation options is changing the perspective of in-house counsel on accessing the value locked up in the company’s claims and that trend looks set to continue.

Systems v talent – clients will have to choose

From the perspective of a GC at a major multinational, which will be the key external adviser over the next ten years, the legal firm that is top decile at attracting, motivating and retaining the best talent throughout its business? Or the institution that excels at building market-leading systems, processes and technology? Put another way: which approach will provide competitive advantage and dominance over the other camp?
Continue reading “Systems v talent – clients will have to choose”

David Fein, Standard Chartered Bank

As a former senior staffer in the Clinton administration, David Fein has a tendency to chart his career and life against the backdrop of US politics. While working as a state district attorney, it was early in Barack Obama’s second presidential term that Fein found himself getting wistful for a new chapter, one that would see him become general counsel of the FTSE 100 banking group Standard Chartered in his first move in-house. ‘I wanted something new and so I thought something I hadn’t done was be a general counsel.’

Continue reading “David Fein, Standard Chartered Bank”

New money laundering standards – what you need to know

The government enacted the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (the MLR 2017) on 26 June 2017. These are based on the same principles as the pre-existing rules, but contain significant changes which affect how regulated organisations must structure their anti-money laundering (AML) functions and carry out checks.

Continue reading “New money laundering standards – what you need to know”

The shock of the old

The legal implications of new technologies have been making headlines recently, with a group of more than 100 specialists in robotics submitting an open letter to the United Nations urging a ban on the use of machine learning and artificial intelligence in weapon systems. But on the commercial side the change capturing lawyers’ attention is not cutting-edge tech but the creeping maturity of IT systems that have been around for years. As Louise Pentland, general counsel of PayPal, comments: ‘The disruptive trends that are likely to shape business in the coming months are existing technologies becoming more capable.’

One of the best examples of a disruptive trend developing from technology that most businesses are already familiar with is the sudden ubiquity of cloud computing. Although moving business processes to the cloud is technologically passé – remote processing through application service providers (ASPs) has been around for nearly 20 years – internet speeds were, until recently, too slow to allow for anything beyond simple processes to be migrated. Now it is entering the mainstream. In early June 2017 Lloyds Bank finally signed its long-planned outsourcing contract with IBM, a £1.3bn deal that will see a large number of staff, along with core business processes, move over to IBM. Many large organisations are likely to follow.

Kit Burden, global co-head of technology sector at DLA Piper, says the impending mass migration to the cloud will change the way businesses think about the relationship between their core and support processes.

‘Concerns around security and data protection that have traditionally inhibited engagement with the cloud seem to be ebbing, and cloud providers are working out how to handle business-critical processes in a seamless way. We are seeing a demonstrable uptick in both take-up and deal sizes and it is having a very interesting domino effect in the market. The next 12 months will see cloud providers take over large parts of many businesses’ operations and it will lead to a big change in how global organisations operate.’

Baker McKenzie IT partner Harry Small echoes the point. ‘Lawyers like to highlight the dangers surrounding data protection and security in the cloud but for clients the economics are overwhelming and increased use of cloud services is inevitable. Security concerns aside, it is essential to do thorough diligence on a provider before migrating business processes. Cloud contracts tend to be very short term and can be switched off at will, but the danger, from the customer’s point of view, is that it remains difficult to get your data out in a manageable way.’

One result of this move toward outsourcing business-critical processes, says Chris Fowler, GC UK Commercial Legal Services at BT Group, is that in-house teams are increasingly likely to oversee the work themselves. ‘Outsourcing has become such an important part of business efficiency that you have to understand a lot of internal processes to get it right. In-house lawyers are, very generally, expected to know a lot more about outsourcing than previously. Contracts also tend to be shorter in duration and divided between different providers. As a result, managing various providers and making them work together has become more important than understanding the underlying laws.’

That comes as a threat to outside counsel specialising in outsourcing work. Robert Shooter, head of technology, outsourcing and privacy at Fieldfisher, the largest technology and outsourcing team in Europe, comments: ‘We are seeing a lot of the traditional big deals staying in-house now with clients sending only very specialised pieces of an outsourcing or the high-volume, low-cost aspects of it to firms. We see it as an opportunity to ask ourselves what our clients want from their external lawyers.’ Mitigating this loss of revenue, a growing focus on data privacy is leading to a big uptick in work. Fieldfisher has taken on ten new hires in the last 12 months, and Shooter says the firm expects client demand for data protection expertise to remain strong well into 2018.

Lawyers highlight the dangers surrounding data protection in the cloud but for clients the economics are overwhelming.
Harry Small – Baker McKenzie

Indeed, the big trend of the coming 12 months, says Richard Kemp of Kemp IT Law, is that legal aspects of data – from data rights and sovereignty to security and protection – will become even more important to in-house teams. ‘Data protection has gone from one of those slightly geeky areas that you’d occasionally see one or two lawyers specialise in at the larger firms to the in-demand skill that clients are looking for.’

Whose data is it anyway?

Simply taking the UK’s example, it is easy to see why data protection is no longer an afterthought for GCs. Under the 1998 Data Protection Act, the largest fine that the ICO (Information Commissioner’s Office) could levy was £500,000. The largest fine it had ever levied before 2017 was £250,000. That has now changed, and the ICO is becoming more robust. This year alone it has levied two £400,000 fines. But the big change is the General Data Protection Regulation (GDPR), which comes into force across the EU, including the UK, on 25 May 2018 and introduces a maximum fine of 4% of global turnover for data security breaches.

With the growing interest in outsourcing to the cloud, the shadow of GDPR-related fines for misuse of data looms large. ‘Five years ago, most outsourcing contracts allowed for data protection to be an unlimited loss,’ says Burden. ‘Data loss may have been a big worry for customers but it was economically a relatively trivial issue for suppliers. With the ramping up of national data regulators and the introduction of GDPR, the way contracts get scrutinised will fundamentally change.’

Kemp is seeing a similar shift in the way contracts are approached. ‘Trade-offs with security, the kind of indemnity protection the provider gives, and the liability position they are prepared to adopt will change, but the precise outcome is hard to predict at this stage. Cloud services are commoditised, which means there is not sufficient margin for providers to give the type of liability protection a customer would need in the event of misuse.’
rainbow-mac
Not only are the potential losses through fines much larger, but the introduction, under GDPR, of processor liability will also change the dynamics of contracts. As things stand, if a business outsources its customer relationship management system to a provider in the EU, the entity outsourcing its data is the only one liable to be fined (usually not very much). After GDPR takes effect the processor (ie outsourcer) will equally be regulated. As a result, any contract between controller and processor will have a different balance of power.

Of course, any law that restricts businesses’ ability to monetise data will cause friction, and it looks certain that the European principles of data protection and privacy will come into conflict with the tech giants of Silicon Valley. The Trump administration has signalled that it will take a more lenient approach to data protection, which does not bode well in the face of the EU’s increasingly stringent requirements.

Every GC is going to spend a lot of time looking at data protection. There will be a huge wave of work for law firms. Richard Kemp – Kemp IT Law

Ruth Boardman of Bird & Bird notes: ‘When companies come to trade in the EU from other jurisdictions they can find it difficult to get their heads around the fact that we don’t see data as an asset. From their perspective they have sweated blood and tears to generate data and they should be able to monetise it.’

It is likely that battles that have traditionally been fought in the arena of competition law, where fines can reach up to 10% of turnover, will be revisited in data protection cases. However, Kemp takes a more circumspect view of the risks to business. ‘Every GC is going to spend a lot of time looking at data protection before May next year and there will be a huge wave of work for law firms, but I would caution against listening to some of the hype coming from the service supplier community about how challenging it will be to comply. I take a fairly pragmatic view, which is that companies should comply but not over-invest in their compliance strategy. Knowing what to do is as much a project type approach as a legal analysis.’

Rachel Jacobs, GC of Springer Nature, picks up the theme: ‘Increasingly we are facing the sort of regulations that link legal analysis, IT specialists and questions of what the business is trying to achieve. These are no longer regulations that can be approached from a legal silo, though there are fundamentally important legal questions associated with them.’

Machine rights

Away from outsourcing and data protection, a notable trend across the TMT sector – driven by the pace of technological change and poor economic conditions – is the relative lack of litigation. While there have been some major cases in the High Court and the Technology and Construction Court involving technology and communications contracts, Harry Small says these represent only a small fraction of the general disputes in the sector. ‘TMT today is best characterised as contentious but not litigious. The really large amounts of work we get are contracts that have gone wrong but are never going to reach the courts. There is a growing tendency to re-evaluate contracts and enter into structured renegotiation.’

A bigger legal change, says Small, is yet to come. ‘Automated or artificial intelligence will fundamentally change IP law in the sector. A computer programme now does a lot of the work that a human might formerly do, even such things as drafting contracts and credit scoring. The question that arises is twofold: who owns the output and, more particularly, who owns the algorithms and decision processes made by the software?’

UK law has a small provision covering this question, which Small himself helped insert in the Copyright, Designs and Patents Act of 1988. The provision states: ‘In the case of a literary, dramatic, musical or artistic work which is computer-generated, the author shall be taken to be the person by whom the arrangements necessary for the creation of the work are undertaken.’ It is a vague provision, says Small, but one which the EU was not prepared to follow at the time. ‘The harmonisation of copyright law across the EU, quite wrongly in my opinion, took the view that copyright works must have a human author. This is almost certainly a linguistic reflection of the Droit d’auteur or Urheberrecht, but we are in a world that is rapidly moving away from humans as the sole authors of output. When Brexit gives us the freedom to look at our intellectual property laws again, we will have a great opportunity to make laws that reflect the world we live in.’

Such laws may reshape the sector entirely, but in the coming months GCs are more likely to focus on less cutting-edge technologies. As Pentland concludes: ‘It is tempting to say there is nothing new about digital transformation – almost every company has moved to online and digital offerings – but implementing a proper digital transformation strategy means ripping up what you have done previously and doing it all in a different way, enabled through technology. That is doing something new in response to something not quite so new, but that is what being a lawyer in the TMT space is all about. Software licences, open-source and outsourcing were all once at the leading edge of law, but the real question for in-house lawyers comes when they stop being at the leading edge and start to become something that impacts the way your business is structured.’

james.wood@leglaease.co.uk

Firm Focus: AdamsonJones

AdamsonJones provides intellectual property (IP) services encompassing patent, design and trade mark protection and advice in the UK, Europe and throughout the world. The firm works with an expanding list of sophisticated and demanding clients, ranging from innovative start-ups and small and medium enterprises (SMEs) to multinational corporations and internationally renowned universities. AdamsonJones also represents the clients of its overseas associates in proceedings before the UK Intellectual Property Office (UK IPO), the European Patent Office (EPO) and European Union Intellectual Property Office. Continue reading “Firm Focus: AdamsonJones”

Word on the street: advertising, street art and intellectual property

Recently, McDonald’s and other brands have been accused of cultural appropriation, using without permission the work of street artists in advertising campaigns in Europe. These companies will spend many millions on protecting their own brands and for McDonald’s, with a strong tradition in supporting the arts, it should have known better. Continue reading “Word on the street: advertising, street art and intellectual property”

Cyber attacks: the clock’s ticking…

It is the phone call that all in-house lawyers or chief compliance officers may dread. It might be from your IT team, or from law enforcement, reporting that there has been a security breach and that data has been leaked to the dark web; or it might be from a journalist, telling you that they hold confidential information that has been leaked to them; or it may be directly from a hacker making a ransom demand. In the event of a cyber attack, what should you do? Continue reading “Cyber attacks: the clock’s ticking…”