Publication
UK Carbon Border Adjustment Mechanism: how will it work?
In February, we reported on the Department of Energy Security and Net Zero’s confirmation that a UK Carbon Border Adjustment Mechanism (CBAM) would be bought into force by 2027
Author:
Publication | April 2017
A new age for data privacy in Australia will begin on 22 February 2018. Recent legislation regarding mandatory data breach notification has two direct consequences on all Australian organisations with an annual turnover exceeding $3 million:
companies will need to inform all third parties affected by an eligible data breach.
firms may be held liable for breaches occurring across their supply chain.
There are many implications for the main guardians and users of vendor and financial data: operations, finance and IT executives alike will need to keep in mind the possibility of class actions in relation to breaches, a million dollar-plus price tag for non-compliance, and a more stringent vendor selection and management process.
PetScience* is an Australian online retailer with a global supply chain. They are a leader in providing accessories for pets, ranging from food supplements to medical devices and toys, with an annual revenue exceeding $150 million. PetScience manages a broad set of vendors, and operates a rewards program for veterinarians across Australia, connecting referrals to generous discounts and other perks.
But what if one of PetScience's IT vendors suffered a data breach, and the information related to the rewards programme, totalling 20,000 email addresses, names and vet practice information, was stolen?
in 2017 PetScience... | in 2018 PetScience... |
---|---|
May not have had to notify impacted individuals. | Might pay between $350,000 and $1.8 million in fines AND notification costs to all impacted individuals in addition to other breach-related costs (crisis management, breach recovery and reputational damage). |
No notice given, therefore no personal complaints, and no legal action. | Might face a class action suit with a hefty price tag over several years. |
Would not have been held liable for the data breach within its supply chain. | Would be held liable for the breach, and face an enquiry over data privacy compliance across its supply chain. Also the IT vendor would be obliged to notify impacted individuals. |
*this is a hypothetical example.
There are practical steps that a business of any size can take to ensure compliance with the new laws, assess its supply chain, and prepare for the eventuality of a breach.
Our privacy practice has put together affordable and comprehensive compliance packages that can help. Click here to find out more.
Publication
In February, we reported on the Department of Energy Security and Net Zero’s confirmation that a UK Carbon Border Adjustment Mechanism (CBAM) would be bought into force by 2027
Publication
International financial markets have started to show significant interest in nature and biodiversity. Whilst climate change and greenhouse gas emissions have made the headlines in recent years, there has been much less focus on their equally important counterparts, nature and biodiversity. However, that has started to change.
Subscribe and stay up to date with the latest legal news, information and events . . .
© Norton Rose Fulbright LLP 2023