Contributed By Taylor Wessing LLP
The UK is a common-law jurisdiction, primarily built on case law, where the outcomes of previous legal cases set precedents for future cases. The UK courts are arranged in a hierarchy. At the base are Magistrates’ Courts and County Courts, dealing with minor criminal offences and civil matters, respectively. Above these are the Crown Court and High Court, which handle more serious criminal cases and significant civil disputes.
The Court of Appeal sits above these courts, and reviews cases from them to ensure the correct application of law. The Supreme Court is the highest court in the UK; it provides final judgments on points of national importance and clarifies laws that affect everyone.
There are also tribunals that specialise in particular areas, such as employment or immigration. These tribunals make decisions within their specific field, but can be appealed to the higher courts.
While judges create common law, statues passed by the UK Parliament take precedence over all case law. This combination of statute law and common law ensures both a democratic input from Parliament and a detailed interpretation by judges based on precedent.
While the UK does not have a specific foreign investment regime, in 2022 it introduced the National Security and Investments Act 2021 which applies to investors of any country, including UK investors. There is a requirement for a mandatory notification if the target is active in one of 17 key sectors of the economy (and within the definition of those sectors in the Act, clearance must be obtained prior to closing (with substantial fines for non-compliance).
The 17 sectors are as follows:
Notifiable transactions are those where there is an increase in shareholding and voting rights from:
The Act also introduces a voluntary filing if the target is outside the definitions of the 17 key sectors, or is active in any sector but there are national security issues. Since filing is voluntary, there is no obligation to wait for approval before completing. However non-notified transactions that raise national security concerns might be called in for review by the government. Asset deals and IP licensing transactions can be subject to call-in if they raise national security issues and it is possible to notify voluntarily.
The Act has extraterritorial application (therefore, for example, it will apply to acquisitions in the US, Canada, EU, China or any other jurisdictions of non-UK entities that conduct activities in the UK or supply goods and services in the UK, even if they do not have a direct presence there).
Notifications are made to a dedicated government unit, the Investment Security Unit (ISU), through a digital portal. The form to complete is not overly complex and, within a couple of days, the ISU will confirm whether the filing is accepted or if more information is needed. Once the Secretary of State accepts a notification (when it contains all the required information), a review period of 30 working days will start. This could end with a clearance or a call-in for an assessment period of a further 30 working days, at the end of which there can be clearance, clearance with conditions, prohibition, or an extension of 45 working days for further review. With possible suspensions during the assessment period, full national security scrutiny can be estimated to be up to 21 weeks.
Closing a transaction that is subject to mandatory notification without notifying and obtaining clearance carries a heavy fine of up to 5% of the total global turnover of the acquirer, or GBP10 million (whichever is greater), and imprisonment of up to five years, and the transaction becomes void.
The process is not public unless the deal is blocked, or conditions are imposed and a decision issued. The government has accepted commitments in several cases, such as requiring certain capabilities remain in the UK, Chinese walls for sensitive information, and restricted access to sensitive areas, etc.
If a company wishes to challenge certain decisions of the Secretary of State – for example, to approve, block or unwind a transaction – it can apply for a judicial review of the decision.
Judicial review is the mechanism by which the courts review the lawfulness of a decision taken by a public body. An application for judicial review can be brought on the grounds of illegality, procedural unfairness, unreasonableness/irrationality, or for a breach of a right protected by the European Convention of Human Rights.
An application for judicial review must be made “promptly and in any event within three months” of the decision under challenge. However, the NSIA modifies this and an application must be made within 28 days of any decision (extendable in exceptional circumstances).
The three most common types of corporate vehicles in England are:
There are also other corporate vehicles such as companies limited by guarantee, unincorporated associations and charitable incorporated organisations, but these are seen less frequently.
Private Limited Companies (Ltd)
A private limited company in England is typically governed by one or more directors and operates in accordance with its Articles of Association, as prescribed by the Companies Act 2006. The liability of shareholders is limited, meaning that their financial responsibility for company debts does not exceed the unpaid amount on their shares. A private limited company does not have a minimum share capital requirement, though it must always have at least one share in issue and there must always be at least one shareholder. These companies are best suited to small and medium-sized enterprises, and are particularly appropriate for family businesses, startups, or ventures seeking to keep their affairs private from public scrutiny.
Public Limited Companies (PLC)
A public limited company or PLC in England is also governed by the Companies Act 2006 but is subject to an additional regulatory framework which includes the UK Corporate Governance Code, the Listing Rules and the Market Abuse Regulations. The majority of PLCs are listed on a stock exchange, typically the London Stock Exchange or the Alternative Investment Market. A PLC must appoint at least two directors and a qualified company secretary. It is managed by a board of directors and is subject to more stringent regulations than a private limited company. A PLC must have a minimum of two shareholders, and shareholders’ liability is limited to the amount that remains unpaid on the shares they hold. The minimum share capital threshold for a PLC is GBP50,000, with at least 25% of that amount being paid up upon incorporation. This type of entity is suitable for larger ventures looking to attract investment from public markets – being able to raise capital through equity offerings and sell shares to the public offers substantial opportunities for growth and expansion, making it an attractive option for businesses with ambitious scaling plans. Often, companies will start out as private companies limited by shares and eventually become public limited companies, most commonly as a result of either an initial public offering or by being acquired by a public company.
Limited Liability Partnerships (LLP)
An LLP is a type of corporate vehicle that merges the flexibility of a partnership with the benefits of limited liability for its members. The governance structure of an LLP is administered directly by its partners, usually pursuant to an LLP agreement, which sets out each partner’s responsibilities, obligations, and share of profits. Unlike traditional companies, LLPs are not required to hold annual general meetings or file their accounts. Members of an LLP enjoy limited liability protection – their personal exposure for the debts incurred by the LLP does not extend beyond their individual investments into the partnership unless they engage in wrongdoing or personal negligence. There are no statutory rules regarding minimum capital contributions in an LLP, but an LLP must always have at least two members. In England, LLPs are particularly favoured by professional services firms, including law practices and accountancies.
The steps and timing for incorporation of entities in the UK depend on the type of entity that has been chosen. All private limited companies, PLCs and LLPs must be registered at Companies House, England’s registrar of Companies that operates under the Companies Act 2006. Online registration with Companies House is typically processed within 24 hours, while postal applications may take 8-10 days. The information required for each is as follows.
Limited Companies (Ltd)
Public Limited Company (PLC)
Limited Liability Partnerships (LLP)
Companies in England are subject to various ongoing reporting and disclosure obligations which aim to ensure transparency and accountability.
Private limited companies, PLCs and LLPS are required to inform Companies House about any changes in directors or secretaries, amendments to articles, changes in beneficial ownership and certain resolutions of the shareholders. These filings must be made with Companies House within certain deadlines, often 14-30 days from the relevant event or change. Private limited companies and PLCs also need to file annual financial statements and annual confirmation statements. Financial statements should reflect an accurate financial position of the company and be filed within nine months of the end of their accounting reference period for small companies, or within 12 months for other private companies. Confirmation statements must be filed on a yearly basis to confirm that all information about the business held by Companies House is current and correct, including details on management, share capital, shareholders, and the PSC register.
For PLCs, there are a number of further reporting and disclosure requirements that are set out by the market regulators.
If companies fail to comply with their ongoing reporting and disclosure obligations, various penalties and consequences may apply.
In the UK, entities are typically organised under a one-tier system, meaning that there is a single board of directors responsible for both the strategic direction as well as the day-to-day management of the Company. The board of directors is usually made up of both executive and non-executive directors – executive directors are responsible for the daily operations of the company and the non-executive directors bring an independent perspective and oversee the performance of the executive directors. A one-tier system is designed to streamline decision-making processes by combining oversight with active management within a single body.
Directors and officers of both public and private companies have fiduciary duties towards the company which include, among others, acting within their powers, promoting the success of the company for its members’ benefit, exercising independent judgment and reasonable care, skill and diligence and avoiding conflicts of interest. The main rules that govern the liabilities of directors in the UK are set out in the Companies Act 2006. If directors breach their fiduciary duties, they could face civil proceedings. In some cases, criminal liability may arise under the aforementioned Act, for example for fraud or wrongful trading. There are certain other rules and regulations that may govern a company, depending on whether it is public or listed on a stock exchange, for example, the Market Abuse Regulations or the Listing Rules, although the key rules are those set out under the Companies Act 2006.
The principle known as “piercing (or lifting) the corporate veil” exists in English law, and refers to a situation where a court sets aside the separate legal personality of a company. Typically, a company is seen as a distinct entity from its shareholders, although the court may decide to pierce this “veil”. This principle is applied very narrowly by courts only in exceptional circumstances where the company has been used as a vehicle for fraud or improper conduct, or where the individuals behind a company have abused the corporate structure to shield themselves from liability or to perpetrate wrongdoing. Piercing the corporate veil is an exceptional remedy applied by the courts and is not used often – case law provides that it can only be justified when the more conventional remedies are all seen to be inadequate.
The legal rules governing the employment relationship are multifaceted, and can be categorised as follows.
Statutory Law
This comprises legislation enacted by Parliament which sets out various rights and obligations for employers and employees. Key statutes include the Employment Rights Act 1996, the Equality Act 2010, and the Health and Safety at Work etc. Act 1974, among others. The following laws, depending on the stage of employment in question, are of particular note:
Other Sources of Law and Regulation
In addition to the above-mentioned statutes, the following are also important sources of legal rules that govern employment relatoionships:
An employment contract between an employee and employer is a legally binding agreement. An employee has the right to a “written statement of employment particulars” in accordance with Section 1 of the Employment Rights Act 1996. A Section 1 statement sets out the main terms of employment, and there is a list of mandatory terms that must be given to every employee.
An employer will be treated as having met its obligations to provide a Section 1 statement where it gives an employee a written contract containing information satisfying the employer’s Section 1 obligations and the document is provided no later than the beginning of employment.
The characteristics of a typical employment contract include:
In the UK, the regulation of working hours for workers (which includes employees) is governed by the Working Time Regulations 1998 (as amended). Key aspects of these regulations include the following.
The following conditions apply for termination of employment.
In the case of redundancies, the following process must be followed.
The following rules apply for collective consultation.
The following rules apply with respect to grievances and disciplinary hearings.
Rules apply with respect to TUPE (Transfer of Undertakings (Protection of Employment)) as follows.
Applicable ICE Regulations (Information and Consultation of Employees) are as follows.
Employees are subject to income tax on earnings from their employment, which is charged at progressive rates of 20%, 40% and 45%. UK-resident individuals are generally taxable on their worldwide income; non-UK residents are taxed only on earnings in respect of duties performed in the UK, subject to any relief available under double tax treaties. Individuals who become UK residents after at least three years of non-residence may be entitled to claim “overseas workday relief”, whereby earnings from duties performed outside the UK will be taxable only if and when remitted to the UK (the so-called “remittance basis of taxation”). Overseas workday relief is available for up to three tax years; thereafter, individuals who are resident but not domiciled in the UK may be able to claim the remittance basis of taxation in respect of earnings from an employment carried on wholly outside the UK. At the time of this publication (July 2024), there is a strong possibility that the remittance basis will be replaced with a new regime for temporary residents, the scope of which has yet to be confirmed.
Employers with a presence in the UK are generally required to withhold tax from payments to employees, and to account for it to HM Revenue & Customs through the Pay As You Earn (PAYE) system.
Special rules apply to tax benefits in kind and earnings from employment-related securities (including share options).
National insurance contributions (ie, social security contributions) are charged on employees who are present in the UK. These are currently charged at a rate of 8% up to the “upper earnings limit” (currently GBP967 per week) and 2% above that threshold. The employer is liable for secondary contributions at a rate of 13.8%. Employer contributions apply to benefits in kind, and both employer and employee contributions may apply to benefits from employment-related securities that are readily convertible assets. The employer is required to account for national insurance contributions through the PAYE system.
A company that is resident in the UK is chargeable to corporation tax on its worldwide profits. A non-resident company is chargeable to corporation tax on profits of a trade carried on in the UK through a permanent establishment in the UK, as well as from profits of a UK property business and any profits from a trade of dealing in or developing UK land. A residual charge to income tax applies to the profits of a trade carried on in the UK other than through a permanent establishment – in practice, this only applies to companies that are not resident in territories with which the UK has a tax treaty.
The UK has implemented the Pillar 2 Income Inclusion Rule for accounting periods commencing on or after 31 December 2023, known as multinational top-up tax. It has also introduced a qualifying domestic top-up tax from the same date. It is expected to legislate to introduce the undertaxed profits rule with effect from 31 December 2024.
The UK imposes withholding tax on UK-source interest, royalties and certain other payments of a recurrent nature (“annual payments”) at a rate of 20%. There is no withholding tax on dividends, except dividends paid by companies within the real estate investment-trust regime. Withholding tax liabilities may be reduced or eliminated under the UK’s double tax treaties, and certain additional reliefs apply under domestic law with respect to withholding tax on interest.
Companies with a UK establishment are obliged to register for VAT and to charge VAT on taxable supplies of goods and services if the value of its taxable supplies exceeds the VAT registration threshold (currently GBP90,000). Non-established persons are liable to register if they make any taxable supplies in the UK.
The UK offers an “above the line” credit for expenditure on research and development, which was subject to significant reform with effect from 1 April 2024. The amount of the credit is 20% of the qualifying expenditure, which is itself subject to corporation tax in the hands of the recipient, subject to a cap in many cases at three times the amount of the company’s PAYE and NIC liabilities for the accounting period plus GBP20,000.
The former super-deduction regime for small and medium-sized enterprises (SMEs) has been retained for loss-making, R&D intensive SMEs. This provides an enhanced 186% deduction for qualifying R&D expenditure, which may be surrendered in exchange for a repayable tax credit amounting to 14.5% of the surrenderable loss.
A number of similar reliefs are available for companies in the creative sector.
An elective patent box regime applies for profits from qualifying patents, resulting in an effective tax rate of 10% on qualifying profits.
The UK does not have a consolidation regime for corporation tax purposes. However, the group relief rules enable companies that are members of the same group to make and surrender losses to one another. Broadly, companies are members of the same group for this purpose if one is a 75% subsidiary of the other, or both are 75% subsidiaries of a third company (which need not be a UK company). Both current and carried-forward losses arising on or after 1 April 2017 may be subject to group relief surrenders.
The transfer of capital assets (including intangible fixed assets and loan relationships) between group companies will generally be viewed for tax purposes as taking place on a no-gain/no-loss basis, although the gain that would otherwise have been taxable on the intra-group transfer may be brought back into charge by way of a “degrouping charge” if the transferee company leaves the group within the next six years. A company that disposes of an asset outside the group may elect for the gain to be reallocated to another group company (such as a company which has losses that can be used to offset the gain).
For VAT purposes, companies may elect to register as a group where one controls the other or the two companies are under common control (including control by an individual or partnership). The effect of group registration is that all supplies to third parties are treated for VAT purposes by the representative member of the group, all supplies between group members are disregarded, and all group members are jointly and severally liable for the group’s VAT liabilities.
The UK polices thin capitalisation through transfer-pricing legislation. Interest expense in excess of an arm’s length amount may be disallowed for tax purposes. The transfer pricing legislation provides that it should be read in line with the 2022 OECD Transfer Pricing Guidelines, which include the guidance on financial transactions approved in 2020. The capacity of companies within a group to bear interest expense is generally tested on a company-by-company basis, but, to the extent that a debtor company is unable to do so, other group companies can be treated as guarantors and, as such, may take interest deductions for such interest expense. HMRC will consider entering advance thin-capitalisation agreements to provide certainty as to a company’s interest deductibility position – these have statutory force as advance pricing agreements.
In addition, the UK has introduced a corporate-interest restriction limiting interest deductions for UK group companies to the lower of 30% of tax EBITDA and the worldwide group’s interest expense, subject to a GBP2 million de minimis. Where the worldwide group has an interest – ie, an EBITDA ratio that is higher than 30% – the UK companies may make a “group ratio election”, allowing it to claim interest deductions up to an equivalent ratio. Disallowed deductions may be carried forward indefinitely and utilised in future periods; unused allowances with respect to the interest:EBITDA ratio may be carried forward for up to five years, and unused allowances with respect to the worldwide interest expense may be carried forward for one year.
The UK has transfer pricing rules which align with – and are to be interpreted in accordance with – the OECD transfer-pricing guidelines. These apply to domestic UK-to-UK arrangements, as well as cross-border provisions, but the government has recently consulted on introducing an exemption for transactions between UK companies where no UK tax is at stake.
An exemption applies where the UK company is dormant. In addition, small and medium-sized enterprises are exempt from transfer-pricing rules with respect to transactions with residents of the UK and of territories with which the UK has a full tax treaty. HMRC may, however, issue a transfer pricing notice to “turn on” the transfer pricing rules to a medium-sized enterprise in any circumstances, or to a small enterprise where a transaction results in profits benefiting from the patent box regime.
The UK has numerous anti-avoidance rules, many of which operate to disregard or re-characterise arrangements whose main purpose, or one of whose main purposes, is the obtaining of a tax advantage. Since 2013, the UK has also had a general anti-abuse rule, which can counteract arrangements giving rise to a tax advantage where they are “abusive” – defined as arrangements which cannot reasonably be regarded as a reasonable course of action in relation to the relevant legislative provisions. The courts have also established that legislation must be read purposively and applied to the facts as viewed realistically – principles which have frequently been applied to counteract perceived avoidance.
The UK’s merger-control regime is overseen by the Competition and Markets Authority (CMA), which will have jurisdiction to review a transaction where a relevant merger situation has been created. This will be the case where two or more enterprises cease to be distinct and either:
The UK has a voluntary notification system, so even where either of the thresholds is met, the parties are not required to seek clearance before completion of the transaction.
The rules are triggered when enterprises cease to be distinct – ie, brought under common ownership or control. This covers any joint venture or acquisition of shares that give total or partial control over any other entity.
The parties will need to determine whether to notify to the CMA for clearance. If they choose to do so, the following steps must take place.
If the parties choose not to notify for clearance, the CMA has up to four months from the later of completion of a non-notified merger or from when the transaction became public to investigate. While considering whether to investigate an anticipated completed transaction, the CMA may make an initial enforcement order to prevent pre-emptive integration of the businesses or require the reversal of any action. This means that the parties are unable to begin to integrate the businesses until the CMA’s investigation is complete (and clearance obtained) or the CMA confirms that it does not have jurisdiction.
If the CMA decides to consider a non-notified transaction, it will send the acquiring party an Enquiry Letter requiring it to respond with details of whether one or both of the jurisdictional thresholds are met and, if so, further substantial details relating to the transaction. If the thresholds are met, the CMA may decide to open a merger investigation, and begin the process as set out above.
Chapter 1 of the Competition Act 1998 prohibits agreements between undertakings, decisions by associations of undertakings, and concerted practices that may affect trade within the UK and have as their object or effect the prevention, restriction, or distortion of competition. All agreements that infringe Chapter 1 are void.
A non-exhaustive list of prohibited behaviour, as set out in s2(2) of the Act, comprises the following:
Certain agreements may be exempt from the prohibition if they contribute to improving production or distribution, or promoting technical or economic progress, while allowing consumers a fair share of the resulting benefits. However, these agreements must not:
If an agreement is investigated, the CMA can impose fines on undertakings that violate the prohibition of up to a maximum of 10% of their worldwide turnover.
Chapter 2 of the Competition Act 1998 prohibits any conduct by one or more undertakings that amounts to the abuse of a dominant position in a market within the UK or a part of it is prohibited if it may affect trade within the UK.
An undertaking is considered dominant if it can act independently of competitive pressures, such as setting prices, controlling supply, or hindering competitors’ ability to operate in the market. There is a rebuttable presumption of dominance if an undertaking has more than a 50% share of the relevant market and CMA guidance confirms that less than a 40% share is unlikely to create dominance.
Examples of abuse are set out in Section 18(2) of the Act and include the following:
If it can be shown that the behaviour is objectively justified, it will not be abusive even if competition is restricted. It is for the dominant undertaking to prove the justification.
If conduct is investigated, the CMA can impose fines on dominant undertakings of up to a maximum of 10% of their worldwide turnover.
Patents are exclusivity rights that protect products and processes of a technical nature. The subject matter of protection must be novel, inventive and satisfy several other statutory requirements for the patent to be valid. Patents last 20 years, but protection may be extended in the case of a medicinal product by up to a further five years by a supplementary protection certificate. Patents are normally registered in national patent offices once granted, but the new Unitary Patent (which has pan-European protection for 18 countries rather than a single country) is registered at the European Patent Office. Depending on the nature of the patent, it may be enforced in infringement proceedings in the national courts or the Unified Patent Court. Remedies for infringement typically include damages and injunction.
Broadly, a trademark is any sign capable of distinguishing the goods and services of one undertaking from those of others. A trademark can consist of, for example, words (including personal, business and brand names), logos, patterns, letters, numerals, colours, sounds, motions, holograms, videos, and the shape of goods or their packaging. Provided they are not cancelled, trademark registrations subsist for ten years from the date of registration, and can be renewed (potentially indefinitely) for successive periods of ten years on payment of a fee. No proof of use is required for renewal. Trademark protection can be obtained by filing an application with (a) the UK IP Office, or (b) WIPO for an international mark designating the UK. The latter can be cheaper and administratively easier if applications for the same mark are being filed in numerous jurisdictions. Trademarks must be registered for specific goods and/or services.
Protection for one good/service will not necessarily mean that the owner can prevent third-party use of the same mark for other goods/services. Unlike some other jurisdictions, a trademark does not need to have been used for an application to be filed. However, once registered, if a mark is not put to genuine use for a continuous period of five years in the UK, it can be revoked on application of a third party (subject to various conditions).
Once filed, applications are examined to determine whether they meet the definition of a registrable trademark. Following successful examination, applications are published to allow oppositions to be filed by any third parties who consider they have a conflicting prior right. The UK IP Office will not raise an objection on these grounds of its own volition. Assuming any objections and oppositions are successfully resolved, an application will be registered (usually within about five months). Now that the UK is no longer part of the EU, EU trademarks (EUTMs) no longer cover the UK. However, the UK legislated to fill the gap by creating a new UK mark (called a comparable trade mark) for all EUTMs in existence as at 31 December 2020.
The UK law of passing off also protects the goodwill generated through the use of a trademark (whether that mark is registered or not). It can also be used to prevent false endorsements and some misleading claims of equivalence.
Trademark and passing-off rights are enforced through the UK courts. Remedies for infringement include compensation, an injunction to restrain the infringement, delivery up/destruction of infringing materials, publication of the judgement and legal costs. Interim injunctions can also be obtained.
Brand owners are strongly advised to (a) conduct clearance searches before launching new brands in the UK to check that they will not be infringing anyone else’s rights, and (b) file trademark applications before announcing/launching new brands. This could save the considerable costs and embarrassment of having to re-brand.
There are two main types of design protection available in the UK, a registered design and an unregistered design. Both protect the appearance of a product or its packaging, resulting from their features (including features resulting from the lines, contours, colours, shape, texture and/or materials of the product/packaging). Surface decoration is also protected.
To be protected, a design must be new and have individual character, and not be dictated by the technical function of the product.
A design registration lasts for a maximum of 25 years and must be renewed every five years (on payment of a fee). Unregistered design protection subsists for three years from first disclosure. Registered protection is much stronger (in particular, unregistered designs are only infringed when copied). If registration is required, an application must be filed within 12 months of first disclosure of the design, otherwise the design will be deemed not new.
Registered protection can be obtained by filing an application with (a) the UK IP Office or (b) WIPO for an international design designating the UK. The latter can be cheaper and administratively easier if applications for the same design(s) are being filed in numerous jurisdictions. There is very little examination of design applications, and no opposition procedure. Multiple designs can be filed in the same application to save costs.
Since the UK is no longer part of the EU, pan-EU Registered and Unregistered Community Designs no longer cover the UK. However, any such designs in existence on 31 December 2020 continue to be protected in the UK for the life of the right.
Designs are enforced through the courts in the UK. Remedies for infringement include compensation, an injunction to restrain the infringement, delivery up/destruction of infringing materials, publication of the judgement and legal costs. Interim injunctions can also be obtained.
The UK also protects another form of unregistered design (called a “design right”). It is similar in scope to the unregistered design, although there are key differences – for example, a design right does not protect surface decoration.
Copyright protects original literary, dramatic, musical and artistic works, as well as other subject matter (such as sound recordings, films and broadcasts). It therefore protects original drawings, graphics, software code, literature, and databases. Copyright generally lasts for the life of the author plus 70 years. Different rules apply to computer-generated works, films, sound recordings, broadcasts and non-UK works/authors. It is not possible to register copyright in the UK. Protection arises automatically once a work is recorded, in writing or otherwise (irrespective of whether it is recorded by or with the permission of the author).
The general rule is that the author of a literary, dramatic, musical or artistic work is automatically the first owner of copyright in it. However, where such a work is made by an employee in the course of their employment, their employer is the first owner of copyright. Ensuring that any works created by independent contractors, outside consultants and design agencies are automatically transferred to a business is key.
Copyright is enforced through the UK courts. Remedies for infringement include compensation, an injunction to restrain the infringement, delivery up/destruction of infringing materials, publication of the judgement and legal costs. Interim injunctions can also be obtained.
Copyright can be infringed in a number of ways, including by copying the whole or a substantial part of a work in which copyright subsists (with a substantial part being assessed qualitatively rather than quantitatively). Using even very small parts of a work can constitute infringement, but there are some “permitted uses”.
Copyright can subsist in original software text/code. Databases are protected under the law of copyright if they are original – ie, if, by means of the selection or arrangement of the contents of the database, the database constitutes “the author’s own intellectual creation”.
A separate right, called the database right, also protects databases for which there has been a “substantial investment” in “obtaining, verifying or presenting the contents of the database”. Unlike copyright, there is no requirement for originality/creativity. “Investment” can mean “any investment whether in financial, human or technical resources.” Like copyright, the database right is an automatic right that exist as soon as the database is fixed in recorded form.
Trade secrets protect certain commercially sensitive and confidential information, such as industrial processes and recipes, against disclosure to or use by third parties without consent. These may be enforced against breach resulting in damages and injunction.
The UK General Data Protection Regulation (UK GDPR) is the main legislation governing the processing of personal data. It is retained in EU law and largely mirrors the EU General Data Protection Regulation 2016. It introduces a range of obligations on those processing personal data and confers rights on individuals in relation to their personal data. The Data Protection Act 2018 (DPA) supplements the UK GDPR (including where the UK was given discretion as to its implementation). It also implements the EU Law Enforcement Directive and covers the processing of personal data by the UK intelligence services. The Privacy and Electronic Communications Regulations 2003 as amended (PECR), based on the EU’s ePrivacy Directive, set out additional rules governing privacy of communications. In particular, they cover direct marketing and the use of cookies and similar technologies.
The Network and Information Systems Regulations 2018 (NIS Regulations) implement the EU’s Network and Information Security Directive 2016. They cover the security of IT systems and impose various cyber security and incident reporting obligations on relevant digital service providers and operators of essential services in designated sectors.
The Product Security and Telecommunications Infrastructure Act 2022 deals with security of consumer connected products. Together with related secondary legislation, it imposes security requirements throughout the supply chain.
A variety of other sector-specific cyber security laws may also be relevant.
Most of these laws have extra territorial effect and will apply to businesses operating in the UK, targeting or supplying to the UK, or processing the personal data of UK individuals, regardless of the organisation’s location. The UK GDPR, for example, applies to any organisation processing the personal data of UK individuals where the processing relates to offering them goods or services, or to monitoring their behaviour. It applies to the processing of personal data by a controller or processor in the context of an establishment located in the UK, regardless of where the processing takes place. Note that there are strict rules around the export of personal data from the UK.
The Information Commissioner’s Office (ICO) is the agency in charge of enforcing data protection and cyber security rules, and also produces guidance and codes of practice (notably the Children’s Code which overs processing of children’s personal data by online services). The ICO has various powers. Under the UK GDPR, for example, the ICO has a range of enforcement powers, including the imposition of fines of up to the higher of GBP17.5 million or 4% of annual global turnover for non-compliance. Data controllers are required to pay annual fees to the ICO of between GBP40 and GBP2,900 depending on their size and subject to minor exceptions.
The UK is planning to review its design laws in 2024/25.
The Data Protection and Digital Information Bill was entering the final stages of the legislative process when the general election was called. It was intended to reform the UK’s data protection framework, but its future is currently uncertain. There is also talk of reforming the NIS Regulations and PECR, but legislation has not been published.
5 New Street Square
London
EC4A 3TW
+44 20 7300 7000
+44 20 7300 7100
london@taylorwessing.com www.taylorwessing.com