Skip to main content

Making sure the work environment is safe

It can be difficult enough trying to get through hazardous weather conditions to reach work on time, but what if when you get there the office is only marginally warmer than the outside temperature?

Here’s a quick guide to your employer’s obligations when it comes to creating and maintaining a safe working environment during cold weather.

Despite what a lot of people think, there is no actual legal ‘minimum’ required temperature for a working environment. This is because businesses such as refrigeration storage and chilled food warehouses or factories would instantly contravene the law. There is, however, a guideline range of between 13°C (if the work involves ‘rigorous physical effort’) to 16°C. The guidelines are laid out in the Workplace (Health, Safety and Welfare) Regulations 1992, Regulation 7, which states ‘During working hours, the temperature in all workplaces inside buildings shall be reasonable.’ Obviously, the definition of ‘reasonable’ is open to interpretation, and this could cause a problem if you feel the workplace environment is too cold.

It is worth bearing in mind, too, that the regulations only apply to employees. So, if a member of the public visiting a shopping centre feels that the temperature is too cold, then the only real option they have is to put an extra jumper on!

Slippery surfaces

An employer’s duty of care doesn’t just include the inside of a workplace building, but the paths and parking outside. It is down to an employer to make sure that paths are salted during icy conditions, and that snow or standing water is cleared. As the council won’t carry out gritting or salting on private land (only the public footpaths or roads will be covered by the council services), employers may need to either hire in contractors to deal with icy conditions or carry out precautions themselves.

If an employer doesn’t ensure that icy paths are salted and an employee slips on the ice, injuring themselves, that could result in an injury at work compensation claim. If the employer doesn’t have adequate public liability cover, that slip could be very costly indeed.

Personal Protective Equipment (PPE) – wrapping up warm

For employers who have teams or workers operating outside or in cold interiors such as refrigeration warehouses, there is a legal obligation to provide adequate PPE. This would include everything from gloves and boots to high-viz jackets, thermal layers and eye protection. If an employer fails to provide adequate PPE, then employees can talk to a legal or union representative and encourage the employer to ensure their health and well-being are catered for.

Can I refuse to work if it is too cold?

If the temperature drops below 13°C then technically you could be allowed to refuse to continue working, but the law is very grey as to whether you would be entitled to paid leave under those circumstances. The first thing to do is to inform your boss or union representative that conditions are falling below the minimum standards expected of a healthy and safe working environment and to try to resolve the situation amicably. It could simply be a matter of asking them to turn up the heating thermostat a couple of degrees.

If they continue to refuse, then you may have grounds for further action. If you feel that your health is being compromised by a consistently cold working environment and that your employer has not taken steps to fulfil their duty of care, then talk to a solicitor who will be able to advise you on what action to take next.

A working environment that is too cold doesn’t encourage productivity and can put workers at risk of health issues. It is up to the employer to make sure they are creating a safe, comfortable workplace. Not only is it part of their duty of care, but it is in their best interests to have a warm, productive workforce who are comfortable in their environment.

Speak to Vinay Verma today about the use of PPE and other Health and Safety necessities.

Note: This article is not legal advice; it provides information of general interest about current legal issues.


Businesses face bigger penalties on data leaks

The case involved an online leak of payroll data by Andrew Skelton, a disgruntled ex-employee of the supermarket chain Morrisons. Skelton received an eight-year conviction for offences under the Computer Misuse Act 1990 and the Data Protection Act 1998. However, over 5,000 current and ex-employees later joined together to bring a claim against the company itself, with the court finding Morrisons liable for the actions of its former member of staff.

The data included the salary and bank details of some 100,000 staff, and the ruling, which is the first data leak class action in the UK, allows those affected to claim compensation for the “upset and distress” caused.

Although Morrisons has said it will appeal, experts predict that the vicarious liability judgement will make General Data Protection Regulation (GDPR) compliance even more pressing for employers and suppliers of contract labour where data processing is involved.

“This judgement is of huge importance, because Morrisons was held liable for the criminal misuse of third party data by an employee based on the principles of vicarious liability. The impact extends beyond the claims for compensation from employees, it’s also the impact on reputation and the financial and physical resources involved in dealing with the data breach. Reportedly, Morrisons spent more than £2m in responding to the misuse,”

Explains corporate lawyer Veronica Hartley.

“Data breach is a growing worry for a business, whether relating to employees or customers, and it is set to be even higher on the agenda in the new environment of GDPR post-May 2018.”

Bringing in a tough new era in EU-wide data protection law, the GDPR will replace the UK’s 1998 Data Protection Act with new powers for data regulators and much stricter operating boundaries for businesses that process personally identifiable information about individuals.

One of the key new requirements under GDPR is the accountability principle which requires businesses (data controllers) to demonstrate compliance by showing the regulator (in the UK, the Information Commissioner’s Office – the ICO) and individuals how they comply with these new obligations.

The aim is to harmonise data protection across all EU member states by making it simpler for everyone, including non-European companies, to comply. Still, it brings greater responsibilities for data controllers and data processors and big penalties of up to 4% of worldwide turnover or €20 million (whichever is greater) for non-compliance.

The biggest change is that the GDPR applies to any business processing personally identifiable information about EU citizens. Any UK business trading with EU citizens before or after Brexit will be affected, as will anyone who transfers personal data from the EU to the UK for processing or storage.

“The Government has said that GDPR compliance will be the minimum standard in UK law post-Brexit, to enable UK companies to do business across Europe. Anyone who hasn’t already embarked upon the GDPR journey needs to do so as a matter of urgency, as every business and organisation is affected, no matter their size, and must be able to demonstrate they are complying, not just dealing with problems after they occur. While it’s likely that most will need some specialist expertise on the legal technicalities and IT processes, as a starting point there is some excellent preparatory guidance on the ICO’s website.”

GDPR provides stronger protection for individuals in terms of consent. In place of the previous ‘opt out’ approach, organisations must secure positive consent from individuals for their data to be collected. The consent can be withdrawn at any time, as individuals have ‘the right to be forgotten’ and can also transfer their data elsewhere if they choose. Where data is to be processed for a purpose beyond that for which it was originally collected, there will need to be fresh consent. There are strict rules around data relating to children under 16 and requirements for parental consent.

The organisation will also have to provide more information about how data will be used and how long it will be kept, as data must not be held for any longer than necessary. If data will be stored outside the EEA, details must be provided, including what safeguards will be in place.

There is a distinction between controllers and processors of data. The controller determines the process and means of processing personal data, where a processor acts on behalf of the controller. However, each has obligations in case of a breach or lack of compliance. For an organisation that subcontracts its processing, there is a high duty of care imposed in selecting their data processing provider, with procurement processes to be followed and regular ongoing reviews once appointed.

Under GDPR, there will be a statutory obligation to notify the regulator – the ICO in the UK – of any breach if an individual’s personally identifiable information is at risk as a result. Penalties can range up to a maximum of €20m, or 4% of total worldwide turnover for businesses, for serious contraventions.

To avoid penalties, speak to data protection specialist Veronica Hartley today.

Note: This is not legal advice; it provides information of general interest about current legal issues.


Lessons for business from the #metoo headlines

The initial revelations about the Hollywood mogul inspired many others to take the arguably brave step to share their experiences of sexual abuse and harassment; millions of posts and tweets using the hashtag #metoo have been posted to social media.

That response was also reflected in figures from a ComRes poll on behalf of the BBC, which showed that more than half of all British women and a fifth of all men had experienced some form of sexual harassment in their place of work or study.

Such harassment comes in many forms but includes any unwelcome sexual advances, whether by touching, standing too close, asking for sexual favours, or displaying offensive materials. Employees are protected in the workplace by the Equality Act 2010, which makes it unlawful for an employer to allow any job applicant or employee to be subject to any harassment related to sex or of a sexual nature.

The research commissioned by the BBC showed that many who had suffered sexual harassment at work could not face the process of reporting an incident. Of those who said they had been harassed, 63% of women and 79% of men said they did not report it to anyone.

Employment lawyer Karen Cole said:

“Many employees will not report incidents because they’re embarrassed or ashamed, or may feel they will not be believed, as it is usually one person’s word against another. Any complaint must be brought within three months and the individual must be prepared to prove the conduct was ‘unwanted’.

This makes it difficult, as there are often circumstances where those being harassed may feel a passive position is the safest way to handle the situation, so the other party may argue it was mutual. Similarly, different people may have different ideas of what is acceptable; someone might think it’s ok to make racy jokes or engage flirtatious behaviour, where the other may find it offensive or humiliating.”

Resources published by the Equality and Human Rights Commission and conciliation service, ACAS, recommend that every business has a written policy setting out how harassment at work is unlawful and making sure all staff understand that such behaviour will not be tolerated and may be treated as a disciplinary offence. Examples of what constitutes unacceptable behaviour may help people understand the boundaries, particularly if they are relying on what may have seemed acceptable in previous years, together with guidance to staff on how to respond and deal with such behaviour. Then, most importantly, a clear process for the organisation’s steps if anyone feels they have been subject to any form of harassment, including a safe environment for reporting and handling any complaints.

Karen added:

“However large or small the company, top of the agenda should be a focus on the best possible attitude towards equality and diversity in the workplace. With research such as the BBC’s showing that it is usually a junior member of staff experiencing the harassment, management should lead the way in demonstrating that everyone, from the top down, has zero tolerance to inappropriate behaviour. Staff should be confident they can report any concerns, knowing they will be heard in a supportive, positive way.”

For further information on any harassment issue or, indeed, any other employment issue, call Karen Cole.

Note: This is not legal advice; it provides information of general interest about current legal issues.


Landlords: Securing possession of a dwelling house

A residential occupier is defined as “a person occupying the premises as a residence, whether under a contract or by virtue of any enactment or rule of law giving him the right to remain in occupation or restricting the right of any other person to recover possession of the premises”. Section 1 of the PFE only applies to those who have occupied the premises under a tenancy or a licence and not to trespassers.

There are various types of residential tenancies regulated by statute, which can only be brought to an end in a particular way. The more common examples are:

  • an assured tenancy
  • an assured shorthold tenancy (an AST)
  • a Rent Act tenancy

Assuming the appropriate notices have been given consequent upon which proceedings are issued leading to orders granting possession if the occupier does not give up possession in accordance with the terms of the Court Order, the Landlord will need to consider its next step.

To enforce an Order for possession, the Landlord must apply for a warrant or writ of possession. For speed, Landlords often apply to transfer Possession Orders made in the County Court to the High Court because an eviction can usually be carried out more quickly by a High Court Enforcement Officer. It is prudent to ask for a transfer upon the grant of a Possession Order rather than wasting time by making an additional application and waiting for an Order consequent upon that.

Once transferred, the Landlord applies to the High Court for permission to issue a Writ of Possession under the Civil Procedure Rules. This task is usually delegated to the High Court Enforcement Officers. It is, however, important to ensure that the procedural steps to obtain a Writ of Possession are properly followed. This entails:

  • Giving every person in actual possession of the property notice of the intention to apply for a Writ of Possession. The notice does not confer any new rights on a tenant or other occupier. The effect is to give those who may apply for relief a sufficient opportunity to do so. No time period is specified. However, a seven-day notice is prudent in the circumstances.
  • At the expiration of seven days, a request for the issue of a Writ of Possession is lodged with the King’s Bench Division of the High Court supported by:
    • a draft Order for permission to issue a Writ of Possession;
    • an Application Notice; and
    • a witness statement in support of the application, setting out the grounds of the application and confirming compliance with the requirement to give notice to all occupants before the issue of the application.

The application is considered on paper by a High Court Master. A Writ of Possession can be ordered on the day of the application. Once armed with a Writ of Possession, the High Court Enforcement Officers can effect the eviction of the occupants of the dwelling house and secure the premises in favour of the Landlord.

There is one final matter, however, which needs to be addressed. The Enforcement Officers will serve a notice under the Torts (Interference with Goods) Act 1977 giving the occupants a notice of intention to sell or dispose of goods left in the property. This is to cover the situation where the occupants do not remove their belongings. Prudently, at least seven days should be allowed to enable the occupants to remove their effects under the supervision of the Enforcement Officers. The Landlord should not interfere with this process. Once the process is complete, the Landlord can take charge of the keys and the property and deal with it as it thinks fit.

For more information, speak to M. Qaiser Khanzada today.

Note: This article is not legal advice; it provides information of general interest about current legal issues.

There are various types of residential tenancies regulated by statute which can only be brought to an end in a particular way.


The “Gig Economy” what does it mean?

The Oxford English Dictionary defines “gig” as “a job, especially one that is temporary or that has an uncertain future”. It also defines the “gig economy” as a “labour market characterised by the prevalence of short-term contracts or freelance work as opposed to permanent jobs”.

It is common for the gig economy to be associated with companies using new technologies to promote their business, but it is just as common in other sectors such as social care, retail, cleaning and construction.

Historically, businesses with fluctuating demand would perhaps have maintained a core workforce with casual employees or workers. The term “casual worker” covers many different types of working arrangements including bank staff, seasonal workers and individuals working on zero-hours contracts. Casual workers have fewer rights than employees but are still entitled to some employment protection including the national minimum wage and paid holiday.

Businesses within the gig economy have tended to engage individuals not as employees or workers, but as self-employed contractors who have the freedom to accept work (the gig) or reject it. Pimlico Plumbers, Deliveroo, City Sprint and Uber have all hit the headlines in recent times with cases in the Employment Tribunal (ET). This is because increasingly some individuals are challenging their employment status as independent contractors and arguing, with some success, that they are in fact workers; giving them increased protection at work. A self-employed person is not entitled to the statutory rights afforded to employees and workers and is responsible for their own tax and national insurance contributions. It is therefore an important distinction to make. Any self-employed person will need to fall outside the definition of “employee” or “worker” as defined in the Employment Rights Act 1996 (ERA 1996). However, the distinction between worker and self-employed is somewhat blurred.

A worker is defined in the ERA 1996 as either an employee or an individual working under

“…any other contract, whether express or implied and (if express) whether oral or in writing, whereby the individual undertakes to do or perform personally any work or services for another party to the contract whose status is not by virtue of the contract that of a client or customer of any profession or business undertaking, carried on by the individual.”

ERA 1996

All employees are therefore workers and the alternative, as cited above, has been subject to extensive scrutiny by the ET and courts to determine what types of working arrangements fall within its scope.

The difficulty with the “worker test” that has evolved through case law, is that it depends on the facts of each case. This can produce inconsistent results, making it difficult to know with any certainty whether someone is truly self-employed. The lack of certainty has been identified as one of the primary weaknesses of the current framework for clarifying those who provide services.

A further complication is that an individual can be self-employed for tax purposes, but be a worker for employment status purposes. This is because tax law only distinguishes between the self-employed and the employed. There is no “worker” category for tax purposes.

Further clarification was given last week when the Employment Appeal Tribunal (EAT) dismissed Uber’s appeal against the ET’s decision that its drivers are ‘workers’ within the meaning of the ERA 1996 and the equivalent definitions in the National Minimum Wage Act 1998 and the Working Time Regulations 1998. It held that the ET was entitled to reject Uber’s explanation of its business as a technology platform rather than a provider of transport services and to go beyond the contractual documentation describing drivers as self-employed contractors offering their services to passengers via the Uber app.

Uber says it is a technology platform allowing the provision of taxi services, not the provider of the taxi service itself. It claims it is acting as an agent for the drivers, and its agreement with passengers states that the contract for the taxi service is between the driver and the passenger. Under the contract between Uber and the driver, the driver is not required to give any commitment to work. However, when a driver signs into the app, this usually signals that he is coming ‘on duty’ and can therefore accept bookings. Prospective passengers book trips through the app. Upon receipt of a passenger request, the app locates an available driver (i.e. one who is logged in). The selected driver has ten seconds to accept the booking through the app, failing which Uber assumes that the driver is unavailable and locates another. If a driver fails to accept bookings, warning messages are generated which can lead to the driver’s access to the app being suspended or blocked, preventing the driver from working.

Several Uber drivers brought ET claims of unlawful deductions from wages, relying on failure to pay the national minimum wage, and failure to provide paid annual leave. Two of the drivers were selected as test claimants and the ET considered, as a preliminary issue, whether the drivers were ‘workers’ within the definition in the ERA 1996. The ET found that they were. It rejected Uber’s case that the drivers were self-employed and that it merely provided the technology platform that allows drivers to find and agree to work with individual passengers. In the ET’s view, this characterisation of Uber’s business model and the contractual documentation created to support it did not fit with the reality of the working arrangements, which was that Uber relies on a pool of workers to provide a private hire vehicle service. Uber appealed to the EAT.

The EAT dismissed the appeal, holding that the ET was entitled to find that the contractual documentation did not reflect the reality and thus that it was entitled to disregard the terms and labels used in the documents. The ET had to decide the true agreement between the parties and, in so doing, it was important for it to have regard to the reality and the facts of the case. The ET was therefore bound to reach a fact-sensitive decision.

What’s next?

The independent review of employment practices in the modern economy (the Taylor Review) which was launched last year, has made recommendations that the definition of “worker” needs to be clearer and more consistent. An enquiry into the Taylor Review started hearing evidence on 10 October 2017 and has questioned how the government should act to ensure rights and fair pay for gig economy workers. As yet there are currently no concrete plans to change the law but that may well be just a matter of time.

Meanwhile, it is likely that Uber will appeal the EAT’s decision and may well seek to fast-track to the Supreme Court to have the case heard at the same time as the Pimlico Plumbers case.

Speak to employment solicitor, Karen Cole, for more information on employment law and the gig economy.

Note: This article is not legal advice; it provides information of general interest about current legal issues.


The Data Protection Bill: How will it affect e-business?

The new Data Protection Bill is designed to update the existing laws, and hopefully plug a few gaps along the way. It is big, it is important, and it affects every single business that collects any kind of client or customer data, no matter how inconsequential a tiny packet of data may seem. It also gives your customers the ‘right to be forgotten’ – a major development and one you must be aware of.

The new bill gives greater customer consent over not only how their personal information is used, but how it is stored, who has access, and how long companies can keep that information on file. The bill also means that customers can now request that their data is returned to them, and the holder is obliged to comply.

Given the number of massive data breaches over the past couple of years (from the TalkTalk debacle through to the most recent NHS hack), it is about time that something was done to give the public a little more confidence in how businesses and the public sector, stores and uses personal data.

Tying in with GDPR

The Data Protection Bill is designed to herald the introduction of EU guidelines as laid down in the sweeping GDPR regulations, which land on our shores in less than a year and are set to be implemented into UK legislation, regardless of whether or not we’re in the EU at the time. Brexit be damned – GDPR is coming and everyone will have to fall into line.

The combination of GDPR and the Data Protection Bill demonstrates very clearly that the UK government is taking data protection very seriously. It is no surprise though, as the government cannot afford not to treat the issue of data protection as a priority. It has the potential to affect every single person in the UK, who also just happen to be voters.

It is also a message to our EU partners that post-Brexit, the UK will have a ‘strong and stable’ data protection policy, ensuring that businesses trading with UK companies can do so with confidence, and without worrying whether a data leak will compromise their personal information.

The impact on e-businesses

So, what does all this mean for e-businesses? Well, because e-businesses are at the very forefront when it comes to using personal data, and trust is always an issue when it comes to online activity, they are going to have to respond quickly and proactively to any changes.

Industry leaders believe that the new act raises the bar for businesses, especially as the information covered by the bill has been extended. Businesses will now need to protect not only the financial information of their customers, but their IP addresses, online DNA and even cookies. So, everything from postcodes to browsing history is protected.

Taking another look at your T&Cs

Businesses will need to have an effective consent policy in place, so their Terms & Conditions documents may need looking at again. Businesses cannot get around the legislation by claiming ignorance, either, so they’ll have to know exactly how and where data is being stored.

The ‘right to be forgotten’ will be eagerly seized upon by a public that’s increasingly concerned about just how much exposure their personal data is subject to online. However, e-businesses that demonstrate a good understanding and a flawless interpretation of the new legislation could benefit from these changes, by raising customer trust levels to new heights. Those who don’t comply will find a rapid decline in customers, as their demographic seeks out competitors who offer a more secure online environment.

Non-compliance could be expensive, too, with fines of up to 4% of global turnover. That means fines could run into millions of pounds, so effective data management just took on a whole new level of importance for e-businesses of all sizes.

Compliance is a necessity

The key is to identify exactly which data is subject to the new legislation, and to ensure compliance. That could mean legal experts who are specialists in e-commerce and data protection legislation are going to be busy over the coming months, as businesses rush to ensure they’re complying fully. From T&C documents and operational guidelines, through to data management policies and compliance with the ‘right to be forgotten‘ legislation, staying on the right side of the Data Protection Act and GDPR has never been more important.

The existing Data Protection Act was created before e-commerce was even a ‘thing’. Because the pace of change has been so fast, customers’ expectations and how they use e-commerce has changed well beyond the limits of the current law, which is why the new legislation has been brought in.

With just months to go before GDPR goes live, businesses must act sooner rather than later to ensure they are complying.

Speak to Karen Cole today to check you are ticking all the right Data Protection boxes.

Note: This is not legal advice; it is intended to provide information of general interest about current legal issues.


Brexit Deal: One man’s view

David Davis and his colleagues are deluding themselves and deceiving the country when they pretend that they can negotiate a Brexit deal that will be rubber-stamped by Parliament. The important point that we must all understand is that the approval of Parliament, as enshrined in an Act of Parliament, will be necessary to change the law of the land to incorporate ‘the deal’ because any deal necessarily involves changing the law (see the Gina Miller case).

While many in the UK may not appreciate this, one can be certain that EU officials understand it and it is likely to shape a twin EU objective of only agreeing on a deal which is expensive for the UK and which acts as a deterrent to other member countries – with an overarching objective of inducing the UK to reconsider its leave decision.

In some 15 months’ time, to avoid the political humiliation of not having been able to negotiate a deal, the government will put the best deal that is on offer to the House of Commons. It is reasonable to believe it will be unpalatable.

The Labour Party and other ‘remain’ MPs are unlikely to endorse a bad deal. The Government will need to call an election (which it is likely to lose) or hold a late second referendum or both. The country will be in a mess as the clock ticks down to March 2019, when, absent an agreement to postpone the leaving date, it will leave without a deal and with little or inadequate preparation.

To avoid a chaotic outcome a new Government is likely to agree with the EU on an extension of the leaving date to allow for a second referendum. All the Labour Party has to do to win an election is to offer the country a second referendum – it will have wide support.

Remainers may view such an outcome as an acceptable one. But if a ‘stay’ referendum result is delivered towards the end of 2019, the UK will have suffered political and economic turmoil for nearly four years.

This can be avoided or shortened The Government should accept that it needs the House of Commons on its side and is unlikely to get an acceptable deal without a second referendum. The question or box-ticking exercise can be simple such as ticking one of the following:

Should the UK stay in the EU?
Should the UK leave even if it cannot get an acceptable EU deal?

If the majority tick the second box then the EU, the House of Commons and the country at large will understand the strength of the electoral will and we are more likely to get a sensible deal from the EU. Consider how much stronger the negotiating hand of David Davis et al will be. The Government should organise a second referendum immediately.

And if the majority tick the first box we can all get on with our lives without Brexit.

For more information on Brexit and one man’s views, speak to John Gillette.

Note: This article is not legal advice; it provides information of general interest about current legal issues.


Tenant alterations

If your lease is silent in this regard, you can carry out such works. However, this is unlikely. Your lease is more likely to contain a tenant covenant regarding alterations, typically stating that internal non-structural alterations are permitted (with consent not to be unreasonably withheld) but that external and structural alterations are prohibited.

So, what then? A landlord is always free to grant consent to works even if the lease terms prohibit them; therefore, you could try asking your landlord for consent.

Section 3 of the Landlord and Tenant Act 1927 allows a tenant, in certain circumstances, to carry out works even if the terms of the lease prohibit them. The works cannot fall within the tenant repair covenant and must be classed as “improvements”. Further, section 3 applies only to business premises, not domestic/residential.

So how does section 3 work? As a tenant, you would serve a notice on your landlord detailing the proposed works and attaching any plans/specifications. If your landlord does not object within three months, you can proceed with the works.

If your landlord does object, then you can make an application to the court, which can (subject to its ability to impose conditions and modify the plans) authorise the improvements provided they:

  • are calculated to add to the letting value of the property at the termination of the tenancy;
  • are reasonable and suitable to the character of the property; and
  • will not diminish the value of any other property which belongs to the landlord or any superior landlord.

If you go on to complete the works, you must apply to your landlord for a certificate of completion confirming that the works have been completed.

Another possible outcome is that your landlord could offer to carry out the work for a reasonable increase in rent. In this scenario, you would not be obliged to accept the offer and could withdraw the section 3 notice so that the landlord would not be entitled to carry out the works and increase the rent.

In this situation, section 19(2) of the Landlord and Tenant Act 1927 (which applies to commercial and some residential property) may assist and qualify the covenant with a proviso that consent cannot be unreasonably withheld.

For section 19(2) to apply, the works must again be classed as “improvements”, but here the works are looked at from the tenant’s point of view and need not add to the letting value of the property.

In practice, you could apply to the court for a declaration that consent is being unreasonably withheld, or you could take the commercial risk of carrying out the works without consent. However, because section 19(2) does not impose a positive obligation on the landlord not to withhold consent unreasonably, you would have no right to claim damages if consent was unreasonably withheld.

One final point to note is that tenants of a domestic privately rented property can, pursuant to the Energy Efficiency (Private Rented Property) (England & Wales) Regulations 2015, request the landlord’s consent to energy efficiency improvement works. This applies where the lease either prohibits the works or the works are subject to qualified consent and require that the landlord (subject to specified exemptions) does not unreasonably refuse consent to the works.

Call our property law specialist, John Gillette, today if you have any questions regarding tenant alterations.

Note: This is not legal advice; it provides information of general interest about current legal issues.


Getting it right to grow the spirit of enterprise

Recently that’s included a five-year-old girl whose enterprise was selling cups of homemade lemonade to passers-by heading to a festival. She was stopped by enforcement officers who hit her with a fine for running an unlicensed stall. The fine was later dropped after attracting negative media coverage, but the incident highlights one of the ways that lack of knowledge is affecting would-be entrepreneurs.

Trading on the street requires a licence, granted usually by a local authority or the Metropolitan Police in Greater London, and the application must specify the proposed days and time of trading and the location. Trading areas are often restricted and there’s no guarantee of getting exactly what you’ve asked for; for example, the number of days may be restricted.

Operating without a street trading licence, or outside the conditions of a licence, can attract fines of up to £1,000!

Another way for a small business enterprise to trade without the commitment of permanent premises is by using pop-up premises to trial their new idea. This can be an ideal way to get a quick and immediate customer response, but both temporary tenants and landlords need to make sure the terms are properly stated, to avoid later difficulties which could include planning permissions, safety requirements or insurance.

Former head of commercial real estate, John Gillette, explains:

“In the first flush of enthusiasm in today’s gig economy, many people don’t realise they need to get to grips with many of the things that bigger business has to take on. With pop-ups, even when it’s a temporary agreement, it creates an interest in property and so you should take advice and make sure it’s documented with a licence or short-term lease.”

Telling HMRC that you’re self-employed and then declaring any self-employed income each year is another important step in going into business. But for smaller traders there is a now a tax-free allowance that came in from April 2017 which means there is no need to declare or pay tax on the first £1,000 earned each year, with another £1,000 allowance for any property-related income. If your income is more than £1,000 before deducting expenses, you must declare it, but can still take advantage of the allowance. However, the allowance for property-related income cannot be claimed in addition to the £7,500 a year tax-free income allowance for landlords who rent out a spare room in their house.”

Head of corporate and commercial, Victoria Holland, added:

“There are some great ways to earn extra income these days, whether it’s letting out your drive for parking, trading on eBay or coming up with the apps of the future. Going into business has become much less daunting, but getting advice before you start may help avoid difficulties later.

Parents need to be aware too. With a smartphone in one hand and schoolbook in the other, increasing numbers of teens are looking to get a foothold in business before leaving school, but there are rules and restrictions on the hours that can be worked by those under 16, whether in or out of term time. They may seem irrelevant when a teenager is running an enterprise that is wholly online and operated from their bedroom, but one important aspect of the rules is to protect performance at school, so parents need to be sure time spent is not excessive and undermining classroom ability.”

Speak to corporate consultant Victoria Holland today.

Note: This article is not legal advice; it provides information of general interest about current legal issues.


How vulnerable is your business to hackers?

A recent poll carried out by Barclaycard found that out of 500 SMEs asked, 44% were worried about the effects of a cybercrime attack or data breach, compared to 34% who were more worried about Brexit as a major impact on their future. It seems that the back-door hackers have more of a hold over our concerns than the Brussels bureaucrats. The result is that last year, UK SMEs spent £2.9 billion on cyber security. That’s an average of £1,600 per business, with 34% of small businesses concerned about managing and preventing threats and breaches. While consumers may be more cyber-savvy, it seems that businesses still have some catching up to do.

The average cyber-attack will cost an SME around £3,000, and the FSB found that, on average, small businesses in the UK are the victims of around four attacks every two years.

GDPR – cyber security is your responsibility

As well as damaging your business (and your reputation), a cyber-attack could leave you open to accusations of failing to protect personal data, especially if you hold client or customer information digitally (such as credit card details). With the new General Data Protection Regulations (GDPR) now coming into force, you have a duty of care to protect your clients’ personal information. If your firewalls and anti-virus software allow an attack to get through and as a result directly impact your clients and customers (such as their personal details being stolen), then you could end up in court. That data includes not just financial details, but names, addresses, telephone numbers, in fact, anything that could identify your customers.

From 25 May 2018, it’s up to you to take care of your customers’ data. You will also be required to report any attack to the relevant supervisory authority within 72 hours of becoming aware of a breach and prove that you have taken all reasonable precautions to stop an attack.

How to beat the hackers

Ideally, have professional IT advice, but having a robust firewall and up-to-date anti-virus software is a good start, making it more difficult for hackers to get into your system. To keep your business and your information secure you should:

Update your system

The most recent attacks have been against the now-aged Windows XP operating system. While it’s a good, solid operating system, it’s vulnerable to attacks and is no longer supported by Windows. Thus, XP is not being ‘patched’ (including security updates). ‘Byte’ the bullet and upgrade.

Build a better firewall

Firewalls and anti-virus software should provide you with a good line of defence. Make sure you choose one that is designed to cover networks, rather than just single outlets. Buying a home firewall and then asking it to protect your multi-user office system is asking for trouble.

Train your staff

It is worth having a designated Cyber Security officer if you’re a medium-sized business and get them trained in the latest techniques for Threat Analysis, mobile and static security, and even Ethical Hacking. But it’s also well worth training all your staff on how to recognise phishing emails, the dangers of clicking on unrecognised email attachments, and online security protocol.

Back up regularly

That means every week, not every year. If you have a recent back-up point then you’re less likely to lose all that essential information, even if a hijacker locks you out.

Can you hold your internet service provider or your software provider responsible for a cyber-attack?

If you’re thinking of bringing a juicy case against Microsoft for allowing a worm to wiggle its way through your firewall and into your computer, think again. You’ve signed a licence agreement with a software provider, which puts the onus back on you to ensure you allow regular updates and patches to be uploaded onto your operating system. Your internet service provider is also pretty much out of the loop as far as legal action goes, as attacks are usually so widespread that no provider is immune.

So, the best course of action is ensuring you do everything you can to protect yourself, your business, and your data.

For more information on hackers and your business, speak to Victoria Holland today.

Note: This article is not legal advice; it provides information of general interest about current legal issues.


Stay in touch

Subscribe to our newsletter

Stay in touch

By completing your details and submitting this form you confirm you are happy for us to send you marketing communications and that you agree to our Website Privacy Policy and Legal Notice and to us using Mailchimp to process your data.


Sending

News/Insight

  • Renters’ Rights Act: why process and paperwork matter more than ever for landlords
    The Renters’ Rights Act has now passed into law, marking one of the most significant shifts in the private rented sector in a generation. Most of the new measures will take effect in May 2026, with a national landlord database to follow later in th


    Read more
  • Understanding the Roles of Executors and Trustees
    When making a will, you place significant trust in those appointed to carry out your wishes. Executors and trustees are key roles, often held by the same people, but their responsibilities differ. Understanding these roles and their obligations helps


    Read more
  • Assigning or Subletting a Commercial Lease: What Tenants Need to Know
    This article explains the key differences between assignment and subletting, outlines the legal framework in England and Wales, and highlights the practical issues tenants should consider before taking action.


    Read more
  • Completion and post-completion steps in a sale: Final steps for sellers
    A guide to completion and post completion steps in a corporate sale including exchange, stamp duty, Companies House filings and key administrative requirements.


    Read more
  • How to protect your brand: A beginner’s guide
    Trademark protection for businesses explained, including how to register a trademark in England and Wales and the key steps to protect your brand.


    Read more

What they say...

  • Paul Woodman, March 2026
    Will writing “Excellent service from start to finish. Efficient and good value. Charlotte was very professional, knowledgeable and understanding.”

  • Client, March 2026
    Great Service “Contacted RIAA to update my will and other things. Charlotte and James provided an efficient, friendly service, and the process was dealt with quickly. Much appreciated.”

  • Client, March 2026
    Expert knowledge and support “Pippa was invaluable in her insight, knowledge, and support. Through what is a very difficult time, she gave me hope that there is something to be done. Very solutions-oriented!”

  • Eve, March 2026
    Professional, compassionate and seamless legal support “I would like to express my sincere gratitude to Charlotte, Solicitor at RIAA Barker Gillette (UK) LLP, for the outstanding support she provided to my father during the creation of his will

  • Laura Kelly, February 2026
    Review of legal guidance received “I recently worked with Patrick Simpson on my settlement agreement. Patrick guided me through every stage with exceptional care and diligence. He kept the process moving efficiently, always updating me promptly

Read more