SaaS suppliers making online sales of SaaS services to business customers in the UK need to ensure that they have the necessary legal documents and information available on their website to comply with English law. Simply having a SaaS agreement online will not cover all legal obligations in the UK when providing SaaS services online. Below is a summary of the documents and information that you should have available on a UK website.
Continue readingTag: SaaS expert
SaaS Agreements – Terms and Conditions – Safe Harbor Adequacy
European data protection authorities have recently raised serious reservations about the effectiveness of the safe harbour scheme and its ability to adequately protect SaaS customer data to the same standard as European data protection laws. If you are a SaaS supplier and are considering/or are already using a company located in the US to provide part of your SaaS services i.e. for hosting, you should be aware of the existence and limitations of the safe harbor scheme.
Continue readingSaaS Agreements – SLAs – Business Continuity and Escrow Agents
SaaS customers are increasingly asking for disaster recover provisions to be included within the terms of a SaaS agreement to ensure that they have access to their data and continuity of service if a problem arises at the SaaS supplier’s data centre. The costs of providing disaster recovery used to be prohibitive, due to the requirement of having mirrored servers and transferring data, however there is now a new market opening up with former escrow providers offering a variety of disaster recovery options at affordable prices.
Continue readingSaaS Agreements – Data Protection – Update on the EU Draft Data Protection Regulation
SaaS suppliers should be aware of the recent changes made by the EU Parliament to the draft EU Data Protection Regulation (Regulation). If this amended version of the Regulation becomes law next year the obligations of SaaS suppliers who process personal data on behalf of customers will radically change. A summary of the current main proposed provisions is set out below.
Continue readingSaaS Agreements – Confidential Information – FOIA and SARs
SaaS suppliers are increasingly dealing with subject access requests (SARs) and freedom of information requests (FOIAs) in relation to SaaS customers. Excessive time and costs can be spent dealing with such requests, unless a SaaS supplier’s obligation to comply with or assist a SaaS customer with such requests is clearly defined in the terms of the SaaS agreement.
Continue readingSaaS Agreements – Terms and Conditions – Renegotiating Terms
Customers are increasingly attempting to renegotiate the terms of existing SaaS agreements, to reduce costs as more SaaS suppliers enter the market offering competing and cheaper SaaS services. In order to pre-empt such discussions SaaS suppliers should review their current SaaS agreements to ensure that they have the following terms in place to deal with and counter such requests.
Continue readingSaaS Agreements – Hosting – Encryption of Stored Data
Under the Data Protection Act (DPA), SaaS customers are required to take “appropriate technical and organisational measures” to prevent the unauthorised or unlawful processing of personal data and accidental loss or destruction of, or damage to, personal data. SaaS providers who process personal data on behalf of SaaS customers are required to include such obligations in their SaaS agreement (or SLA).
Continue readingSaaS Agreements – Terms & Conditions – Insolvency and ERRA
From April 2014 the UK government plans to change the Insolvency Act under the provisions of the Enterprise and Regulatory Reform Act 2013 (ERRA). This will make the SaaS supplier’s right to terminate or alter the terms of an existing SaaS agreement if a SaaS customer becomes insolvent. From this data no SaaS agreement may be terminated or have the pricing and payment terms changed due to a customer’s insolvency. Furthermore the SaaS supplier must continue to provide SaaS services without receiving any payment or having any right to arrears.
Continue readingSaaS Agreements – Data Protection – IT Security Requirements
n January 2013 Sony was fined 250,000 GBP for failing to take “appropriate technical measures” to protect the security of personal data stored on its PlayStation Network (PSN) in breach of the Data Protection Act (DPA). In light of the lack of guidance currently provided by the Information Commissioner’s Office (ICO) on data protection security SaaS suppliers should be aware that the ICO plans to draw up new guidelines.
Continue readingSaaS Agreements – Social Media – Ownership of Accounts
Increasingly SaaS suppliers encourage employees to use social media accounts i.e. LinkedIn and Twitter to promote their products and business. However this often results in a conflict arising between claims of misuse of confidential information and “ownership” of accounts and contacts when the employment relationship comes to an end.
The High Court has recently highlighted the need for SaaS suppliers to have a clear policy on the ownership of such social media accounts and contacts when they are used by employees for business purposes.
Continue reading