HolidayBlogging

Tag: comply

  • Commission Contemplates Granting Companies an AI Code Compliance Grace Period

    Heads Up: AI Rules Hitting the Stage Soon!

    Big news for everyone working with general‑purpose AI: the Code of Practice is slated to be released before August 2. That’s the very day the rules will go into effect, so keep your calendars open and your code tidy.

    Why the buzz matters

    • All‑encompassing scope: From chatbots to autonomous systems, the new guidelines touch it all.
    • Clear compliance checkpoints: Developers will know exactly what’s expected, making the audit process smoother.
    • Legal deadline: By August 2, every AI system in deployment must be compliant.

    So, whether you’re a seasoned programmer or just tinkering with a cool AI project, this is your cue to double‑check your practices—before the big drop‑in on August 2.

    AI Act: Companies Seek a Breather, and the Commission’s Ready to Offer One

    What’s the Deal with the Code of Practice?

    Think of the Code of Practice for General-Purpose AI (GPAI) as a voluntary handbook that helps AI folks—think ChatGPT, Gemini, and the rest—stay on track with the EU’s AI Act. Instead of fighting the law, the Code offers a set of friendly guidelines to keep everyone on the same page.

    Publication Gets a Hold‑Up, but Freedom’s Still on the Horizon

    The final version of the Code was slated for May, but it’s been bumped back. The Commission has promised that the Code will drop just before the Act’s “official” start—maybe sometime around 10 July. A quick look at the internal memo says the AI Office is hoping to release it a few days before the rules go into force on 2 August.

    Why the Commission is Hosting a Big Workshop

    • Collect feedback from AI providers on the latest draft.
    • Showcase the perks of signing the voluntary Code.
    • Make sure everyone gets the same voice on how the Code fits with the upcoming Act.

    Companies Are Asking for a Ticker‑Tape Style “Grace Period”

    During a meeting on 27 June, Google reps asked the EU Technology Commissioner Henna Virkkunen if there could be more wiggle room for compliance. The teams want to install a short grace period because the Code will hit the scene only a few days before the AI Act takes effect.

    The AI Act’s Roll‑Out: 2024 Now, 2027 Later

    Remember, the AI Act didn’t all go live at once. While some rules went live yesterday, others will only kick in 2027. The Commission is now revving up to possibly formalise the Code via an implementing act, after the experts drafted the rules back in September 2024.

    Four Key Take‑aways

    • Code = Voluntary Relief – Companies get a hand‑hold before the Act’s strict guidelines.
    • Timeline Shifts – The Code’s release has been delayed, still aligned with the Act’s launch.
    • Companies Want Flexibility – The “grace period” talks are still in the works.
    • The Future is in the Air – The Commission might formalise the Code as the AI Act matures and future rules come into play.

    Courting the AI Act has never been this messy—but with a hint of collaboration, companies and regulators hope to steer clear of nasty surprises and hard hits. The commission’s still waiting for its opportunity to shape the final action, and everyone’s holding their collective breath for what’s next.

  • Working from home leaves business owners exposed to data breach claims

    Working from home leaves business owners exposed to data breach claims

    Last week the UK Government u-turned on its recommendation for employees to return to the office and the official position is now that employee’s should work from home ‘if they can’.

    It is difficult for many employers to justify bringing their staff into the office when they have already demonstrated earlier in the year that their role can be performed adequately at home, and with many employees keen to ditch the commute, it is likely that bosses will have to concede on the matter, whether they would prefer their team in the office or not.
    But many organisations, particularly smaller ones, are failing to address the potential breach of GDPR regulations that arise as a direct result of an employee working from home. This could expose them to a data breach claim made against them, which could be costly as compensation paid for breaches can easily run into the thousands.
    Andy Chesterman, Compliance Director at Privacy Helper, a company that specialises in helping companies comply with GDPR and data handling requirements told us that he had seen a lot of breaches and challenges for businesses while their teams have been working from home. Sometimes, putting processes in place to be compliant means hiring IT experts, and investing in servers or software and many firms are simply ignoring their obligations because it is expensive.
    “Many firms are allowing employees to use their personal laptops at home to carry out their work, as they would normally use a fixed desktop in the office and cost of supplying each person with a new laptop is an expense they would prefer to avoid. Company property tends to have the latest security patches installed – and some company laptops will not allow external USB’s to be used. Consider this if using your own laptop or PC temporarily – does it satisfy your company IT policy?
    If personal machines are used “temporarily”, is all personal data (emails, client data, etc) deleted from the personal machine after use, or does it get forgotten about? And if you are remotely dialling into the work server, are you using a VPN to secure your line? In usual circumstances, you’d log into the work server while in the office – a secure environment. Your home WIFI may be less secure, therefore, compromising the security of the data being accessed”.
    There are however many other potential breaches that are often overlooked once an employee is in their own personal space. DRM Legal, a law firm handling claims on behalf of those who have had their data breached have seen an uplift in claims for compensations in 2020 as a direct result of lax processes while working from home.
    Chris Saltrese, Senior Partner at DRM Legal shared with us some examples of recent enquiries his practice has received, such as an incident where a marriage counsellor was working out of their home office and private paperwork relating to another couple was not safely filed away and confidential details were visible. In this unusual case, the client actually knew the couple whose paperwork they had seen and had mentioned to them in passing conversation that they were using the same marriage counsellor!
    Chris told us, “It is vitally important that files and paperwork containing personal data is locked away safely, where other family members and visitors cannot see those details. A number of GP’s, nurses, solicitors and social workers are now working full-time from home and have in their possession very sensitive data relating to someone’s medical or criminal history. It would not be unusual, particularly in small towns and villages, for spouses, teenage children or extended family members who visit the home to personally know the individual whom the file relates to. If that file is casually left on the dining table or out on view this could lead to a very serious data breach, and subsequent claim for compensation”

  • Warning to companies to meet PAYE deadlines

    Warning to companies to meet PAYE deadlines

    There is not just one but two HMRC deadlines associated with payroll submissions. Companies missing either face automatic penalties or interest charges.

    According to local experts at Rawlinsons Payroll and HR, HMRC applies time limits very strictly and failure to comply results in automatic penalties.

    The first deadline is April 19. All outstanding PAYE for employees must be paid by that date otherwise interest charges start being incurred.

    A month later – May 19 – is the deadline for submitting P35 forms. These are a record of the end of year payroll totals for all company’s employees and directors combined. Missing this deadline will result in an automatic penalty.

    “These are very important dates for those in charge of payroll in any business to be aware of,” said Sarah Coulson, payroll manager at Rawlinsons Payroll and HR. “The forms must now be filed online and, while they aren’t hard to do, they can be time consuming. It’s important firms start planning now to ensure the information will be ready when it’s needed.”