Reaction…

Shelagh Gaskill, partner at law firm Pinsent Masons, says the revised contract terms will provide much needed reassurance to businesses, as well as having the benfit of making data protection compliance more straightforward.

The new contract clauses were clearly drafted by people used to working on commercial contracts. They look a lot more businessfriendly. That is likely to mean that they are well received. The previous ones were not well drafted, and contained commercial terms that organisations did not like.

British firms are in an unusual position within Europe, as they are not obliged to use these standard clauses as the basis of contracts. But the big advantage of the new model clauses is that they provide a guarantee of adequacy [ie they meet European requirements for data protection]; they are completely safe. That means that businesses can save themselves a great deal of time and effort by not having to write their own terms.

Jim Norton, senior policy advisor on e-business at the Institute of Directors says the process for involving industry in developing European legislation is of more significance than the changes to data protection legislation.

On the whole, we should welcome the approach of getting business involved at an early stage when shaping European legislation. Hopefully it is something we will be seeing more of in the future.

And the changes represent a necessary piece of professionalism, to ensure that the principles that underpin data protection are applied. But the anecdotal evidence is that businesses were not even aware of the restrictions that applied to transporting data, let alone that any changes have been made.

If the regulators are serious about this, it would need an intensive promotion campaign. What is more likely is that the requirements will seep through, as businesses take advice from their lawyers.