SME Comply Blog
The latest developments in governance, risk & compliance.
Keep briefed...

How to Handle Compliance Audits Without Stress
For many SMEs, the thought of a compliance audit can feel overwhelming. Requests for documentation, tight timelines, and the fear of getting something wrong often

The Legal Implications of Using AI in Customer-Facing Roles
Artificial intelligence is rapidly changing how businesses interact with customers. From chatbots to automated support systems, the use of AI in customer facing roles is

The Role of Legal Counsel in Scaling Your Business
Scaling a business is an exciting phase, but it is also where risk increases. New markets, larger contracts, growing teams, and more complex operations all

How to Create Contracts That Protect Your Business Interests
For many SMEs, contracts are often treated as a formality. Something to sign, file away, and revisit only when issues arise. In reality, well-drafted agreements

The Future of Compliance: Trends Every SME Should Watch
Compliance is no longer something businesses review once a year and put aside. It is becoming a continuous, evolving process shaped by technology, regulation, and

The Value of Pre-Emptive Legal Risk Management for SMEs
For many small and medium-sized businesses, legal support is something that gets brought in when a problem arises. A contract dispute, a compliance issue, or

How to Manage Subject Access Requests Under UK GDPR
For many SMEs, receiving a Subject Access Request can feel daunting. It often arrives unexpectedly, carries strict deadlines, and requires a clear understanding of data

Why Compliance Should Be a Priority for Every Boardroom
Compliance is often viewed as an operational concern. Something handled by legal teams, compliance officers, or external advisors. But in reality, it belongs at the

The Advantages of Having a Single Point of Contact for Legal Services
For many SMEs, managing legal matters can quickly become fragmented. Different advisors may be used for contracts, compliance, employment issues, and disputes, often with little

How to Develop a Compliance-First Culture in Your Business
For many SMEs, compliance is still treated as something reactive. A policy gets updated when regulations change, training is delivered once a year, and legal

Why Outsourcing Your Legal Counsel Could Save Your Business Time and Money
For many SMEs, legal support is often seen as something to use only when problems arise. Contracts are reviewed at the last minute, compliance is

Legal Solutions for Scaling Businesses: What You Need to Know
Scaling a business is an exciting milestone, but it also introduces a level of complexity that many SMEs are not fully prepared for. What worked

The Benefits of Integrating Data Protection with Corporate Social Responsibility (CSR)
As expectations around business responsibility continue to evolve, SMEs are under increasing pressure to demonstrate not only profitability but also ethical and sustainable practices. Corporate

How to Simplify Compliance for Small and Medium Enterprises
For many small and medium enterprises, compliance can feel like an ongoing burden rather than a business enabler. Regulations continue to evolve, expectations increase, and

What Every SME Needs to Know About GDPR Compliance
For many small and medium-sized businesses, GDPR can feel complex and overwhelming. The language is technical, the requirements can seem unclear, and the consequences of

The Hidden Costs of Ignoring Data Protection Regulations
For many SMEs, data protection can feel like a regulatory burden rather than a business priority. With limited time and resources, it is easy to

How to Ensure Your Business Stays Ahead of Regulatory Changes
Regulatory change is a constant for modern businesses. New rules, updated guidance, and shifting enforcement priorities mean that compliance is no longer something you can

Key Legal Considerations for Startups: From Contracts to Compliance
Starting a new business is an exciting process, but it also comes with a range of legal responsibilities that are often underestimated. In the early

Why Outsourcing Your DPO Services is a Smart Move for SMEs
For many small and medium-sized businesses, data protection has become a growing priority. Handling personal data responsibly is no longer optional, and expectations around accountability

The Benefits of Fixed-Fee Legal Services for Growing Businesses
The Benefits of Fixed-Fee Legal Services for Growing Businesses For many SMEs, legal costs are one of the most unpredictable aspects of running a business.

Top 5 Legal Mistakes SMEs Make and How to Avoid Them
Running a small or medium-sized business involves constant decision-making. In the early stages especially, legal considerations can feel like something to deal with later. The

How to Conduct a Data Protection Impact Assessment (DPIA) Effectively
For many SMEs, a data protection impact assessment can feel like a complex or overly technical requirement. In reality, it is a practical tool designed

What happens if your T&Cs conflict with your supplier’s?
Your business probably enters contracts with suppliers that are governed by standard terms and conditions. Your T&Cs are likely to be attached to your purchase

4 important reasons why you need professionally drafts Terms & Conditions
Do you really need to ask a lawyer to draft the Standard Terms & Conditions for your business? You could have a go at drafting

Key terms to look out for in your SaaS agreement
“Software as a service” or SaaS is increasingly popular as a way to licence certain software. You buy the right to use the software for

Contracts every start up needs to get going
The legal agreements every start-up needs in place before you begin trading You’re ready to hit the ground running on your new venture. Along with

The subscription model: is it right for your start-up and what are the legal issues?
Running a subscription model for your product can be a savvy way to secure Annual Recurring Revenue (ARR). Not only is that good for continued

Legal considerations for AI use and development
The rise in artificial intelligence (AI) is gathering pace and more and more businesses are adopting forms of AI into their working practises. There is

Commercial considerations for your supply of goods and services agreements
As a start-up, the precedent agreements you have with your suppliers and customers will be fairly new. Whether you’re working from your own agreement, or

Documents needed for a legally-compliant website
Which documents do you need to make sure that your new website is legally compliant? The comprehensive answer to that question will depend upon your

How to tackle your first sustainability report
Large companies have been reporting on their sustainability efforts for the last decade, and it’s a practice that has become as important as financial reporting

To what extent is ESG part of your SME’s compliance obligations?
As a small business, you have a lot of plates to spin. When it comes to compliance you have to think about: data protection, HR

What is the Supply Chain Due Diligence Act, and do you need to comply?
The Supply Chain Due Diligence Act (the Act) is German legislation that came into force in Germany in 1 January 2023. As a UK company,

The CSR Directive and how to comply
The Corporate Sustainability Reporting Directive (CSRD) is a piece of European Legislation which came into force on 5 January 2023. Even though the UK has

Which governance issues can sabotage your ESG reporting?
When we think about the Environmental, Social and Governance (ESG) obligations of companies, the focus is often on climate risk and social responsibility (or the

ESG compliance: How to comply with the social aspect of ESG
Whether by choice or necessity, more and more companies are finding themselves at the helm of ESG issues. It’s easy to be overwhelmed by the

ESG compliance: what are your environmental obligations?
Environmental, Social and Governance (ESG) issues are on the agenda for all businesses these days. Bigger businesses have to report on their compliance but even
Copyright, trademarks and patents explained
You probably recognise copyright, trademarks and patents as types of intellectual property (IP). But how do you know if you need one in your business?

What is an LLP and when is it a good idea?
A Limited Liability Partnership (LLP) is a way to structure your business as a hybrid between a partnership and a limited company. As an LLP,

Unpicking IP: Protecting the Intellectual Property created in joint ventures
Intellectual property (‘IP’) can be one of the most valuable assets to a business. It refers to ‘creations of the mind’ such as literature, art

Emojis in contractual negotiations: does a ‘thumbs up‘ (👍) mean acceptance of contract terms?
As a matter of common sense, as well as in law, parties to an agreement need to know when that agreement has been reached. In

Legal Implications of Chat GPT
Everyone’s talking about it. Chat GPT is the generative AI technology that interacts with users in a conversational way. And it has made quite the

Reasons why your company should have a shareholders’ agreement in place
When you’re starting your business, you’ve got ideas and tasks coming out of your ears. Do you really need to add “get a shareholders’ agreement

Tracking The Data Landscape
Gary O’Reilly talks building sites, legal matters and data – in BusinessWorks Worcestershire & The Black Country. Featured in the Entrepreneur section, our very own

Environmental, Social, and Governance (ESG) and your business
Businesses are under increasing pressure to be more ethical, sustainable and climate friendly. Failure to comply with environmental, social and governance (ESG) criteria can have

EU/UK Representatives
If your business trades with the EU it’s essential that you understand the process of collecting and handling data in a compliant way. Do you
Standard contractual clauses-issues for Irish (and other EU) companies.
Most EU companies (including, of course, Irish companies) use third party processors in one form or another to undertake data processing for them both in

The Privacy Pulse – SCC’s, Cookies and EU Reps what do we need to do?
We join The Privacy Pulse and The Data Privacy Advisory Service for a webinar covering the new Standard Contractual Clauses, EU reps and Cookies. Experts, Nigel, Paul, Laura and
Dutch DPA imposes fine of €525,000 on Locatefamily.com for failing to appoint Article 27 EU representative
The Dutch Data Protection Authority (DPA) has imposed a fine of €525,000 on the website Locatefamily.com for failing to appoint an Article 27 GDPR representative in the EU. The DPA also ordered that the company must designate an EU representative, or must pay 20,000 euros for every 2 weeks it does not have such a representative, with a maximum of 120,000 euros. (As of the 13 May 2021 there is no evidence that the company have appointed an EU representative).
UK and Ireland data transfers: ‘Adequacy’ is not the end of the matter
The European Commission (EC) published a draft UK adequacy decision on the 19 of February 2021, which will come as a huge relief for businesses

Impact of Brexit: Privacy and Data Transfers with Seers and SME Comply
Impact of Brexit: Privacy & Data Transfers SME Comply – Online Event Seersco is hosting the next privacy webinar on the “Impact of Brexit: Privacy

GDPR: The hidden obligation
The GDPR applies to all companies processing the personal data of individuals residing in the EU, regardless of the company’s location, and regardless of whether
EU & UK Representative (Article 27 GDPR)
With only eleven weeks to go before the UK leave the EU with or without a deal, there are a number of practical steps SMEs

Shop in the Shires: celebrating the two counties local businesses
Over the past number of months businesses have been welcoming customers back into their stores after months of closures and hardship, for the local business

Bounce back offer
Take a look at our Chamber members’ bounce-back offer – 10% off all services for a year: hwchamber.co.uk/business/sme-comply-ltd.

From lockdown to open-up – employee issues
On 23rd June 2020 we were told that social distancing was to be reduced from 2m to 1m+ where possible. This relaxation will have a
Returning to Work: Is Your Business Legal
As businesses begin to reopen and employees return to work, it’s crucial to ensure your business remains legal. Yet, under such unprecedented circumstances, it can

Suspected WhatsApp breach and what you should do!
Please see update below from the Irish Data Protection Commission, and what you should do to protect your personal data. “DPC Statement – WhatsApp Security

Is your direct marketing lawful?
While all the talk over the past year has been in relation to GDPR, the recent case discussed below highlights the need to go back

Can SME’s really wait until the 29 March 2019?
Implement your fail-safe mechanism now! A big week in politics lies ahead, the same can also be said for data protection. If a Brexit deal
Brexit – Get competitive advantage!
For the purposes of data protection, the UK will transitionally recognise all EEA states, EU and EEA institutions and Gibraltar as providing an adequate level
How safe is your Christmas present?
Advice on Connected Toys and Devices Interactive toys are on the top of many children’s Christmas list. Some of these toys have the ability to interact
Cybercrime – We are under attack!
Introduction Cybercrime and cyber risk, like any other risk to your business, needs to be managed properly and considered a high priority risk for the

Deal or No Deal – the data protection implications of Brexit
There is considerable uncertainty regarding the future relationship between the UK and the EU in relation to data protection. This news blog sets out the