Second article of our partner David Diez Ramos commenting on the compulsory insurances approved in Spain during 2018.
You can read the article by clicking here.
You can also request a copy of the full article at rogers@rogersco.es
Second article of our partner David Diez Ramos commenting on the compulsory insurances approved in Spain during 2018.
You can read the article by clicking here.
You can also request a copy of the full article at rogers@rogersco.es
Our partner Marie Rogers has published an article on Lexology looking at “The “Prestige” 16 years on”.
The article explores the dilemma now faced by Spain and France regarding enforcement of the Spanish Supreme Court Judgments against the PandI Club in the UK.
The article can be consulted here.
A copy can also be obtained on request from rogers@rogersco.es
Given the strategic importance of the sector and its dependence on technology, the coming years will witness an increase in transport related cyber-attacks. There will be cases where the carrier will be unable to avoid liability.
The 27th June 2017 will go down in history as the date on which the transport sector became aware of the truly dramatic consequences of a cyber-attack. On that day, the operations of the Danish shipping company A.P. Moller – Maersk were totally paralysed as a result of a Petya ransomware attack that took down the systems of its headquarters and many of its facilities worldwide.
This is not an isolated event, but a first glimpse at a trend that can only increase in the coming years given transport’s dependence on technology and the strategic importance of the sector. In this sense, the latest study on cybercrime in Spain, prepared by the Ministry of the Interior, places transport as the third strategic sector where infrastructures had the most cybersecurity incidents during 2017 (preceded only by the financial and energy sectors with more attacks).
It goes without saying that a cyber-attack suffered by a carrier can also affect the goods being carried. This situation gives rise to the legal dilemma of whether the carrier is liable for any damage sustained to the cargo, given the carrier’s obligation to deliver the goods at destination in the same state and condition as received on loading at origin.
Bearing in mind that at this time there are no specific transport regulations that exclude liability for cyber-attacks, the debate is open as to whether this type of incident can be considered an act of force majeure or fortuitous so as to exclude the liability of the carrier.
To resolve this dilemma, it is necessary to start from the premise that cyber-attacks take advantage of any gaps or breaches in the security of the software being used by the carrier. Within the range of software vulnerabilities, the so-called “zero-day” (or “zero-day exploits”) are distinguished from the rest. The particularity of the “zero-day” vulnerabilities is that, according to the state-of-the-art of the relevant technology, the existence of this vulnerability is completely unknown until the cyber event occurs. Thus, the manufacturer of the corresponding software, at the time of its creation, could neither know nor foresee the existence of such vulnerability to cyber-attack.
So, it follows that only in those cases in which there is a “zero-day” cyber-attack, is there likely to be a good argument for force majeure or to categorise the attack as a fortuitous event. In all other cases, the cyber-attack could have been avoided by the victim simply having their systems updated and duly protected.
The fact is that software service providers from time to time supply users with updates or improvements for programs that aim to safeguard their proper maintenance and operation, including protection against new cyber risks that arise. Therefore, once these updates are available, it is up to the users to implement them, since failing to do so will be interpreted as a lack of action and a contributing factor to the success of the cyber-attack and therefore, the users will be held accountable for the consequences.
Finally, it should be noted that the transport regulations put the burden of proof on the carrier, such that it is the carrier who must prove the facts when claiming an act of force majeure or fortuitous event if attempting to avoid liability for any damage to the cargo. In the case of a cyber-attack, it will be up to the carrier not only to demonstrate that the corresponding security measures had been duly implemented, but also that it was also a “zero-day” vulnerability.
In summary, carriers must be aware of the cyber risks posed by their sector, adopting appropriate measures to protect against such risks. Otherwise, they will be considered liable for any damages caused to the goods as a consequence of a cyber-attack.
Author: Luis Alberto García
Email: lag@rogersco.es
Our partner David Diez Ramos comments on the Technical Guide 1/2018 on good practices in Legal Expenses Insurance published by the Spanish General Directorate of Insurance and Pension Funds. Part II – Legal expenses coverages included in Motor Insurance.
You can read the article by clicking here.
You can also request a copy of the full article at rogers@rogersco.es
Article by our partner Luis Alberto García on the existing legal framework in Spain for the use of electronic transport documents and the need for public authorities to adopt measures to facilitate use.
The article can be consulted free here in the online newspaper “Cadena de Suministro”.
A copy can also be obtained on request from rogers@rogersco.es
Our partner David Diez Ramos comments on the Technical Guide 1/2018 on good practices in Legal Expenses Insurance published by the Spanish General Directorate of Insurance and Pension Funds. Part I – Legal expenses in general.
You can read the article by clicking here.
You can also request a copy of the full article at rogers@rogersco.es
Our partner David Diez Ramos comments on the recent decision by the Spanish Supreme Court that clarified the requirements for the validity of the claims made clauses in civil liability policies.
You can read the article by clicking here.
You can also request a copy of the full article at rogers@rogersco.es
Article by our partner Luis Alberto García about the legal consequences for carriers of the presence of ilegal immigrants in their vehicles.
The article can be consulted for free here in the online newspaper “Cadena de Suministro”.
A copy can also be obtained on request from rogers@rogersco.es
Our partner, David Diez Ramos provides a brief outline of the regime of mandatory insurance applicable to yachts.
You can read the article by clicking here
You can also request a copy of the full article at rogers@rogersco.es
Our partner, David Diez Ramos, reviews the latest Judgment of the Spanish Supreme Court relating to the shift in legal trend and the application of strict liability to big energy suppliers.
The article can be viewed by clicking here or by requesting a copy at rogers@rogersco.es