In IT services, everything revolves around reliability. Yet, as IT lawyers, we often see how misunderstandings or defects in IT contracts lead to costly liability disputes. A recent ruling by an interim relief judge highlights the risks when core obligations are not met. What can IT service providers learn from this, and how can well-drafted contracts and general terms and conditions prevent these kinds of problems?
- Backups: A crucial obligation for IT service providers
In this case, things went wrong because an IT service provider failed to create a restorable backup of a crucial server. The client, dependent on the ERP system running on that server, suffered enormous damage when operations came to a complete standstill.
For IT service providers, creating backups is often a core obligation. When this is not properly carried out, a significant liability risk arises.
Our advice: Make sure contracts explicitly and in detail describe what responsibilities the IT service provider has regarding backups and how this is carried out. Also state the checks performed to safeguard continuity.
- Maintenance reports: Transparency is essential
The IT service provider in question stated in its maintenance reports that servers and backups were functioning properly. This created the impression that everything was in order, while in reality the backups were not working.
Our advice: Don’t put everything on autopilot. Establish clear guidelines for maintenance reporting. Contractually require that reports contain factual, up-to-date information, and allow room for disclaimers where uncertainties cannot be clarified at that time. This helps prevent misunderstandings and legal problems.
- Control mechanisms in practice
A major error in this case was that the backup monitoring system had not included a new server. As a result, critical data remained unprotected, and this was not discovered in time.
Our advice: Organize periodic manual checks and spot checks of critical systems internally, and record this in protocols for your IT staff. Including specific obligations regarding monitoring and recovery processes can prevent errors from escalating.
- Limitations of liability: Set the boundaries correctly
In this case, the IT service provider attempted to rely on a limitation of liability in its general terms and conditions. However, the court ruled that this was unacceptable, given the nature of the error and the disproportionate damage suffered by the client.
Our advice: General terms and conditions must be carefully tailored to the specific nature of the services provided. Include proportionate limitations of liability, but make sure they hold up in situations where core obligations are breached. Discuss these terms explicitly with clients when the agreement is formed. Consider explicitly stating in the proposal or contract that liability-limiting provisions are included in the general terms and conditions.
- Building trust through solid contracts
The trust clients place in IT service providers is based on clear agreements and the expectation that core obligations will be met. When this trust is breached, the consequences are often serious: damage claims, reputational harm, and legal disputes. And that makes sense.
Our advice: Invest in solid contracts that clearly set out expectations and make risks manageable. This starts with precisely defining core obligations, such as backup management, maintenance obligations, and control mechanisms. Also arrange this on the back end with internal control mechanisms and clear instructions. Combine this with well-drafted general terms and conditions that limit legal and financial risks.
Source: ECLI:NL:RBNHO:2024:12523, Noord-Holland District Court, C/15/358407/KG ZA 24-634
How we can help
As a legal service provider specializing in IT contracts and liability, we help IT service providers with:
- Drafting and reviewing contracts and SLAs, with clear agreements on core obligations.
- Creating robust general terms and conditions that limit liability risks.
- Advising on ways to prevent disputes with clients through transparency and clear communication about obligations and the exclusion and/or limitation of liability.
- Advising on internal instruction protocols as part of employment documentation and disciplinary measures in case of non-compliance.
Preventing liability issues starts with good legal documents and internal processes. Let us help you build this legal foundation, so you can focus on what you do best: supporting your clients with IT services.
Contact us for tailored legal advice at info@thelegalcompany.nl or call 020 345 0152.
This article was published on 11 December 2024