Open navigation
Search
Offices – United Kingdom
Explore all Offices
Global Reach

Apart from offering expert legal consultancy for local jurisdictions, CMS partners up with you to effectively navigate the complexities of global business and legal environments.

Explore our reach
Insights – United Kingdom
Explore all insights
Search
Expertise
Insights

CMS lawyers can provide future-facing advice for your business across a variety of specialisms and industries, worldwide.

Explore topics
Offices
Global Reach

Apart from offering expert legal consultancy for local jurisdictions, CMS partners up with you to effectively navigate the complexities of global business and legal environments.

Explore our reach
Insights
About CMS
UK Pay Gap Report 2024

Learn more

Select your region

Publication 10 Nov 2023 · United Kingdom

Dealing with data

4 min read

On this page

 

Data is a powerful tool for driving change and the demand for collecting and reporting ESG data is increasing. This affects all those who build, operate and occupy real estate.

 
Businesswoman working late in a night city 1920x400.jpg
  • Building management
  • Helpdesk data
  • Access
  • Lighting
  • Energy usage
  • Security
  • HVAC
  • Inventory
  • EV charging
  • ESG reporting
  • Parking utilisation
  • Temperature
  • Brightness
  • Ventilation
  • Humidity
  • Air quality
  • Occupancy
  • Janitorial tracking
  • Peak demand reduction

 

  • Contractor management
  • Integrated apps
  • Pest control
  • Wifi usage
  • Elevators
  • Weather
  • Wellness
  • Space design
  • Water metering
  • Equipment control
  • Flow sensing
  • Footfall
  • Automation
  • Diagnostics
  • Leak detection
  • Power generation
  • Fire control system
  • Predictive maintenance
  • Workspace assignment
  • Smart evacuation
  • Fault detection
  • Alarm systems
  • Compliance
  • Fitness systems
  • Custom reporting
  • Machine learning
  • UV systems
  • Wearables
  • Catering
  • QR codes
  • Cybersecurity
  • Tenant services
  • Visitor management
  • Parking allocation
  • Third party data
  • Digital twins

Below are some of the core reasons why businesses are prioritising data collection:

ESG disclosures

Management, investors and lenders all require access to accurate ESG data. Such data is also increasingly important in meeting the requirements of regulators for evidence of ESG performance and corporate claims of sustainability.

New rules and initiatives

Governments and legislators are increasingly adopting open data initiatives that are intended to increase access to data and data sharing. 

Regulation

ESG issues feature heavily in the current regulatory agenda. Rules being implemented in the UK, the EU and elsewhere are changing the ways businesses structure their projects and their property portfolios.

In the UK, for example, new rules proposed in the Data Protection and Digital Information (No. 2) Bill will extend the open banking data regime to other industries, including real estate and construction.

If enacted, the new rules will let the government require specified suppliers of goods, services and digital content to give customers access to data relating to them, as well as contextual information relating to the goods, services or digital content provided by the supplier.

In the EU, the proposed new Data Act will introduce requirements to make the data generated by the use of IoT devices and related services directly accessible to users and to allow users to require that the data be made available to third parties.

Regulation

Rules being implemented in the UK, the EU and elsewhere are changing the ways businesses structure their projects and their property portfolios.

With so much data being collected, there are a host of issues and structures to consider:

 

Responsibility for data

Responsibility for collecting and reporting on ESG-related issues changes throughout the lifecycle of a development. 

Broadly, the developer is responsible during the planning and construction phase of a project, with responsibility passing to the new owner when a property is sold. But some issues will need to be negotiated.

  • Data collected by the developer

    The parties will need to agree how data collected by the developer during planning and construction will be shared. This usually involves the provision of a secure package of data, or access to the system that stores the data, as soon as the sales contracts have been exchanged.

    man looking at virtual data screen 840x420.jpg
  • Ongoing collection and maintenance

    There may be negotiations over the ongoing collection and maintenance of the data. For example, the developer of a mixed-use development may maintain overall control of the data on behalf of the various property owners.

    data presentation 840x420.jpg
  • Liability for the accuracy of the data

    The developer’s liability for the accuracy of the data will need to be negotiated as part of the sale. Typically, they will remain liable for the accuracy of data collected pre-sale for a period of time post-sale.

    Web developers 840x420.jpg

Handling data

Once collected, data is likely to be stored centrally and may be accessed by many different people. This can raise various legal, commercial, ethical and data security issues.

To put appropriate protections in place, businesses should start by asking key questions about each data set.

  • What is the source of the data? 
  • Who is responsible for providing the data? 
  • Who will be using the data?
  • How will the data be used?

Other factors should also be considered. For instance:

  • Is the data commercially sensitive or confidential?
  • Do third parties have rights that may determine how the data should be managed, shared or used?
  • Are there relevant restrictions in law or contract – for example, data protection or IP law, the law of confidence, website T&Cs, or conditions under a licence?
  • Are there other risks in sharing the data? For instance, some landlords and building managers fear that sharing building management, operation and performance data with tenants or customers may expose them to potential claims, if the data can be used to verify their performance.

Data licences

Businesses allowing third parties to access and use their data typically manage this through the use of contracts and data licences. But this is not without risk, and businesses will want to consider a number of factors when negotiating licence terms and conditions.

Data trusts

One approach to data management is the creation of a data trust, which enables data to be gathered and shared safely and securely for the benefit of multiple stakeholders.

previous page

1. Sustainable buildings

next page

3. Regulation driving change


Back to top