Dealing with regulators
Consider whether you need to notify any regulators, or whether your organisation has any other reporting obligations. Notification may be necessary to some or all of the following:
- public authorities, local authorities and/or other regulatory bodies
- customers (under the terms of any supply contracts) and consumers
- any other third parties (eg parties whose own products might have been affected or who might be at risk)
- where you are unsure, consider seeking legal advice in the relevant jurisdiction
If notification is necessary:
- consider the requirements of the relevant regulatory authorities within each country and how best to co-ordinate the different approaches to the different regulators
- decide which regulator should be approached first (their response may influence any other regulators that need to be approached later on). In some cases, relevant guidance identifies which regulator should be the "first port of call"
- consider which parties need to be notified urgently (eg some reporting obligations require notification to be made immediately, while other parties can be notified at a later stage). If you are unsure, consider seeking legal advice in the relevant jurisdiction
