IT-agreements and covid-19 under swedish law

The corona virus and the covid-19 outbreak have had a major impact on people and companies. To limit spread of the virus, restrictions of various degree have been imposed by public authorities and sometimes taken on a voluntary basis by private organizations. Numerous countries have closed their borders, people are advised to avoid face-to-face meetings and many shops and offices are closed. Consequently, many businesses suffer, which in turn may affect their ability to perform contractual obligations.

Read this article as a PDF here.

There are many questions about the corona virus’ impact on contractual relationships. In this article, we touch upon some legal questions relevant to IT and outsourcing agreements and offer some strategic advice as to how suppliers and customers can prepare for situations that may arise due to the corona virus.

Identify potential business risks

Firstly, it is a good idea to take up inventory of resources used in your operations in terms of partnerships, key resources (including key personnel) as well as suppliers of goods and services. Secondly, you should consider how these resources may be affected by the current situation. You should especially consider the following situations:

• whether services are provided or delivered from, to or through a location that has been affected or is subject to restrictions;
• whether goods (including components and other equipment) must transported through a risk zone or through a country having imposed controls or restrictions on transports within or across its borders;
• whether there are any planned or anticipated face-to-face meetings, conferences or gatherings that may increase risk of infection;
• whether there are any restrictions preventing customer and/or supplier personnel from going to work; and
• whether the corona virus affects subcontractors and other actors in the supply chain and what the consequences are.

Review existing agreements

When the relevant business risks have been identified, any agreements covering these services should be reviewed to assess how the risks can be mitigated with the help of the agreements. We suggest that the assessment takes its starting point in the below types of provisions.

Force majeure clauses

A force majeure event is generally defined as an unforeseeable and extraordinary event beyond a party’s control, which prevents the party from performing its obligations. In Sweden, force majeure is not a concept regulated by statutory law. However, an analogous reasoning can be made based on the principle in section 27 of the Swedish Sales of Goods Act (Sw. “Köplagen”) which sets out that the seller may be excused for non-performance in case of unforeseeable events beyond the seller’s control that the seller could not reasonably be expected to have taken into account at the time of the conclusion of the agreement and the consequences of which the seller could not reasonably have avoided or overcome. A similar provision exists in article of 79 of the United Nations Convention on Contracts for the International Sales of Goods. The principle in the context of sales of goods is thus that of relief exemption of liability. It is also possible to agree that in case of force majeure, a party shall not have to perform its obligations under the agreement, something which would thus be a more extensive consequence of the force majeure event.

In Sweden, the wording of the agreement is the starting point for any assessment of whether a force majeure event is at hand. Force majeure clauses can either be of a general character or contain examples of the type of events that should constitute a force majeure event. In our experience, force majeure clauses rarely include events such as epidemics, pandemics or other dangerous illnesses. It is therefore of extra importance to review whether the clause is general or if it contains an exemplification of situations that should constitute force majeure events. In the latter case, the clause might be interpreted very restrictively, or even as an exhaustive list of possible force majeure events. There is no simple answer as to whether the corona virus qualifies as a force majeure event. The pandemic itself may very well be considered as an event beyond the parties’ control. However, it may be difficult to establish whether a party’s inability to perform its obligations under the agreement was caused by the pandemic or by other competing circumstances. When making the assessment whether a force majeure event is at hand, the following circumstances should be taken into consideration:

• The wording of the clause – Force majeure provisions are usually interpreted restrictively and narrowly. For this reason, the wording of the clause is important. Assess whether the clause could be interpreted as including epidemics, pandemics, dangerous illness, decisions on restrictions by public authorities or similar. It could also be of importance to review whether the wording of the clause calls for a narrow interpretation or if it can be interpreted in a more extensive way.
• The effect of force majeure – The wording of the clause will determine the consequence of invoking force majeure. Review whether the clause excuses a party from liability in case of non-performance due to force majeure or if the clause excuses a party from performance of all of its obligations under the agreement.
• Governing law – If the parties to the agreement are based in different jurisdictions, it is important to review the agreement’s governing law clause as the application of force majeure clauses may vary between jurisdictions.
• Underlying cause of non-performance – Such cause may include key personnel falling ill, a subcontractor that stops performing or a lack of possibilities to transport goods. Internal policies are seldom acceptable grounds for invoking force majeure.
• Existence of an invincible obstacle – A concrete obstacle preventing a party from performing its contractual obligations must be at hand, such as inability to deliver a good or services. An increase in costs is usually not by itself enough to invoke force majeure. Many IT service agreements contain provisions on continuity planning, so called Business Continuity Plans and Disaster Recovery measures. Obstacles that could be overcome by executing measures in such plans are, in our opinion, usually not force majeure events. See further on such plans below.
• Mitigation of adverse effect – Does the party invoking force majeure have the ability to mitigate the adverse effect – for example by using other subcontractors or resorting to other measures?
• Duty to notify the other party – In order to invoke a force majeure clause, the invoking party must normally notify the other party in writing of the existence of a force majeure event within certain time or the possibility to invoke the clause as grounds for exemption from liability may be lost. Review the requirements in the force majeure clause.

The effects of invoking a force majeure provision depend on the wording of the force majeure clause. Common effects include that a party is fully or partially relieved from liability or given the possibility to delay delivery of goods or services. There may also be provisions that allow a party to terminate the agreement in part or in full if the force majeure event lasts for a longer period of time. Both parties should therefore consider that the other party may be entitled to early termination of the agreement in case a force majeure clause is invoked. A force majeure clause may also give the parties the right to renegotiate parts of the agreement under certain circumstances if the parties cannot cooperate to reach a solution. It should be noted that the grounds for non-liability are usually only temporary, and as soon as the force majeure event is over, so too is the grounds for non-liability.

It is possible, but not for certain, that the corona virus, and especially decisions made by public authorities in relation to containing the corona virus, could constitute force majeure events. It is therefore important to be proactive and review agreements entered into in order to prepare for potential situations that may arise. This is true regardless of whether you are on the customer or supplier side of the agreement.

In addition to force majeure clauses, there could be other clauses in the agreement of importance. A party’s liability could for example be conditional under the liability clause. Negligence is sometimes a prerequisite for liability in IT-agreements. The corona virus and its consequences may in such cases lead to the conclusion that damages have not been caused by a party’s negligence.

Identify subcontractor risks

You should also consider what effects the corona virus may have on your supply chain – especially in case the supplier uses subcontractors. In case of force majeure, a subcontractor’s ability to perform its contractual obligations could be affected, which in turn may affect the supplier’s ability to perform its obligations. Subcontractor provisions in IT- and outsourcing agreements should therefore be reviewed to ensure inter alia that the customer has satisfactory monitoring rights, to check the supplier’s liability for subcontractors’ failure to perform and whether the customer is entitled to request a change of subcontractors. It is also important to check if there are any notification requirements in the agreement and whether any changes should be documented and executed in accordance with the agreement’s change management process.

In some cases, such as when the Customer is under the Swedish Financial Supervisory Authority’s (Sw. “Finansinspektionen”) supervision and is obliged to apply the EBA guidelines on outsourcing, it is a regulatory requirement that the customer approves a change of subcontractors. If so, the supplier must request the customer’s approval before changing subcontractors. If the customer refuses to approve the change, it could be difficult for it to hold the supplier responsible for inability to perform its obligations under the agreement. Even where such regulatory requirements do not exist, it is not uncommon that a subcontractor change is subject to customer approval.

Customer flexibility in the agreement

In case of force majeure, a customer may want to decrease or increase the volume of goods or services to be provided or otherwise change the scope of the delivery. If so, the customer must observe the process for such changes in the agreement – provided that such options are available at all under the agreement. The agreement may for example contain notification requirements, pricing provisions or a right for the supplier to refuse these types of changes. Further, whether it is possible to terminate the agreement due to changed circumstances should be assessed. The parties should review what termination provisions apply, and especially whether termination for convenience is an option. The analysis should include a cost-analysis of such termination. What would be the effective date of the termination should also be considered. It is advisable to consider what happens if the agreement is terminated – does the agreement contain a clear exit management obligation and how should transfer of data and similar information be managed?

Review continuity plans

Some IT- and outsourcing agreements may require a supplier to implement and comply with so called business continuity plans and/or disaster recovery plans (“BC/DR plans”). Such plans should address how goods and services will be provided to the customer in case the supplier’s experiences difficulties in performing its contractual obligations. BC/DR plans may include different types of service levels and measures the supplier must take. Such measures may include an obligation for the supplier to find alternative delivery sources and routs for delivery of goods, maintain back-up sites for delivery of IT services, or for the supplier to be able to move production from one site to another. We have noticed that BC/DR plans sometimes contain alternative sites for production in the same country. The problems associated with a country’s “lock-down” would then not resolved through the continuity plan and other alternatives must be considered and agreed upon.

Continuity plans may also include so called Recovery Time Objectives (RTO) which regulate the time in which measures must be implemented in case a service is impacted by a force majeure event. In addition, the BC/DR plans should regulate in what situations such plans are triggered. Should a notice to the other party be required or should the plans be triggered automatically in the event of force majeure? As discussed above in relation to force majeure, it is important to review whether BC/DR plans can be triggered by an epidemic or pandemic. It is also important to consider the relationship between the supplier’s obligation to implement BC/DR plans and any exemption from liability due to force majeure.

Further, consideration must be taken as to whether the special situation could trigger the disclosure of source code deposited under any escrow agreement entered into (i.e. a deposit agreement for software source code). It is not unusual for the customer to have the right to access the source code in the event of non-delivery, but such right is dependent on what is set out in the agreement.

Evaluate the possibilities of self-help and step-in rights

IT agreements, and especially service agreements, may include so called step-in rights. These rights make it possible for the customer, or a third party chosen by the customer, to “step-in” and use their own resources to perform the supplier’s obligations under the agreement – such as the delivery of services – if the supplier itself is unable to perform them. Any step-in clauses in the agreement must be reviewed to determine whether the impact of the corona virus on the supplier’s ability to perform its contractual obligations gives the customer the right to step in and take over the performance of the supplier’s obligations. Further, consideration must be taken to the consequences such a process may have – especially as to the matters of responsibility for breach of contract and liability to pay for additional costs that may arise. If these aspects are not regulated in the agreement, our recommendation is to try to find alternative ways to address the supplier’s temporary performance inability. Further, the step-out process should be reviewed and established so that both parties are aware of what should happen when the temporary situation is over.

Concluding remarks

The corona virus has already had and is expected to continue to have a major impact on companies and people. Currently, there is a great deal of uncertainty in the market and it is important to try to identify the best courses of action. It is vital to understand the potential impact of the corona virus on your rights and obligations in various types of IT agreements – in relation to agreements already entered into as well as those currently being negotiated. In order to manage this difficult situation, we recommend that you start by identifying potential business risks and thereafter review relevant agreements – starting in the provisions discussed above.

CHECKLISTS

Below, we have summarized some of the questions you should consider as a customer respectively supplier in the form of a checklist.

Practical tips for customers

• Identify important business relationships and consider how the current situation may affect your suppliers and their ability to deliver.
• Review relevant supplier agreements and consider, in particular, whether the agreement contains a force majeure clause and if so, if the wording is general or narrow. Does it include notification requirements?
• Document any defective or delayed delivery and consequences thereof. As far as possible, try to limit any damages.
• Are you entitled to withhold payment?
• What flexibility do you have according to the agreement – is it possible to increase or decrease ordered volumes or otherwise change the scope of services?
• Review any possibilities to terminate the agreement. What is the notice period and which costs may arise?
• Consider the possible effects of the current situation on the supply chain – especially if the supplier uses subcontractors. What possibilities are there to replace subcontractors?
• Consider the possibilities of activating BC/DR plans. What is required? What obligations does the supplier have?

Practical tips for suppliers

• Assess what obstacles you may encounter that could prevent you from performing your contractual obligations and which customer agreements could be affected.
• Review relevant customer agreements and consider, in particular, whether the agreements contain a force majeure clause. If so, is the wording general or narrow? How should you act in case of force majeure – do you meet the formal requirements (e.g. notification requirements)?
• Examine the underlying cause of the delivery problem/delay in order to establish the causal relationship between cause and effect – review the facts.
• Are there workarounds available? Review if there is anything else you can do to fulfill your obligations. Communicate with the customer and involve them in the process.
• Review your insurance coverage.