At risk of being sued?

[IanIan]

I have a contract with a marketing agency and am employed by an umbrella. The marketing agency is supplying software to a large corporation and I've been writing code for them to encrypt bank details and credit card information and store them in a database.

Should I ask them for a message in writing that they won't sue me if there's a security breach?

[GillsMan]

I have a contract with a marketing agency and am employed by an umbrella. The marketing agency is supplying software to a large corporation and I've been writing code for them to encrypt bank details and credit card information and store them in a database.

Should I ask them for a message in writing that they won't sue me if there's a security breach?

Take out professional indemnity insurance.

[eek]

PCI Compliance?

[borderreiver]

Yes, I'd get the insurance if I didn't already have it ...

Can they really sue you if you're with an umbrella, though? Can't you play the poor oppressed "I was just obeying orders" employee card if things get nasty? Surely that's an advantage of using a brolly?

Just a thought

[northernladuk]

I thought it was the umbrella that had the contract with the client. You are just an employee of theirs?

[SueEllen]

I thought it was the umbrella that had the contract with the client. You are just an employee of theirs?

Depends on how the marketing agency wrote the contract which the umbrella agreed to.

Though if you aren't party to the terms, which you can't be as an employee, then you may have to hire a solicitor to point that out if it goes wrong.

[LisaContractorUmbrella]

The contract is between the umbrella and the agency and the umbrella should have PI insurance in place

[Contreras]

The contract is between the umbrella and the agency and the umbrella should have PI insurance in place

Should have, but worth checking.

Still, if the umbrella company went bust/dissolved then any PI insurance would almost certainly lapse / be cancelled.