Global Investigators & Security Consultants
0333 6000 300


Now Grey Goods Are Not So Grey

  • November 22, 2016 at 7:44 am
  • The recent Court of Appeal decision in R v C and Others [2016] EWCA Crim 1617 has confirmed that sale of grey goods can be met by criminal sanctions under Section 92 of the Trade Marks Act 1994 (‘the Act’), which can amount to a maximum of 10 years imprisonment.

    Grey goods are goods to which a trade mark proprietor has authorised the application of their trade mark, but has not authorised the subsequent disposition of those marked goods. Examples of how this may arise are provided in the judgment and include, where goods had been part of an order placed with an authorised manufacturer by the trade mark proprietor but then cancelled; part of a batch of goods whose manufacture had been authorised but were subsequently rejected as not being of sufficient standard; or goods manufactured, pursuant to order, with authority but in excess amount.  The issue of grey goods and their interaction with their supply chains is often of particular concern to retailers.

    In this case it appears that the offending goods consisted of a mixture of genuine grey goods and counterfeit products, all sourced from outside the European Economic Area (‘EEA’). This is a common scenario faced by many brand owners and the question was whether all these classes of goods could fall within the provisions of s. 92 of the Act. The decision was in favour of trade mark proprietors, based on three factors: (1) the wording of Section 92; (2) earlier legal authority; (3) public policy.

    The decision is of importance because it provides brand owners with an additional means whereby they can control their supply chain with respect to grey goods. Given that these acts can be deemed as falling under the criminal provisions of the Act, brand owners can now encourage Trading Standards to take enforcement action or launch private prosecutions under the Act. The decision also raises the issue that parallel importation from outside the EEA, and following BREXIT, outside the UK, might be deemed a criminal act – a prospect some retailers and brand owners might view with glee, but others with fear.

    For more information:

    read more
    by dave

For the First Time Takes Counterfeiters to Court

  • at 7:30 am
  • Amazon in the US has filed lawsuits against counterfeit sellers, after a number of businesses on Amazon protested that knockoffs were killing their sales and endangering consumers.

    Amazon filed suit against a group of sellers for infringing on athletic training equipment developed by TRX. In a second case, Amazon sued sellers who are offering fake versions of a patented moving product called Forearm Forklift.

    Both suits were filed in the Superior Court of the State of Washington in King County. In the TRX suit, Fitness Anywhere, the creator of the training equipment, joined Amazon as a plaintiff.

    Amazon is the lone plaintiff in the case involving Forearm Forklift. The company claims that in addition to selling fake versions of patented products, the “defendants tried to further their fraudulent scheme by submitting forged invoices to Amazon purporting to show that their products were authentic.”

    For the full story:

    read more
    by dave

Counterfeit Banknotes

  • at 7:00 am
  • counterfeit

    This is a message sent via In The Know – Surrey and Sussex. This information has been sent on behalf of Surrey Police 

    Over the last few days we have had several reports of three smartly dressed men in suits trying to pass off fake £50 and £100 notes, believed Scottish counterfeit notes. They go into a shop and buy a small item with the note. We have had reports at Caterham, Nutfield and Redhill. Please be very wary of people using large denomination notes to buy small items.

    Consider the following best practice…..

    Buy an electronic bank note checker.

    Use a counterfeit pen.

    Put a note by your till saying “All notes will be checked to verify they are not counterfeit”.

    You may also adopt a store policy to not accept large currency notes.

    Further useful information can be sort from


    If you believe people have used counterfeit money please let Surrey Police know on 101. If the person or people are still in the store or the town please call us on 999.

    bucks-surrey-ts Bucks and Surrey Trading Standards

    Trading Standards Business Advice


    read more
    by dave

Police seize £7m of Fakes in Scotland and Warn of the Link to Organised Crime

  • November 7, 2016 at 8:45 am
  • It was announced that counterfeit goods valued at around £7 million were seized by police in Scotland last year as Justice Secretary Michael Matheson launched the Government’s report into Scotland’s gangs.

    Officers made nearly 3,000 arrests of people known to be involved in serious organised crime.

    According to the report the most common business types are licensed premises, restaurants, building and construction companies, taxis and nail bars.

    More than two thirds of the gangs operate on the west coast, just 22 per cent are based in the East and 11 per cent in the North. Sixty-seven per cent Scotland’s gangs are funded by drug crime, the report says, with cocaine the biggest seller.

    The report also says the Government took £9m off individuals and companies involved in criminal activity in the last 12 months, taking the total seized through proceeds of crime legislation in the 14 years it’s been in operation to more than £100m.

    Matheson said: “Tackling organised crime is about much more than police raids and court trials. We need to work collectively, in our communities to tackle the harm caused by serious organised crime, to stop the cycle of deprivation and, crucially, give those involved in these activities the chance to turn their lives around. With the right education we can prevent people, including our young people, from being recruited into a life of crime.”

    New Lord Advocate James Wolffe QC, warned shoppers to be wary of buying fakes: “The public should be aware that counterfeit goods are often the product of serious organised crime and that by buying such goods you could be funding groups who deal in drugs and human trafficking. And if you buy goods which you know to be stolen then you could also be prosecuted under the Proceeds of Crime Act.”

    For the full story

    read more
    by dave

Checks and actions that companies can make for themselves to mitigate risk and prior to a more extensive internal audit

  • November 4, 2016 at 2:53 pm
  • Security Checks Companies can make for themselvesHow to assess the safety and security of your company

    In this article we will examine how your organisation can mitigate risks by regularly carrying out essential security and safety checks.

    We will consider:

    • Why is it important to review the security and safety of your organisation?

    • How to carry out a security check.

    • What are the common risks and threats that you should check and consider?

    • What are the specific threats and risks for your organisation?

    • How you can control and manage risks.

    • How often should you review your facilities, procedures and policies?

    • What are the benefits of employing a security consultant to carry out an external audit?

    Why should you carry out a security and safety survey?

    The ultimate purpose of undertaking a security survey is to determine the most cost-effective and practical ways to protect your assets: your people, property and information.

    Imagine an onion. At the core of the onion is your business or organisation– containing all of your assets (property, people and information). All of the things that are essential to your operation are in the centre of this onion, beneath many protective layers. If you think of your organisation as being like an onion, then the more layers of security protection around your core business, then the more secure and safe you are likely to be.

    Of course, the threats and opportunities for criminals or competitors to cause damage to your organisation have always existed. However, in the technological world of the twenty-first century, crime happens both in the real world as well as online, in the virtual world of the Internet. By taking these steps to review and check security, you are reducing the risk of becoming a victim of crime.

    How do I carry out a security check?

    You can perform many of the simple checks yourself: This article contains useful information and key questions to help you review your company’s security practice and procedures. In order to carry out an effective survey, we recommend that you:

    Do not pre-announce or publicise when or where you will be carrying out a security or safety check. If your staff know when it is, then they are likely to deviate from their ‘normal bad habits’ – whereas an unannounced inspection will instantly identify any processes or policies that expose weaknesses or risks to your business. Remember, their safety and security is one of the reasons why you are carrying out this review.

    • Have floor plans and site diagrams labelled with control systems to help you identify current and potential security and safety risks. By using the plan you will be able to identify the profile of each building, number each door and be able to carry out regular checks.

    • Work systematically and thoroughly, using the guide below to help you. You have to ‘think like a criminal’ and spot existing and potential risks and weaknesses in your organisation.

    • It is recommended that you record your findings and create an action plan. This plan will state the issue and the safety and security measures and procedures you have installed to mitigate risk.

    What are the common risks and threats that you should check and consider?

    When you review the security of your organisational assets (property, people and information), you need to consider how you control and manage risks:

    • Fixed assets – property, physical assets (e.g. office equipment & specialist products/machines – depending on the nature of your business).

    • Technological assets – computer systems and servers, storage of information and data (both physical systems and data backup/cloud based storage).

    • Staff assets – What appropriate action do you take to safeguard your assets, when employees leave your company?

    • As you perform your security and safety checks, review your organisation’s provision, processes and policies.

    Below, we have listed the simple things you can check for potential weaknesses, opportunities and threats.


    • Are fences, walls, security and locks on windows and doors secure?

    • Can perimeters be scaled or breached?

    • Are the CCTV cameras in good working order?

    • Who is responsible for the maintenance of security systems in your organisation?

    • Are the alarm systems working?

    • Are CCTV cameras and alarm systems serviced and tested regularly?

    • Where is this information recorded?

    • How easy is it for visitors to access your premises?

    • Are staff vigilant? Do they know how to report risks?

    • Are visitors challenged by staff and asked to sign visitor book and show ID?

    Policies and Procedures

    • Do you have an effective passcode / key policy in place (for locks)?

    • Do you change electronic door entry codes regularly?

    • If using locks with physical keys, how effectively does your key usage policy work in action?

    • Are physical (and virtual) keys stored securely?

    • What controls are in place and fully working with respect to access to restricted access areas (e.g. mail rooms and server rooms)?

    • How effective is staff induction and training?

    • Are staff aware of their security responsibilities (e.g. they have to wear IDs at all times)?


    • Are staff following security policies?

    • Do staff pose security risks such as holding doors open to strangers and lending their passes to others?

    • Do staff know how to report security issues?

    • Are security staff trained?

    • How do you monitor their job performance?

    • Is CCTV monitored at all times?

    • What happens when they spot a potential risk?

    • How do you vet staff and ensure you are employing the right people?


    • How do you back up electronic data?

    • Is it on site?

    • Are back ups stored separately from main data? Where? How?

    • How effective are the security arrangements to protect servers?

    • Who is responsible?

    • How often you make adequate backups (so you can recover critical data or information, if it is damaged or stolen.

    • How well are you protected against Viruses, Malware or Ransomware?

    What are the specific threats and risks for your organisation?

    It is impossible to list all of the risks for every organisation: that is why employing an independent security consultant to review your organisation’s security and safety is a worthwhile investment. But there are some simple things you can control and manage to mitigate your risk, and reduce the chance of becoming a victim of crime.

    How can you control and manage safety and security risks?

    Any response to minimising risk should be both consistent and appropriate. Companies, who excel in mitigating risk, plan a sufficient budget to allocate to risk prevention. They review their policies and practices regularly:

    • A senior member of staff is appointed as ‘Security Liaison Manager’, and is responsible for resolving any security issue as soon as is practically possible. All staff are responsible for spotting and reporting security lapses or issues to this manager.

    • A strict policy is in place for Key holders and access arrangements.

    • The company belongs to a Business Watch scheme.

    • You should create a security register, where you can record:

      • Your assessment findings;

      • Details of any security systems already in place;

      • Alarm systems;

      • List of the key holders;

      • A plan of the premises, labelled with building and door numbers;

      • Your security action plan, detailing what needs to be addressed, when, who is responsible, the allocated budget and the timeframe.

    How often should you review your facilities, procedures and policies?

    These simple checks can be completed once a month. In practice, most companies perform these checks four times a year, but it all depends on the particular risks associated with your organisation such as your physical location and surroundings and the nature of your business. A security consultant will be able to advise you on the best course of action.

    What are the benefits of employing a security consultant to carry out an external audit?

    Whilst this article focused on the simple checks you can make yourself, we recommend that you appoint one of our trusted security consultants to independently assess and check security in your organization. They will expertly advise you on how to mitigate risk, based on your organisation’s unique circumstances and the specific risks you face. However, as we have explained, there are many simple checks that you can do yourself to keep your company safe and secure.

    read more
    by Alex

How Organisations Can Avoid Data Breaches And Thus Meet Their Security Obligations

  • October 15, 2016 at 3:33 pm
  • Circuit board with lockStay on top of security developments by following these five pieces of advice

    With cyber attacks becoming increasingly common in the present day, it is vital for companies to ensure that they keep their data safe from breaches. If a data breach occurs, your company’s financial information will be at risk, as will potentially sensitive customer information. As well as being bad for the image of your business (and losing you several customers), data breaches can make companies liable to pay fines. This is due to the fact that the Data Protection Act of 1998 legally requires companies and other organisations to keep people’s private information safe and secure, imposing penalties if this requirement is not fulfilled. Good security is thus not just convenient for you, it is also an obligation. Luckily, it is pretty easy to keep your IT infrastructure safe from attack – all that you need to do is to cover the five basic points listed below. If you do not feel comfortable covering all of the baselines below yourself, then hiring an IT professional to do so for you is a smart choice.

    1. Keep your IT infrastructure in good health

    Knowing and understanding your IT infrastructure is an essential first step for keeping it safe and sound. Get to know what types of software you are using and what new updates or patches are available. Install new security and safety features as soon as they become available. Ensure that you know where and how your infrastructure intersects with the law: what types of security are you legally obliged to provide? Make sure that you provide that level of security as a basic minimum. Under the Data Protection Act, if you take no action to attempt to prevent or to halt a data breach then you can become liable for even bigger fines. This was the case with Talk Talk last year when they were fined £400, 000 (a record amount) for a data breach that saw sensitive customer files leaked. Monitor your IT infrastructure at all times to make sure that you catch any attempted breaches as soon as possible, and, when a breach does occur, use it as an opportunity for learning: attempted breaches can teach you numerous things, including where your company’s perceived weak points are when it comes to IT infrastructure and also what hackers’ current methods are. If a data breach does occur and you have fulfilled all of your legal obligations under the Data Protection Act, then it is unlikely that you will have to pay a penalty.

    2. Opt for automation to keep your security up to date

    Monitoring IT security should be a 24/7 job as attacks can happen at any time. That is why it can be hard for human eyes alone to monitor every aspect of your IT infrastructure. So, why not put in place encryption policies, intrusion detection and prevention programs, regular automatic assessments (where the system checks itself for weak spots and security breaches and applies patches and updates where necessary) and backup programs that prevent files from being lost permanently if a hacker attempts to wipe your system’s memory. Another good policy to put in place is to stop new files from downloading automatically until they have been checked manually, as a key method of cyber attackers is to send you a malicious file to download as an email attachment. These automatic features will keep everything safe and secure whilst you get on with running or working for the company.

    3. Educate all company members about IT security

    Get everyone on board when it comes to monitoring the security of your IT infrastructure. Train employees to encrypt their information and to recognise attempted cyber attacks. Create a set of employee regulations which require employees to encrypt and password protect the data that they use and to apply software patches where necessary. Think about where your company’s hardware is, too, and where necessary prevent employees from taking hardware home. If it gets into the wrong hands, a single lost laptop can result in a huge data breach. One very good policy to implement here is data minimisation: this means only sharing data with the minimum number of top level employees. The fewer people who have access to data, the less likely it is that employees’ negligence will facilitate a data breach.

    4. Have a detailed plan about what to do in the event of a data breach

    Plans about how to respond to suspicious activity (which, of course, you will be monitoring as per step 1 above) should be built in to your day to day IT policies. Set up real time alerts which enable you to identify threats straight away and then have a plan that you can quickly put into action to protect sensitive information – for instance, shutting down some parts of the system or getting a resident IT professional right to work on creating barriers for hackers. Integrate prevention and response strategies into your day to day operations, for instance by informing employees about attempted data breaches so that they can change their passwords instantly. Be aware of your legal obligations when it comes to reporting attempted breaches: remember, if you take no action to repair or report a breach you can become liable for penalties. And, if an attempted breach does occur, make it part of your policy to analyse the breach to help you to be stronger against the next attack.

    5. Be smart about who you hire

    Hiring an IT professional (or a team of professionals) to keep your IT infrastructure safe is a very good idea. Think of this additional hire as an investment rather than a loss of money! After all, the average cost of a single data breach last year was over £100, 000 for a UK company. Do not just look close to home, either: tap in to the global talent pool to ensure that you hire the perfect person for the job. Many security professionals can work remotely for much of the time (though there are definite benefits to having an in house professional keeping an eye on your IT security) so you could even hire a team that involves someone in a different city or country if needs be. Find out who the best qualified security professionals are and offer them an attractive post to tempt them over to your company. As well as this, it is important to include some elements of IT security training for all of your staff – not just those people whose job it will be to protect your IT infrastructure. If any potential new employee comes to you and you see that they have experience or qualifications that relate to cyber security, then that should definitely figure as a huge positive for your company! Hiring a dedicated person, or group of people, to deal with your company’s cyber security, moreover, is very good for business. It shows the world that you care a lot about keeping all of your customers’ and also any business partners’ data safe and secure at all times.

    read more
    by Alex

Warning to Councils over Cuts to Statutory Services

  • October 10, 2016 at 8:55 am
  • A Council’s eleventh hour decision to conduct a more wide-ranging review of its trading standards function has served as a reminder to other authorities to think carefully about their statutory duties when making cuts – or risk being hauled before the courts.

    Liverpool City Council has faced a two-year legal challenge from a former employee after it slashed its trading standards officers from 19 to four. The former employee is being supported by the Chartered Trading Standards Institute (CTSI).

    Trading standards is responsible for discharging about 250 statutory duties1 concerning everything from disease outbreak and medical weighing equipment to product safety and rogue trading.

    The council has now agreed that it will appoint an independent and professionally competent person to conduct a review. It must consider statutory and European Union consumer protection duties as well as the government’s enforcement priorities.

    It is second time Liverpool City Council has faced pressure to review its trading standards services, in light of cuts. Last week’s contempt of court proceedings, at the High Court sitting in Manchester, were expected to focus on whether an earlier review was adequate.

    By agreeing to the second review the council has not admitted any wrongdoing. Experts say the issue has far reaching consequences for councils that are having to make difficult choices on how to deliver essential services, while faced with unprecedented cuts.

    A CTSI report found2 that the total GB budget for trading standards has fallen from £213 million to £124 million, since 2009, resulting in a 53% cut in staff. Meanwhile, shoddy goods and services are known to cost the economy £23 billion3 while fraud alone is estimated to cost a further £52 billion4.

    Professor Keith Brown, director of the National Centre for Post Qualifying Social Work at Bournemouth University, said robust trading standards services are essential for the delivery of adequate adult social care5.

    He said: “Section 42 of the Care Act requires local authorities to protect vulnerable people from financial abuse but most councils only prosecute one or two rogue traders a year.

    “The Office of Fair Trading tell us that 6.5% of adults have fallen victim to mass marketing scams. That’s just one type of scam but it gives you an indication of the scale of the problem.”

    Jonathan Goulding, a barrister with Gough Square Chambers, said well-funded and well-staffed trading standards departments are essential to protecting consumers from the many unfair practices they face.

    He said: “It’s encouraging that the Liverpool review will consider consumer protection duties and it will be interesting to see the weight given to them in the exercise of decision making and the funding of essential services.”

    Leon Livermore, chief executive of CTSI, said it was not just statutory duties that place obligations on councils.

    He said: “Councils must also consider the government’s enforcement priorities, the first of which focuses on consumer protection, doorstep crime, counterfeit goods and mis-selling by measurement.

    “Rarely have we been able to find any reference to these trading standards duties being taken into account and it will be interesting to see Liverpool consider them.”

    Liverpool City Council’s trading standards services first came to the attention of the courts when its former employee, Stephanie Hudson, sought a judicial review. The council instead agreed to conduct a review by way of an undertaking.

    Mrs Hudson, who has now left the trading standards profession, said it was extremely worrying that councils were making cuts with little regard to how they will discharge their duties.

    She said: “Liverpool showed they have no knowledge or understanding of the value of trading standards, that’s very clear. The amount they spend on trading standards is very small, but its impact is quite immense.”


    read more
    by dave

Overview of our Investigation Services

  • October 7, 2016 at 10:03 am
  • Surelock Investigators & Security Consultants We are pleased to announce our new slideshow video which we put together so that those who only have a minute spare (82 seconds, to be exact) can a get a good overview of our investigation services – from Brand Protection and Fraud Protection through to Internal Audits and Security Surveys and Assessments. Just click here and enjoy.

    read more
    by Alex

Conference Looks to Shape Global Response to Intellectual Property Crime

  • September 26, 2016 at 2:26 pm
  • Shaping international action against evolving threats to intellectual property is the focus of the 10th International Law Enforcement Intellectual Property (IP) Crime Conference in London.

    Globally recognized as the leading IP law enforcement conference of its kind, the event brings together some 500 senior police leaders, government officials, and security and industry experts from more than 100 countries. They will seek to further strengthen partnerships and best practices against IP crime, and review emerging crime trends in areas such as 3D printing.

    The two-day conference (19 and 20 September) is co-hosted by INTERPOL and the City of London Police, in partnership with UL (Underwriters Laboratories).

    “The global response to Intellectual Property Crime has come a long way in the last ten years, as has the global partnership work to disrupt criminality. The key to this is through the cyber disruption we coordinate with our industry partners, with the support of the Intellectual Property Office, INTERPOL, EUROPOL and overseas enforcement colleagues,” said Ian Dyson, Commissioner of the City of London Police.

    “Preventing harm to consumers from potentially dangerous counterfeit goods and preventing livelihoods supported by industries affected by IP crime will remain a primary focus for us over the next decade, as we adapt our expertise in tackling every new challenge on the horizon,” added Commissioner Dyson.

    INTERPOL’s Executive Director of Police Services, Tim Morris, said that since the creation of INTERPOL’s IP crime unit in 2003, its activities undertaken worldwide with partners had led to seizures valued at more than USD 500 million, and the training of thousands of law enforcement officers.

    “One challenge that has remained over the years is that the demand for counterfeit or pirated goods remains widespread, due in part to consumer perception that IP crime is a ‘victimless’ crime, when the opposite is true, as testified sadly by the many victims of counterfeit cough mixtures, alcohol or electric goods,” said Mr Morris.

    With IP crime fueling insecurity, impacting health safety and preventing economic growth, Mr Morris said that INTERPOL was streamlining its global efforts against rapidly evolving IP and pharmaceutical crime under its new Illicit Goods and Global Health Programme.

    “This event has developed into a vital platform gathering public and private sector organizations to share best practices, develop new tools and create stronger partnerships to advance our common purpose of combatting transnational organized IP crime, promoting safety worldwide and developing joint initiatives,” said Keith Williams, President and CEO, UL.

    Earlier this year a joint INTERPOL-Europol operation which also involved regulatory authorities saw the largest-ever seizures of fake food and drink in a bid to protect public health and safety and disrupt the organized crime networks behind the trafficking in fake goods.

    Operation Opson V led to the seizure of more than 10,000 tonnes and one million litres of hazardous fake food and drinks across 57 countries.

    “For our common response to remain relevant as transnational organized crime evolves, it must also tackle the links between this crime and others – such as human trafficking, drugs, terrorism and cybercrime, and build our capacity to address it,” said Michael Ellis, head of INTERPOL’s Trafficking in Illicit Goods unit.

    In this respect, the last decade has also seen the successful development of the International IP Crime Investigators College (IIPCIC), an INTERPOL Initiative undertaken jointly with UL University.

    The online training platform has evolved into a highly recognized learning tool for law enforcement globally, accessed by 12,000 users from more than 140 countries. INTERPOL plans to further evolve IIPCIC into a broader consortium of partners from academia, police and private sector, expanding especially in China with support from its Ministry of Public Security and China Police colleges.

    read more
    by dave

Action Against Camden Pirates

  • September 20, 2016 at 9:22 am
  • In September alone Surelock, acting on behalf of TRAP (Trademarks and Rights holders Against Piracy) and other clients, have assisted officers from Camden Trading Standards and ACG members carry out enforcements on a major screen print factory / warehouse, seven retail stores, two large stalls dedicated to music merchandise and a street market in Camden High Street area, cleaning them all of counterfeit goods. Our thanks goes to the hard work and dedication of the team at Camden TS.


    read more
    by dave