Quality, Product Safety, Liability and Intellectual PropertyIntroduction and ContextSupply chains do more than move materials and products. They transfer legal responsibility, technical information, safety risks, and intellectual-property value between organisations. A purchasing manager who selects a supplier therefore participates in decisions that may affect product conformity, consumer safety, regulatory compliance, brand reputation, and litigation exposure. Quality and safety obligations arise from several sources: contract terms, statutory regulation, technical standards, certification schemes, negligence law, product-liability regimes, consumer-protection rules, customs law, and intellectual-property law. The applicable rules depend on the jurisdictions in which products are designed, manufactured, sold, imported, installed, and used. Contractual allocation of risk is important, but it does not always eliminate statutory liability or public-law duties. The central managerial challenge is to convert legal and technical requirements into controlled supply-chain processes. These include supplier qualification, specification control, inspection, testing, traceability, change management, documentation, recall readiness, protection of confidential information, and disciplined ownership of tooling and design outputs. Learning ObjectivesBy the end of this chapter, readers should be able to: - distinguish quality, conformity, product safety, certification, and regulatory compliance;
- analyse the principal bases of product liability and allocate contractual risk appropriately;
- design supplier controls for traceability, counterfeit prevention, non-conformance, and recalls;
- evaluate ownership and permitted use of designs, tooling, data, software, and technical information;
- protect trade secrets and confidential information throughout the supply chain;
- assess licensing, intellectual-property infringement, and freedom-to-operate risks; and
- establish governance mechanisms that integrate legal, engineering, procurement, and quality responsibilities.
1. Quality, Conformity and Safety: Distinct but Connected ConceptsQuality is the degree to which a product, process, or service satisfies specified or implied requirements. Quality may concern dimensions, performance, reliability, durability, appearance, documentation, delivery, and service support. A product may be of poor commercial quality without being legally unsafe; conversely, a product may meet ordinary quality expectations but still present an unacceptable safety risk. Conformity means compliance with a defined requirement. Requirements may be contained in a purchase specification, drawing, standard, regulation, approved sample, statement of work, or customer order. Conformity is meaningful only when the requirement is sufficiently clear and measurable. Product safety concerns whether a product, when reasonably used or misused in foreseeable ways, creates unacceptable risks of injury, death, property damage, environmental harm, or other legally recognised loss. Safety analysis should consider the entire product life cycle: design, manufacture, packaging, transport, installation, operation, maintenance, modification, disposal, and foreseeable misuse. Certification is a formal attestation by an organisation, regulator, accredited body, or manufacturer that specified requirements have been met. Certification is not automatically proof that every unit is safe or defect-free. Its legal effect depends on the governing legislation, certification scheme, scope, validity period, surveillance arrangements, and continuing conformity. A useful hierarchy is: | Layer | Question | Typical evidence |
|---|
| Regulation | What is legally mandatory? | Statute, regulation, regulator guidance | | Standard | What recognised technical method or benchmark applies? | National, international, or industry standard | | Specification | What has the buyer required contractually? | Drawing, purchase order, specification | | Process control | How is conformity maintained? | Quality plan, inspection records, audits | | Assurance | How can conformity be demonstrated? | Test reports, certificates, declarations, traceability records |
A supplier’s statement that a product is “certified” should therefore trigger further questions: certified against what, by whom, for which model, under what version of the standard, and with what continuing surveillance? 2. Regulatory Standards and Certification Governance2.1 Identifying applicable requirementsRegulatory analysis begins with product classification and market mapping. Procurement should identify: - the product category and intended use;
- countries of manufacture, import, sale, installation, and use;
- applicable safety, environmental, chemical, labelling, packaging, electrical, transport, and cybersecurity requirements;
- mandatory conformity-assessment procedures;
- records and retention periods;
- reporting, registration, and recall duties; and
- restrictions on substances, components, origin, or suppliers.
The legal requirement should be translated into a compliance matrix. Each requirement should have an owner, evidence source, verification method, review date, and escalation route. This prevents the common error of treating a general standard as a complete substitute for jurisdiction-specific law. 2.2 Standards and standards incorporationStandards may be voluntary, contractual, or legally incorporated by reference. A purchase contract should identify the exact edition or revision of a standard. “Comply with the applicable standard” may create uncertainty if several editions or interpretations exist. The contract should address the effect of future revisions and identify who bears the cost of compliance changes. Standards should not be copied carelessly into supplier agreements. Copyright and licensing restrictions may apply to standards documents. It is usually preferable to identify the standard and relevant clauses lawfully, while providing controlled technical requirements and acceptance criteria. 2.3 Certification controlsProcurement should verify: - the certifying body’s competence and accreditation;
- the precise product model, site, process, and scope covered;
- certificate validity and expiry;
- whether critical components are included;
- whether factory audits or surveillance are required;
- whether the supplier may use a conformity mark and how;
- whether design or manufacturing changes require reassessment; and
- whether test reports are genuine, complete, and traceable to tested samples.
A certificate can be invalidated by unauthorised material substitutions, manufacturing at an unapproved site, software changes, expired testing, or use outside the declared conditions. Supplier contracts should require immediate notification of certificate suspension, withdrawal, regulatory investigation, or material change. 3. Contractual Quality ArchitectureA robust supply contract makes technical and legal obligations operational. Important clauses include: - detailed specifications and approved drawings;
- precedence rules when documents conflict;
- sampling, inspection, and test requirements;
- acceptance and rejection rights;
- warranties of conformity, safety, title, and regulatory compliance;
- control of subcontracting and critical processes;
- change-notification and prior-approval requirements;
- audit and access rights;
- records and retention obligations;
- non-conformance correction and root-cause analysis;
- indemnities, insurance, limitation-of-liability provisions, and their exceptions;
- recall cooperation and cost allocation;
- intellectual-property ownership and licence rights; and
- survival of confidentiality, record, indemnity, and audit obligations.
Acceptance of goods should not automatically waive latent-defect rights. The contract should distinguish visible non-conformance discoverable at inspection from latent defects, safety defects, fraud, and breaches that emerge later. “As is” language may be inappropriate or ineffective for regulated or safety-critical products. Supplier quality agreementsA quality agreement is a controlled document that allocates technical responsibilities between buyer and supplier. It should identify who approves specifications, validates processes, releases batches, investigates failures, manages deviations, retains samples, responds to regulators, and controls changes. The agreement must be consistent with the main commercial contract; conflicting documents create interpretive and operational risk. 4. Product Liability: Risk, Responsibility and CausationProduct liability is the legal responsibility arising from harm caused by a product. The precise rules vary by jurisdiction, but claims commonly arise through four routes. 4.1 Contractual liabilityA buyer may claim for breach of express terms, implied terms, warranties, or conditions. Typical issues include failure to meet specification, delivery of defective goods, inaccurate certificates, or failure to provide required warnings. Contract claims generally focus on the agreed obligations and recoverable loss. 4.2 NegligenceNegligence commonly requires a duty of care, breach of that duty, causation, and legally recognised damage. In supply chains, relevant conduct may include inadequate design review, poor process control, failure to inspect, ignoring warning signals, or inadequate warnings and instructions. A company may face liability even where no express contract exists with the injured user, depending on applicable law. 4.3 Strict or statutory product liabilitySome legal systems impose liability for defective products without requiring proof of negligence. The claimant may need to show that the product was defective, that the defect caused injury or damage, and that statutory conditions are satisfied. Defects may be classified as: - manufacturing defects: the individual unit departed from its intended design;
- design defects: the design itself created unreasonable or unacceptable risk; and
- warning or instruction defects: users were not adequately informed about hazards or safe use.
4.4 Regulatory and criminal exposureUnsafe products may trigger administrative penalties, stop-sale orders, mandatory reporting, criminal proceedings, or director and officer consequences. A contract cannot generally authorise a party to breach mandatory safety law. Internal governance must therefore treat regulatory compliance as more than a commercial warranty. The supply-chain liability chainDesigners, brand owners, manufacturers, importers, distributors, installers, repairers, and retailers may each have distinct obligations. A procurement organisation should ask: - Who designed the product?
- Who selected and approved critical components?
- Who controlled manufacturing and testing?
- Who placed the product on the market?
- Who provided instructions and warnings?
- Who owns the technical file and test evidence?
- Who can identify affected units rapidly?
Risk allocation should be supported by actual control. An indemnity from a weak supplier is not a substitute for competent design review, insurance, inspection, and traceability. 5. Traceability, Non-Conformance and Recall ManagementTraceability is the ability to track a material, component, batch, serial number, process record, shipment, or customer destination through defined stages of the supply chain. Its purpose is not merely administrative. Traceability limits the scope of a recall, supports root-cause analysis, demonstrates due diligence, and enables accurate regulatory reporting. A traceability system should define: - unique product, batch, lot, or serial identifiers;
- links between raw materials, components, work orders, operators, machines, and test results;
- supplier and subcontractor records;
- shipment and customer records;
- rework, repair, deviation, and disposition history; and
- retention, access, and data-integrity controls.
Non-conforming product processA controlled process normally follows this sequence: - identify and contain suspected product;
- segregate physical stock and block system transactions;
- assess immediate safety and regulatory risk;
- record the non-conformance and affected scope;
- investigate root cause using evidence rather than assumption;
- decide disposition—return, rework, repair, concession, destruction, or release;
- obtain authorised approval for any deviation;
- implement corrective and preventive action; and
- verify effectiveness and preserve records.
A buyer should not permit a supplier to issue repeated “use-as-is” concessions without trend analysis. Concessions may be appropriate for minor deviations, but they are dangerous where safety margins, regulatory conditions, interchangeability, or customer requirements are affected. Recall readinessA recall plan should specify decision authority, legal review, regulator notification, customer communication, product identification, return logistics, replacement or repair, media handling, cost records, and post-recall verification. A recall may be voluntary or mandatory, depending on the legal system. Organisations should conduct exercises because contact lists, inventory records, and serial-number data often fail under time pressure. 6. Counterfeit Goods and Authenticity AssuranceCounterfeit goods include unauthorised copies, falsely marked products, substituted components, reused certificates, and products presented as genuine when they are not. Counterfeiting can create safety, warranty, cybersecurity, customs, and reputational risks. Controls should be risk-based. For critical items, organisations may use approved-source lists, direct purchasing, supplier audits, secure packaging, serialisation, tamper-evident seals, certificate verification, incoming inspection, laboratory testing, authorised-distributor confirmation, and segregation of suspect goods. Digital tools such as blockchain or digital twins may support evidence, but they do not prove authenticity if false data enter the system at source. When counterfeit goods are suspected, the organisation should preserve evidence, quarantine stock, avoid destroying evidence prematurely, notify relevant legal and security teams, assess customer exposure, and consider customs or law-enforcement reporting. A supplier’s low price is not itself proof of counterfeiting, but unexplained discounts, unusual packaging, inconsistent markings, or incomplete provenance justify enhanced verification. 7. Intellectual Property in Purchasing and Supply ChainsIntellectual property (IP) protects intangible creations and commercial identifiers. Relevant categories include: | IP right or interest | Typical supply-chain relevance |
|---|
| Patent | Invention, process, component, or technical solution | | Design right | Visual or industrial design features | | Copyright | Drawings, software, manuals, photographs, databases, specifications | | Trade mark | Brand, logo, product name, certification mark | | Trade secret/confidential information | Know-how, formulas, source code, methods, pricing, customer data | | Database or related rights | Structured technical, supplier, or market data | | Semiconductor layout rights | Chip topographies in relevant jurisdictions |
Ownership differs from possession. Receiving a drawing does not necessarily grant the right to reproduce it, modify it, disclose it, or give it to another supplier. A procurement contract must address both ownership and permitted use. Background and foreground IPBackground IP is IP owned or controlled by a party before the project or developed independently of it. Foreground IP is created during the project or specifically for the buyer. The contract should define both terms and address improvements, derivative works, jointly developed inventions, employee and subcontractor rights, moral rights where applicable, registration cooperation, and licence-back arrangements. A common commercial model is buyer ownership of bespoke deliverables, with the supplier retaining general know-how and receiving a limited licence to use reusable technology. Another model gives the supplier ownership but grants the buyer a perpetual, transferable, royalty-free licence. The appropriate model depends on strategic dependence, uniqueness, switching cost, and the buyer’s need for repair, second sourcing, and continuity. Tooling and mouldsTooling includes moulds, dies, jigs, fixtures, patterns, test equipment, and special-purpose production assets. Contracts should state: - who pays for tooling;
- who owns it;
- how ownership is marked and recorded;
- where it is stored;
- who maintains, insures, and calibrates it;
- whether the supplier may use it for other customers;
- whether it may be modified;
- how access and transfer occur on termination; and
- what happens to residual materials and tooling records.
A buyer that pays for tooling but fails to mark or register it may face practical difficulty recovering it, especially during supplier insolvency. Ownership language should be supported by physical control, asset registers, audits, and clear release procedures. 8. Licensing and Freedom to OperateA licence is permission to exercise specified rights that would otherwise be restricted. A supply contract should identify the licensed subject matter, territory, field of use, duration, exclusivity, sublicensing, transfer, royalties, audit rights, confidentiality, improvements, termination, and post-termination rights. For software and technical products, the licence should address source code access, escrow where justified, updates, security patches, open-source components, third-party dependencies, data rights, and use by affiliates or contract manufacturers. Freedom to operate (FTO) is an assessment of whether planned activities may infringe third-party rights in relevant markets. FTO is not a guarantee that no claim will ever arise. It is a reasoned assessment based on identified rights, claim scope, jurisdiction, validity, expiration, licences, and intended activity. Procurement should involve qualified IP counsel where products are novel, high value, patent-intensive, or intended for multiple markets. Supplier warranties of non-infringement are useful but incomplete. The contract should require disclosure of claims, notices, and known third-party rights; cooperation in defence; options for substitution, modification, or licence acquisition; and a business-continuity solution if an injunction threatens supply. 9. Trade Secrets and Proprietary InformationTrade-secret protection generally depends on information having commercial value because it is secret and being subject to reasonable measures to maintain secrecy. Protection may be lost through uncontrolled disclosure, inadequate access restrictions, careless labelling, or failure to manage third parties. A supply-chain confidentiality programme should combine: - need-to-know access;
- classification and marking;
- non-disclosure agreements;
- secure portals and encryption;
- restrictions on copying, photographing, and personal devices;
- controlled drawings and revision systems;
- supplier personnel and subcontractor obligations;
- return or destruction procedures;
- exit interviews and access revocation; and
- monitoring and incident response.
Non-disclosure agreements should define confidential information, permitted purpose, exclusions, compelled disclosure, duration, security duties, breach remedies, and return or destruction. Confidentiality should not be drafted so broadly that it becomes impossible to administer; classification and practical controls matter as much as wording. Artificial intelligence introduces additional risk. Uploading drawings, source code, pricing, failure data, or supplier information into an uncontrolled generative-AI service may disclose proprietary information or create uncertainty about model training and output ownership. Organisations should establish approved tools, prohibited data categories, human review, logging, retention, and supplier assurances regarding data use. 10. Governance and Operating ModelLegal, procurement, engineering, quality, compliance, information security, and operations must share responsibility. A practical governance model includes: - a product-risk owner;
- a regulatory and standards register;
- a supplier criticality classification;
- stage-gate approval for design and sourcing;
- documented change control;
- periodic supplier performance and compliance review;
- incident and recall escalation;
- IP register and access controls; and
- management review of residual risk.
Supplier criticality can be assessed qualitatively using safety impact, regulatory sensitivity, substitutability, supply concentration, IP dependence, and detectability of failure. High-criticality suppliers require deeper qualification, stronger audit rights, validated processes, and more frequent review. Technology can improve control through enterprise resource planning links, serialisation, electronic certificates, version-controlled specifications, automated expiry alerts, and anomaly detection. However, automation does not replace legal judgement. A system may accurately preserve false, incomplete, or unauthorised data. Governance must therefore address data provenance, role-based access, audit trails, cybersecurity, and human accountability. 11. Illustrative Case: The Unapproved Component ChangeBackgroundA manufacturer of industrial battery systems purchased a thermal sensor from an overseas supplier. The purchase specification required a named sensor family, a defined operating range, traceability by lot, and prior written approval for changes. The supplier held a valid quality certification and had passed an earlier audit. ProblemTo address a component shortage, the supplier substituted a visually similar sensor without informing the buyer. The substitute had a slower response time. During field operation, several battery packs overheated before protective shutdown occurred. No injury occurred, but two customers reported equipment damage. AnalysisThe issue was not simply a defective batch. It involved: - breach of the contractual change-control requirement;
- possible misrepresentation in the certificate of conformity;
- inadequate incoming inspection because the substitute passed visual checks;
- incomplete traceability between sensor lots and finished serial numbers;
- potential product-safety and reporting duties; and
- exposure to warranty, negligence, recall, and property-damage claims.
The buyer’s reliance on supplier certification did not eliminate its own duty to assess a safety-critical component. The supplier’s indemnity was valuable only if the supplier remained solvent and the loss fell within the indemnity wording. Approach and solutionThe buyer quarantined unused stock, identified affected serial numbers, stopped shipment, notified its legal and safety teams, and tested retained samples. It informed customers about inspection requirements and replaced sensors in affected units. It required the supplier to provide production and shipping records, conducted a special audit, and reviewed the supplier’s subcontracting and shortage-management controls. Corrective measures included dual verification of critical components, electrical and functional testing rather than visual inspection alone, mandatory written approval of substitutions, electronic change notices, supplier contingency plans, and a revised contract requiring immediate notification of shortages, deviations, certification changes, and subcontractor involvement. OutcomeThe recall was limited because partial serialisation records permitted identification of affected units. Nevertheless, the event caused service costs, customer disruption, engineering expense, and reputational damage. The buyer retained the supplier but placed it under enhanced monitoring and qualified an alternative source. Learning points- Certification is evidence, not a complete control system.
- Critical-component specifications must be linked to change approval and testing.
- Traceability has financial value because it narrows recall scope.
- Supplier continuity planning must address unauthorised substitutions.
- Contracts, technical controls, and organisational behaviour must reinforce one another.
12. Challenges, Limitations and Ethical IssuesNo control system eliminates risk. Excessive inspection may increase cost without detecting design defects. Broad indemnities may create false confidence. Audit reports can become outdated, and certification can be misunderstood as proof of universal compliance. Traceability systems may raise privacy and cybersecurity concerns. Small suppliers may lack the resources to meet complex documentation requirements, creating barriers to entry and concentration risk. Ethically, procurement decisions should not reward suppliers that conceal defects, exploit workers, falsify test reports, or transfer unreasonable safety risk to users. Cost reduction must not be achieved by weakening critical controls. Conflicts of interest may arise when a buyer accepts a supplier’s certificate, test laboratory, or design without independent scrutiny. Whistleblowing channels, protected escalation, and non-retaliation policies are important safeguards. Managers should also avoid imposing requirements that are technically unnecessary or commercially oppressive. Proportionate, transparent, risk-based controls generally produce more reliable compliance than contractual overreach. Best-Practice ChecklistBefore approving a critical supplier or product, ask: - Are all applicable markets and mandatory requirements identified?
- Are specifications measurable, controlled, and revision-managed?
- Has the supplier demonstrated capability rather than merely supplied certificates?
- Are safety-critical characteristics identified and validated?
- Are changes, substitutions, subcontracting, and deviations controlled?
- Can affected units, materials, and customers be traced quickly?
- Is there a tested non-conformance and recall procedure?
- Are counterfeit risks addressed through provenance and inspection controls?
- Do contracts clearly allocate background IP, foreground IP, tooling, and data rights?
- Are confidentiality and AI-use controls appropriate?
- Is there a realistic remedy if the supplier becomes unavailable or insolvent?
- Are performance, compliance, incidents, and corrective actions reviewed by management?
Chapter SummaryQuality, product safety, liability, and intellectual property are interconnected supply-chain risks. Quality concerns satisfaction of requirements; conformity concerns compliance with defined requirements; safety concerns unacceptable risk; and certification provides bounded evidence of compliance rather than absolute assurance. Effective procurement translates law and standards into specifications, supplier controls, testing, change management, records, and accountability. Product liability may arise from contract, negligence, strict or statutory regimes, and regulatory enforcement. Liability cannot be managed solely through indemnities: design control, supplier qualification, traceability, recall readiness, and insurance are essential. Counterfeit prevention requires provenance, authentication, segregation, and evidence preservation. IP management requires explicit treatment of ownership and permitted use. Contracts should distinguish background and foreground IP, address tooling and improvements, provide workable licences, protect trade secrets, and consider freedom to operate. Confidential information must be protected through legal, technical, and organisational controls, including responsible use of AI tools. The strongest governance model integrates procurement, engineering, quality, legal, compliance, security, and operations around risk-based decisions. Key TermsQuality: Degree to which a product or process satisfies specified or implied requirements. Conformity: Compliance with an identified requirement. Product safety: Control of risks created by a product during foreseeable use or misuse. Certification: Formal attestation that defined requirements have been met. Quality agreement: Document allocating technical and quality responsibilities between organisations. Latent defect: Defect not reasonably discoverable through ordinary initial inspection. Product liability: Legal responsibility for harm caused by a product. Manufacturing defect: Departure of an individual unit from its intended design. Design defect: Safety deficiency inherent in the product design. Traceability: Ability to track materials, products, records, and destinations through the supply chain. Recall: Action to retrieve, repair, replace, or correct products already supplied. Counterfeit: Unauthorised or falsely represented product, component, or document. Patent: Exclusive legal right relating to a qualifying invention. Trade mark: Sign identifying the commercial source of goods or services. Trade secret: Commercially valuable secret information protected by reasonable secrecy measures. Background IP: Intellectual property owned or controlled before a project or developed independently of it. Foreground IP: Intellectual property created through or specifically for a project. Tooling: Special production assets such as moulds, dies, jigs, and fixtures. Licence: Permission to exercise specified intellectual-property rights. Freedom to operate: Assessment of whether planned activity may infringe third-party rights. Review QuestionsShort Answer Questions- Distinguish quality, conformity, product safety, and certification.
- Why is a supplier certificate not conclusive evidence that every supplied unit is safe?
- Identify the three common categories of product defect.
- What information should a traceability system connect?
- Distinguish background IP from foreground IP.
Long Answer Questions- Explain how a purchasing organisation should build a regulatory and standards compliance matrix for an international supply chain.
- Discuss the contractual and operational controls required for safety-critical supplier changes.
- Analyse the relationship between product liability, indemnities, insurance, and supplier capability.
- Explain how tooling ownership and access should be managed when a supplier manufactures bespoke products.
- Evaluate the legal, technical, and organisational measures required to protect trade secrets shared with suppliers.
Analytical / Application Questions- A supplier has a current certificate but refuses to disclose its subcontractor for a critical process. Should the buyer accept the certificate? Analyse the issue and propose controls.
- A recall database can identify customer shipments but cannot link finished serial numbers to component lots. Assess the risks and design a corrective programme.
- A buyer funded a mould, but the contract is silent on ownership and the supplier is entering insolvency. Analyse the buyer’s commercial and legal priorities and propose preventive contract terms.
Multiple Choice Questions with AnswersQuestion 1Which statement best distinguishes certification from product safety assurance? A. Certification always guarantees that every individual unit is defect-free. B. Certification is evidence against defined requirements and does not replace continuing controls. C. Certification applies only to voluntary commercial preferences. D. Certification eliminates the need for traceability. Correct Answer: B. Certification is evidence against defined requirements and does not replace continuing controls. Question 2A component differs from the approved design because the supplier used a cheaper material in one production batch. This is primarily what type of defect? A. Design defect B. Warning defect C. Manufacturing defect D. Licensing defect Correct Answer: C. Manufacturing defect Question 3Which traceability capability most directly limits the scope of a recall? A. Tracking affected lots to finished serial numbers and customers B. Recording only the supplier’s annual revenue C. Maintaining a general product brochure D. Using a single product description for all units Correct Answer: A. Tracking affected lots to finished serial numbers and customers Question 4Which contractual provision most directly controls unauthorised supplier substitutions? A. A marketing-use clause B. A prior-approval and change-notification clause C. A general force-majeure clause only D. A clause governing office accommodation Correct Answer: B. A prior-approval and change-notification clause Question 5What is the main purpose of a product recall plan? A. To prevent all future price increases B. To identify, contain, communicate, and correct affected products C. To transfer every legal duty to the retailer D. To replace supplier qualification Correct Answer: B. To identify, contain, communicate, and correct affected products Question 6Which statement about background and foreground IP is correct? A. Background IP is always owned by the buyer. B. Foreground IP means all information disclosed before contracting. C. Background IP predates or is independent of the project, while foreground IP is created through or for it. D. The distinction applies only to trade marks. Correct Answer: C. Background IP predates or is independent of the project, while foreground IP is created through or for it. Question 7Which measure best supports protection of a supplier-shared trade secret? A. Unlimited access for all employees B. Need-to-know access combined with confidentiality obligations and technical controls C. Public disclosure to establish ownership D. Avoiding any record of the information Correct Answer: B. Need-to-know access combined with confidentiality obligations and technical controls Question 8Why is a supplier indemnity not a complete substitute for quality controls? A. Indemnities can never be included in contracts. B. An indemnity may be difficult to recover and does not prevent unsafe products from reaching users. C. Indemnities apply only to intellectual property. D. Quality controls are relevant only after litigation. Correct Answer: B. An indemnity may be difficult to recover and does not prevent unsafe products from reaching users. Question 9Which item is most appropriately addressed in a tooling clause? A. The supplier’s holiday calendar B. Ownership, marking, maintenance, access, and transfer of moulds and fixtures C. The buyer’s corporate logo colour only D. The employee pension scheme Correct Answer: B. Ownership, marking, maintenance, access, and transfer of moulds and fixtures Question 10What does freedom-to-operate analysis assess? A. Whether a product is likely to meet its sales forecast B. Whether planned activities may infringe relevant third-party rights C. Whether a supplier has enough warehouse space D. Whether a certificate has been printed in colour Correct Answer: B. Whether planned activities may infringe relevant third-party rights
|