Sharing personal data with third parties
If you are sharing personal data with third parties outwith the University, you must establish appropriate measures and safeguards to ensure compliance with data protection legislation.
A data sharing agreement will lay out the rights and responsibilities of all parties processing the personal data. This agreement is a useful safeguard for compliance.
- Data sharing agreements are drafted by the Contracts Team
To determine if you require a data sharing agreement for your data sharing, please complete the Data Processing Involving Third Parties Questionnaire (Word, 27KB).
Be advised that whether your require an agreement or not, you will need to appropriately notify data subjects regarding the sharing of their data and identify a suitable lawful basis for processing.
If you plan to share personal data with a third party located in another country, you may also need to complete a Transfer Risk Assessment.