Sharing personal data with third parties

If you are sharing personal data with third parties outwith the University, you must establish appropriate measures and safeguards to ensure compliance with data protection legislation.

A data sharing agreement will lay out the rights and responsibilities of all parties processing the personal data. This agreement is a useful safeguard for compliance. Data sharing agreements are drafted by the Contracts Team

To determine if you require a data sharing agreement for your data sharing, please complete the Questionnaire for Data Processing Involving Third Parties.

Be advised that whether your require an agreement or not, you will need to appropriately notify data subjects regarding the sharing of their data and identify a suitable lawful basis for processing.