Sharing personal data with third parties
If you are sharing personal data with third parties outwith the University, you must establish appropriate measures and safeguards to ensure compliance with data protection legislation.
A data sharing agreement will lay out the rights and responsibilities of all parties processing the personal data. This agreement is a compliance requirement.
- Data sharing agreements are drafted by the Contracts Team
To determine if you require a data sharing agreement for your data sharing, please complete the Data Processing Involving Third Parties Questionnaire (Word, 27KB).
If you plan to share personal data with a third party located in another country, you may also need to complete a Transfer Risk Assessment.
If you are buying a service or a product from a third party, please also consult the IT supplier purchase process.