External Data Sharing
Sharing personal data externally will require either a contract, data sharing agreement, data processing agreement or a collaboration agreement depending on who the data is being shared with and the purpose. If you do not have any of these in place or it is a new process contact Governance Services for template documents and guidance.
The University has standard Terms and Conditions which apply to agreements entered into with other Data Controllers or with Data Processors, as follows:
All Processors contracting with the University to process data on behalf of the University (Controller) whether that is by actual transfer of personal data to them or by the provision of systems or services are subject to the University's Data Processing Terms and Conditions. There are various versions dependent on the situation:
Yellow highlighted sections in document to be included in Data Processing Schedules, Principal Contract and/or procurement documentation.
(this is the responsibility of colleague outsourcing processing, not Procurement or Governance Services)
The following term and conditions are applicable to all agreements relating to data sharing with other Data Controllers:
- Controllers in the UK and Adequate Countries:
(To be used with the appropriate Data Sharing Agreement)
Where personal data is transferred to parties outside the UK, to countries which do not have data protection adequacy arrangements with the UK, the following clauses are applicable to all data sharing / processing agreements:
- Controllers and Processors outwith the UK and Adequate Countries:
(To be used with the completed clauses parts 1 to 3)
The signatory for 麻豆社区 must have appropriate powers under the University’s Schedule of Delegated Financial Authority.