Data Sharing Agreement (UK)

This Data Sharing Agreement is designed for use where two data controllers wish to share personal data between them.

It is intended for one-way data sharing, but unlike a data processing agreement, the receiving party acts as a data controller in its own right and not under the instructions of, or on behalf of, the disclosing party.

The template is designed for use between two UK-based data controllers and is drafted by reference to the Data Protection Act 2018 and the UK GDPR.

When this agreement is appropriate

Use this agreement where personal data is being disclosed from one controller to another for defined purposes, and both parties need a clear written framework governing that sharing.

It is not suitable where one party is processing personal data on behalf of the other. In that situation, a data processing agreement is required instead. See Data Processing Agreement (UK), Data Processing Agreement (UK to EEA), or Data Processing Agreement (UK to Non-EEA) as appropriate.

What the agreement covers

The agreement is designed to ensure that the purposes for sharing are tightly defined, that only the appropriate personal data is shared, and that both parties are clear about why the sharing is taking place and what it is intended to achieve.

The personal data to be shared can be set out in detail in the schedule, and the arrangement should be agreed before signing and reviewed regularly once in force.

• the stated purposes for the sharing;
• compliance with data protection legislation and fair and lawful processing;
• the rights of data subjects;
• data retention, deletion, and disposal;
• transfers of shared personal data;
• appropriate technical and organisational security measures;
• training obligations; and
• the handling of personal data breaches.

Agreement structure

The document also includes provisions dealing with review and termination, disputes involving data subjects or the supervisory authority, warranties, indemnity, limitation of liability, communications, and governing law.

Its schedules cover the shared personal data and stated purposes, together with the technical and organisational data protection measures to be applied.

Data Sharing Agreement (UK) is part of Business . Just £38.50 + VAT provides unlimited downloads from Business for 1 year.