Data Sharing Agreement
Businesses share data for all kinds of reasons. When the data is personal data, extra care is required, particularly where one organisation shares data with another organisation that will use it for its own purposes.
Available here is a UK GDPR-ready Data Sharing Agreement designed for controller-to-controller sharing (as opposed to controller-to-processor arrangements).
When Should You Use This Template?
Use this template if:
- two organisations will share personal data, and both will act as data controllers (the receiving party is not acting under the disclosing party’s instructions);
- the sharing will be one-way, but you still want the purposes and permitted uses to be tightly defined;
- you want a written framework covering key compliance areas such as lawful and fair processing, data subject rights, retention and deletion, security measures, and breach handling.
This template is not suitable where one party processes personal data on behalf of the other. In that situation, you should use a data processing agreement instead.
Data Sharing Agreement (UK)
A detailed agreement for sharing personal data between two UK-based data controllers, with schedules to define the shared data, stated purposes, and technical and organisational measures.
Why Use This Template?
A controller-to-controller arrangement can create risk if the purposes are not clear, if too much data is shared, or if each party assumes the other is responsible for compliance steps. This template helps you document the arrangement properly by:
- defining the purposes for sharing and the data to be shared in a structured way;
- setting out each party’s obligations under the UK GDPR and the Data Protection Act 2018, including security, retention, rights handling, and breach management; and
- supporting a “review and update” approach so the sharing remains appropriate over time.
For more information about this document, please click on the link below:
Data Sharing Agreement is part of Business . Just £38.50 + VAT provides unlimited downloads from Business for 1 year.