The ICO has published a statutory code of practice under section 121 of the Data Protection Act 2018 which came into force on 5 October 2021.
The code is a practical guide for organisations about how to share personal data in compliance with data protection law as well as the best way for organisations to meet obligations of accountability. It aims to give organisations confidence to share data fairly and proportionately. The code also helps organisations to balance the benefits and risks and implement data sharing.
The ICO advices that the code should be used to help organisations review and, where necessary, update ongoing data sharing arrangements.
The code of practice:
- updates and reflects key changes in data protection law since the last data sharing code was published (in particular from the UK GDPR and the DPA 2018);
- explains new developments and their impact on data protection;
- references new areas for organisations to consider; and
- helps organisations to manage risks in sharing data, which are magnified if the quantity of data is large.
Should you require any assistance on your data sharing practices including a review of your data sharing agreements, please do not hesitate to get in touch with Hetal Ruparelia.
