Data Protection Policy

5.1    We are unable to give access to a third party to personal data relating to an individual unless there is a legal right to do so. Where we share data for the purposes of processing data we will ensure:
•    Contracts with partners will include a data protection clause covering the secure handling of personal data, ensuring adequate contractual provisions are contained within legal agreements in relation to data protection;
•    Maintain data sharing agreements for arrangements where there are more complex data sharing arrangements. Data sharing agreements set out the purpose of the data sharing, cover what happens to the data at each stage, set standards and help all the parties involved in sharing to be clear about their roles and responsibilities;
•    Where appropriate, the Council will seek to ensure that it is indemnified against any claims, proceedings, actions or payments of compensation or damages without limitation; and,
•    Password protect or encrypt any personal data shared electronically.

5.2    The sub-contracting of work involving the processing of personal data, will not be allowed without:
•    written confirmation from the Council;
•    the same contractual obligations being imposed on the subcontractor.

5.3    Any data protection breach will be deemed as being a breach of contract.