Information Sharing Duties. (a) Only release or disclose information which it is authorized by law or regulation to share with or disclose to the CAC;
Information Sharing Duties. Obligations There is no single source of law that regulates the powers that an organisation has to use and to share personal information. The collection, use and disclosure of personal information is governed by a number of different areas of law as follows: • the law that governs the actions of public bodies (administrative law) • the Human Rights Xxx 0000 • the Common Law Duty of Confidence • the Data Protection Act 1998 There is a straightforward sequence of consideration, which should enable a sound judgment to be made about the ability of an organisation to share personal data: • Establish whether you have the power to carry out the function to which the data sharing relates. In doing so it will be important to ascertain whether there are express statutory restrictions on the data sharing activity proposed, or any restrictions which may be implied by the existence of other statutory, common law or other provisions. • Decide whether the sharing of the data would interfere with rights under Article 8 of the Human Rights Act in a way which would be disproportionate or unnecessary to the achievement of a legitimate aim. • Decide whether the sharing of the data would breach any common law obligations of confidence. • Decide whether the sharing of the data would be in accordance with the Data Protection Xxx 0000. A more detailed checklist of relevant legal considerations relating to data sharing partnerships is provided at Appendix C.
Information Sharing Duties. (a) Be responsible for ensuring proper handling and safeguarding by its employees, subcontractors, and authorized agents of protected information collected, created, used, maintained, or disclosed on behalf of MNsure. This responsibility includes applying appropriate screening measures and monitoring to protect information privacy, ensuring that employees and agents comply with and are properly trained regarding, as applicable, the laws listed in Attachment A, section 3.1, and having implemented administrative, physical, and technical safeguards that reasonably and appropriately protect the confidentially, integrity, and availability of any electronic protected information at rest and in transit that it creates, receives, maintains, or transmits on behalf of MNsure.
