Information Sharing Protocols. The following section describes the information needs of the agreement signatories. This agreement will go some way towards meeting those needs by securing access to information and facilitating information sharing agreements and exchanges. Information should be shared under this agreement by the completion of information sharing agreements and information exchange forms (see Sections E to G). Each organisation signed up to this Information Sharing Agreement will be responsible for ensuring the development and maintenance of its own information management systems. The guidance above should be followed to maximise security, quality and accuracy. Information Sharing Needs should be outlined here as to what the LSP hope to achieve in more detail. To assist with information sharing an ‗Information Disclosure C hecklist‘ has been produced (see below). The information Disclosure Checklist poses a series of questions. The diagram can assist with decision making. An officer deciding whether to share information can use the diagram starting at the top of the page and ask him/herself each question in turn. If each question can be answered with a ‗yes‘, information exchange or disclosure can take place. Should a question be responded to with ‗no‘ then more work needs to be done to allow the legal disclosure of information, or there is a good reason why information should not be shared. Additional questions may also need to be asked including: Did I obtain information under a power of duty which limits what I can do with it/whether I can allow secondary disclosure to occur? If personal or confidential information is required: Is there another way to meet the information needs that would have less impact on confidentiality. Would non-personal data suffice? Information Disclosure Checklist Taking into account the common law duty of confidence and the Data protection principles do I have a legal power to disclose this information? Yes No Do I/does my organisation own the information? Have I got permission to pass the information on from the owner? No Yes Is the organisation making the request signed up to the information Sharing Agreement/does my employer have an agreement with them? No Yes Does the purpose for which the information is required fit within this agreement or another information exchange agreement? No Yes Is the level of information required appropriate for the information needs? Is there sufficient ‗need to know‘? No Yes Personal or sensitive Non-personal/...
Information Sharing Protocols. 8.1 The terms of this agreement will be governed by the agreed Information Sharing Protocol that has been agreed and signed by the three partner agencies.
Information Sharing Protocols. The RA may establish other arrangements with DtC Agencies, including good practice guidance, protocols and memoranda of understanding (the protocols). These protocols will set out a common set of rules to be adopted by the RA and DtC agencies involved in data sharing under MAPPA. The protocols will cover the two main types of data sharing within and outside of MAPPA: systematic, routine data sharing where the same data sets are shared between MAPPA agencies for MAPPA established purposes; and one-off decisions to share data for any of a range of purposes within MAPPA or to disclose outside of MAPPA with the Third sector and/or private sector contractors. The protocols will focus on the sharing of personal data and sensitive personal data between joint data controllers, i.e. where both agencies determine the purposes for which and the manner in which the personal data is processed. Where a data controller shares data with data processors, i.e. another party that processes personal data on its behalf, the data controller must ensure, in a written contract, that: the processor only acts on instructions from the data controller; and has security in place that is equivalent to that imposed on the data controller by the seventh data protection principle. The protocols will document the following issues: The legal basis for the sharing the purpose, or purposes, of the sharing; the potential recipients or types of recipient and the circumstances in which they will have access; the data to be shared; data quality – accuracy, relevance, usability etc; data security; retention of shared data; individuals’ rights – procedures for dealing with access requests, queries and complaints; review of effectiveness/termination of the sharing agreement; and
