Lawful basis for Sharing. 4.1. Each Party shall comply with all relevant Information Law requirements and good practice in relation to the processing of Relevant Information shared further to this Agreement.
4.2. The Parties shall identify the lawful basis for sharing Relevant Information for each purpose and data flow, and document these in the Personal Data Agreement annexed to this Schedule.
Lawful basis for Sharing. 4.1. The Partners shall comply with all relevant Data Protection Legislation requirements and good practice in relation to the processing of Relevant Information shared further to this Agreement.
4.2. The Partners shall ensure that there is a Data Protection Impact Assessment (“DPIA”) that covers processing undertaken in pursuance of the Specified Purpose. The DPIA shall identify the lawful basis for sharing Relevant Information for each purpose and data flow.
4.3. Where appropriate, the Relevant Information to be shared shall be set out in a Data Sharing Agreement.
Lawful basis for Sharing. Most of the data being disclosed for proxy access will typically already be known to the care home. All data will be relevant to the stated purpose(s) of this agreement; to provide direct care services and any relevant ID verification that is necessary to allow for proxy access to be established. The minimum data necessary to achieve the purpose(s) is obtained. The sharing of data is necessary for the exercise of statutory functions conferred on the Parties as follows: Statutory Function 2 Health and Social Care Xxx 0000 – Sections 1 to 8 Duty to promote comprehensive health services, improve quality of services, reduce inequalities, promote autonomy, conduct research, deliver education and training, observance of the NHS Constitution and report and review performance of providers.
Lawful basis for Sharing. 4.1 Each Party shall comply with all relevant Information Law requirements and good practice in relation to the processing of Relevant Information shared further to this Agreement.
4.2 The ICB shall ensure that there is a Data Protection Impact Assessment (“DPIA”) that covers all Delegated Functions. The ICB shall identify the lawful basis for sharing Relevant Information for each purpose and data flow, and where appropriate, enter into a Data Sharing Agreement.
Lawful basis for Sharing. 4.1 The lawful basis for the CUA Members sharing Personal Data with the CUA Project Team is Article 6(1)(e) of the GDPR i.e. the processing is necessary for the performance of a task carried out in the public interest as the objective of the processing is in the pursuance of TU designation which is part of the National Strategy for Higher Education to 2030.
4.2 A further lawful basis for the sharing of personal data is Article 6(e) of the GDPR i.e. the processing is necessary for the exercise of official authority vested in the controller, under the Technological Universities Act 2018 (“the Act”). The Act is titled “An Act to provide for the establishment of technological universities; to provide for the functions and governance of technological universities; to provide for the dissolution, in certain circumstances, of institutes of technology …” The Act aims to give legal force and effect to the objective of the National Strategy for Higher Education to 2030 outlined under 4.1, above. The overall aim of the processing is to facilitate the making of an application under section 29 of the Act for designation as a Technological University, pursuant to section 36 of the Act.
4.3 The parties also have regard to the interpretive effect of Recital 48 to the GDPR in the context of their membership in common of the Technological Higher Education Association, allowing that “Controllers that are part of a group of undertakings or institutions affiliated to a central body may have a legitimate interest in transmitting personal data within the group of undertakings”.
4.4 Furthermore, part of the Agreed Purposes for the sharing of Personal Data is to prepare statistics in support of an application to become a TU. For such Processing, the CUA Members rely on Article 89 of the GDPR which permits Processing of Personal Data for purposes outside of which the data was collected where the Processing is for statistical purposes.
Lawful basis for Sharing. Most of the data being disclosed for proxy access will typically already be known to the care home. All data will be relevant to the stated purpose(s) of this agreement; to provide direct care services and any relevant ID verification that is necessary to allow for proxy access to be established. The minimum data necessary to achieve the purpose(s) is obtained. The sharing of data is necessary for the exercise of statutory functions conferred on the Parties as follows: Statutory Function
Lawful basis for Sharing. The Partners shall comply with all relevant Data Protection Legislation requirements and good practice in relation to the processing of Relevant Information shared further to this Agreement.
Lawful basis for Sharing a) Routine sharing is undertaken on the basis that it falls within the legal obligations of both parties. Under the Education Act 1994, the University of Winchester has a statutory duty to ensure that the Student Union operates in a fair and democratic manner6. The Student Union works alongside the University of Winchester in ensuring that the affairs of the Union are properly conducted and that the education and welfare needs of the members of the Student Union are being met7.
b) The sharing is considered necessary and proportionate and does not prejudice the rights, freedoms or legitimate interests of the data subjects. Individuals may opt out of membership of the Union at any time and in the case of the HEAR, control over who this information is shared with outside the University rests with the individual.
