LEGAL BASIS FOR DATA SHARING. 6.1. CORE provides MHCLG with an essential evidence base for monitoring and developing government policy, in particular to assess who is accessing social housing and their associated tenancy and property details. It is necessary therefore that the personal data that forms the CORE data is processed for that purpose.
6.2. Any processing of personal data must be in accordance with the data protection principles in Article 5 of the GDPR. The processing must have a lawful basis which, in this case, is that the processing is necessary for the performance of a task carried out in the public interest or in the exercise of the controller’s official authority and therefore meets the condition at Article 6(1)(e) of the GDPR, and as clarified by section 7 of the Act which includes within this definition processing that is necessary for a function of the Crown, a Minister of the Crown or a government department.
6.3. To the extent that some of the CORE personal data is “special category” for the purposes of the GDPR then processing of the personal data is prohibited unless a condition at Article 9 is satisfied. In this case the relevant condition is that at Article 9(2)(g) on the basis that the processing is necessary for reasons of substantial public interest, and as clarified in section 9(3) and Schedule 1, Part 2 of the Act as an appropriate policy document is in place covering the processing and that the processing is again necessary for a function of the Crown, a Minister of the Crown or a government department in accordance with the condition at paragraph 6(2) of Schedule 1, Part 2.
6.4. Article 10 of the GDPR requires that the processing of any criminal convictions and offences data shall be carried out only under control of official authority or when the processing is authorised in law. In this case section 9(5) of the Act provides that this requirement is met by the processing being necessary by virtue of the same condition at Schedule 1, Part 2.
6.5. The data submitted and processed is made available to the data providers registered in the system for further use to encourage use of available evidence to assess housing requirements. CORE data providers can only access CORE personal data that has been submitted by their organisation.
6.6. From the point where they access the data the data providers become data controllers themselves and are responsible for any further use of the data, including linking it with other available data. If they wish to request a th...
LEGAL BASIS FOR DATA SHARING. The Legal Basis for sharing information under this Agreement is contained in the following statutes, each read together with UK data protection legislation: • Immigration Xxx 0000; • Immigration and Xxxxxx Xxx 0000; and • UK Borders Xxx 0000. HMI Prisons is a “public authority” as defined by the Freedom of Information Xxx 0000. HMI Prisons carry out specific tasks in the public interest. The lawful basis on which HMI Prisons and HO process personal data referred to in this Agreement is Article 6(1)(e) (public task) of the UK GDPR: processing is necessary for the performance of a task carried out in the public interest as it is necessary for the administration of justice and the exercise of a function of the Crown, a Minister of the Crown or a government department (DPA 2018, Part 2, Schedule 1 (6)).
LEGAL BASIS FOR DATA SHARING. 11.1 Data shared under this Agreement is done so on the basis that it is necessary for the performance of a task carried out in the public interest or necessary for the exercise of official authority vested in the Data Controllers as permitted by Article 6(1)(e) GDPR and Section 38 of the DPA.
11.2 Article 9(2)(i) GDPR and Section 53 of the DPA also permits the processing of healthcare Data which is “special category data” under the GDPR, where necessary for public interest reasons in the area of public health, which includes ensuring high standards of quality and safety in healthcare.
11.3 Data may also be shared by the Parties under this Agreement on the basis of Article 6(1)(d) where necessary and proportionate to protect the vital interests, or health and safety of persons.
11.4 Data may also be shared by the Parties under this Agreement on the basis of Article 6(1) (c) where processing is necessary for compliance with a legal obligation to which the Data Controller is subject.
11.5 Regulation 3(4) of the Medical Exposure Regulations enables HIQA to share Data with the EPA on the following basis: ‘The Authority shall co-operate with the EPA in the carrying out of the Agency’s functions under the Directive, in particular in relation to the withdrawal of authorisation, registration or licenses as appropriate, and may share data with the Agency for that purpose’.
11.6 The purpose of this processing is to enable the Parties to perform their functions under the following: Ionising Radiation Regulations Medical Exposure Regulations The Health Act 2007 (as amended) Radiological Protection Xxx 0000 (as amended) Section 52 of the Environmental Protection Agency Act 1992 (as amended)
11.7 Certain Data shared pursuant to this Agreement may fall to be considered under Part 5 of the Data Protection Act, which transposes the Law Enforcement Directive into Irish Law. In this instance, the processing of Data for law enforcement purposes is lawful on the basis that it is required for the performance of a function of HIQA, and the function has a legal basis in law namely the Health Act 2007(as amended) and the Medical Exposure Regulations. When processing Data for law enforcement purposes, the Data Controller shall ensure it is compliant with the relevant provisions of Part 5 of the Data Protection Act.
LEGAL BASIS FOR DATA SHARING. 6.1. CORE provides MHCLG with an essential evidence base for monitoring and developing government policy, in particular to assess who is accessing social housing and their associated tenancy and property details. It is necessary therefore that the personal data that forms the CORE data is processed for that purpose. The legal basis for processing this personal data is s(8)(d) of the Data Protection Xxx 0000 which states:
6(1) of the GDPR (lawfulness of processing), the reference in point (e) to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of the controller’s official authority includes processing of personal data that is necessary for—
LEGAL BASIS FOR DATA SHARING. 1. LPS has a statutory duty under Article 9(4) of the 1977 Order to collect rates. This requirement permits, under Article 26, the gathering of information on those who should be levied and, where necessary, to pursue fraud, non-payment or evasion of taxation and rates.
LEGAL BASIS FOR DATA SHARING. This Data Sharing Agreement has been developed to achieve the objectives as set out in Section 1. It is the intention that all aspects of information sharing and disclosure relating to this agreement shall comply with legislation that protects personal data. The data will be shared for the purposes of enabling direct care to any patient registered at a GP Practice detailed in Appendix A of this document. Therefore, under Data Protection Xxx 0000 (DPA18) / General Protection Data Regulation (GDPR), the data will be shared under the following conditions for processing:
(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Put full title of articles in for 6 and 9
(h) processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services. Patients have rights under DPA18 / GDPR, which include:
1) The right to be informed
2) The right of access
3) The right of rectification
4) The right to erasure (‘right to be forgotten’)
5) The right to restrict processing
6) The right to data portability
7) The right to object
8) Rights of automated decision making and profiling
LEGAL BASIS FOR DATA SHARING. 3.1 Parties to this ISA shall act in accordance with legislation, guidance and policy including but not limited to duties under the Care Xxx 0000, the Data Protection Legislation and all applicable law about the processing of Personal Data and privacy as amended from time to time.
3.2 Personal Data may be shared on a proportionate and necessary basis for the purposes of the SSAB discharging its duties under the Care Xxx 0000 and accompanying guidance, specifically pursuant to 14.186 of the Care and Support statutory guidance (as amended):
LEGAL BASIS FOR DATA SHARING. Patient consent is taken on the electronic data system – each practice/medical professional has access to this to support the patient and explain consents in full to ensure it meets the GDPR standard of consent. Patient Consent √ Contract √ Explicit Patient Consent √ Public Health √
LEGAL BASIS FOR DATA SHARING. GDPR Article 6(1)(e) the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. This public task would fall under Section 3a of the NHS Act 2006 as amended by the Health and Social Care Act 2012:
LEGAL BASIS FOR DATA SHARING. 5.1. The Council and MHCLG
