Statutory Sector Bodies. This ISA is intended to operate across all partner organisations in the statutory sector including, but not restricted to: health and local authorities, and those organisations operating in the private and voluntary sectors where they are undertaking a statutory function. The specific signatories to this agreement are listed in section 9. All organisations operating within a statutory framework must show that they have the necessary legal basis (express or implied powers, for example, public task from the data subject) to process and disclose person- identifiable information. These can be derived from the specific legislative requirements to provide services that, by their very nature, necessitate the sharing of information if they are to be delivered effectively. In this context, statutory sector bodies and those carrying out statutory functions on their behalf, should first consider what statutory powers or duties they may be subject to, in relation to sharing personal confidential data, and also should consider the issue of data subject consent. However, sharing of information must still be in accordance with the individual’s statutory rights and legitimate expectations. Where a statutory body is bound by particular legislation, regulation or guidance in respect of data subject consent, then this must be adhered to (see Section 7).
Statutory Sector Bodies. This document is intended to operate across all organisations in the statutory sector including, but not restricted to: criminal justice, health, local authorities, education/learning/training providers, and t h o s e o r g a n i s a t i o n s o p e r a t i n g i n t h e private and voluntary sectors where they are undertaking a statutory function. All organisations operating within a statutory framework must show that they have the necessary legal basis (express or implied powers) to process and disclose person-identifiable information. These can be derived from the specific legislative requirements to provide services that, by their very nature, necessitate the sharing of information if they are to be delivered effectively. In this context, statutory sector bodies and those carrying out statutory functions on their behalf, should first consider what statutory powers or duties they may be subject to, in relation to sharing person-identifiable information, and also should consider the issue of service user consent. However, sharing of information must still be in accordance with the service users’ statutory rights and legitimate expectations. Where a statutory body is bound by particular legislation, regulation or guidance in respect of service user consent, then this must be adhered to (see Section 6).
