Third Parties as Data Controllers Clause Samples

Third Parties as Data Controllers. Where the third party seeks sharing of data controlled by the Department for the third party’s own purposes (for example, where the third party requires the data to fulfil its own statutory function), the third party will also become a data controller of that data, for the purposes that it will process the personal data. It will be required to specify these in the agreement request. Any agreement to supply of personal data requested by the third party is limited to the third party processing the data only for the specified purposes that are agreed. Where it is exercising a statutory function, the third party will be required to specify the function it is exercising and the statutory instrument under which it is exercising that function.