The Information Commissioner’s Office (ICO) has launched a consultation on a new statutory code of practice on the sharing of personal data.
The draft code sets out a model of good practice for public, private and third sector organisations, and covers routine data sharing as well as one-off instances where a decision is made to release data to a third party.
The code covers a number of areas including:
- what factors an organisation must take into account when coming to a decision about whether to share personal data;
- the point at which individuals should be told that their data is being shared;
- the security and staff training measures that must be put in place;
- the rights of the individual to access their personal data; and
- when it is not acceptable to share personal data.