Whether using Groups or Networks to share between organisations we recommend you ensure you have checked you have the correct policies and agreements in place.
You may need to:
- update your Privacy Notice
- have a data-sharing agreement in place with the other organisation/s. These typically cover:
- what is being shared
- who has access to the data
- for how long
- for what purpose
- how the data is being shared
A resource you might find useful to assist you is the Data protection: a toolkit for schools produced by the Department for Education.
The ICO website also has some useful information about data sharing:
“If you are sharing personal data with other organisations you should consider whether you need to actively inform the data subjects about this. Data can be shared in many different scenarios, including businesses selling data on a commercial basis or public authorities sharing data to improve the delivery of services.
In order to treat people fairly prior to sharing information, you must carefully consider what any recipient organisation is going to do with it and what the effect on people is likely to be. It is good practice to obtain an assurance about this, for example in the form of a contract or a written data sharing agreement.”
The ICO also provides templates that you might want to use: