Personal data sharing between controllers
Published by a LexisNexis Information Law expert
Practice notesPersonal data sharing between controllers
Published by a LexisNexis Information Law expert
Practice notesThis Practice Note explores issues and best practice relating to the sharing of Personal data between controllers (including joint controllers and independent controllers) in general business-to-business commercial situations under the Requirements of the United Kingdom General Data protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR).
It assumes a degree of familiarity with key data protection concepts and terms and the role of the Information Commissioner’s Office (ICO). For a higher-level introduction to this topic and related issues, see: Data sharing and transactions—overview.
For a higher-level introduction to UK data protection laws generally, see Practice Note: Data protection law—new starter guide. The Data protection toolkit collates further general guidance, including guidance on key terms used in the legislation, and is a recommended starting point for data protection research.
In brief—summary of steps controllers should often take before data sharing
The UK GDPR regime seeks to ensure information about living individuals (within the definition of ‘personal data’) is used fairly and responsibly.
One of the key protections under the regime is the set of obligations placed
To view the latest version of this document and thousands of others like it,
sign-in with LexisNexis or register for a free trial.