The ICO exists to empower you through information.

A quick reference guide to help you find the content you need on each topic.

What you need to do or consider

arrow pointing right

Where you can find it in the data sharing code

Identify your objective in sharing the data arrow pointing right
Be clear as to what data you are sharing arrow pointing right
Understand the position following UK exit from the EU arrow pointing right
Consider the benefits and risks of sharing and not sharing arrow pointing right
Carry out a Data Protection Impact Assessment (DPIA) arrow pointing right
Put in place a data sharing agreement arrow pointing right
Ensure you follow the data protection principles arrow pointing right
Check your data sharing is fair and transparent arrow pointing right
Identify at least one lawful basis for sharing the data before you start sharing it arrow pointing right
Put in place policies and procedures that allow data subjects to exercise their individual rights easily arrow pointing right
Be clear about sharing data under the law enforcement processing provisions of Part 3 DPA 2018, and sharing between the UK GDPR/Part 2 DPA 2018 and Part 3 DPA 2018 arrow pointing right
Demonstrate a compelling reason if you are planning to share children’s data, taking account of the best interests of the child arrow pointing right
Share data in an emergency as is necessary and proportionate. Plan ahead as far as possible arrow pointing right
Document your decisions about the data sharing, evidencing your compliance with data protection law arrow pointing right
Put in place quality checks on the data arrow pointing right
Arrange regular reviews of the data sharing arrangement arrow pointing right
Agree retention periods and make arrangements for secure deletion arrow pointing right