It is not necessary to have a data sharing agreement in all situations, for example. B if release is already strictly defined or if it is a limited one-time opportunity. 6.2.2 Ensure that it does not respond to this request, unless it is necessary to respond to the company`s documented instructions or in accordance with the applicable laws to which the subcontractor is subject, in which case the subcontractor must inform the company of this legal requirement to the extent permitted by law before the subcontractor responds to the request. Second, it avoids any misunderstanding on the part of the data provider and the Agency receiving the data by ensuring that all issues relating to the use of the data are discussed. Before sharing the data, the provider and recipient must speak in person or over the phone to discuss issues related to the disclosure and use of the data and a collaborative understanding that will then be documented in a data sharing agreement. Any data protection declaration should clearly indicate to data subjects who are jointly responsible and who is responsible for what. For example, when a combined service is provided, data subjects need to know which organization they are going to to request access to topics. Formal data-sharing agreements are not necessary if informal agreements are sufficient to achieve the purpose of sharing. The rights and interests of stakeholders should be duly taken into account in all measures taken. Agreements can take many forms, ranging from brief declarations of intent to detailed and legally binding agreements.
Depending on the context, an agreement can be concluded at the local, national or international level. To be successful, it should take into account the needs and expectations of all parties. If such issues are not addressed before the agreement is drafted, the result may be an unequal distribution of benefits and missed opportunities for capacity building. The parties should take steps to ensure that the mandate is acceptable to all; data providers have the opportunity to participate in data analysis; benefits are distributed equitably; and potential harm to individuals and communities will be minimized. Examples of agreements and other instructions can be found in the resource area of this site. This data processing agreement („Agreement“) forms part of the service contract („Master Agreement“) between_______________________________________________________________ (the „Company“) and_______________________________________________________________ (the „Processor“) (jointly referred to as the „Parties“) If a Controller is unable to assess compliance with the Processor, additional information should be obtained to: enable an informed decision to be taken of e cause if the subcontractor`s services are to be used. LocalActivities is therefore responsible for ensuring and demonstrating compliance with the data protection principles for this processing, even if the actual processing is carried out by another entity. 11.1 The processor may not transfer or authorise the transfer of data to countries outside the EU and/or the European Economic Area (EEA) without the prior written consent of the company.
Where personal data processed under this Agreement are transmitted by a country of the European Economic Area to a country outside the European Economic Area, the Parties shall ensure that the personal data are duly protected. To do this, the parties rely, unless otherwise agreed, on standard contractual clauses for the transfer of personal data approved by the EU. Examples of relationships between controllers and processors The use of data by data controllers in the voluntary and community sectors may take the following form: 12.1 Confidentiality. Each party shall keep confidential the agreement and information it receives about the other party and its activities related to this agreement („Confidential Information“) and may not use or disclose such confidential information without the prior written consent of the other party, unless: (a) disclosure is required by law; (b) the relevant information is already publicly available. . . .