Agree an information sharing agreement
Information governance, information security and data protection officer: Agree an information sharing agreement. Starts when: Partners need to share personal data. Steps: Define purpose and data; Set lawful basis and safeguards; Sign by each partner; Publish where appropriate. Done when: The signed agreement names purpose, data, basis, retention and review date. Rules that apply: ICO data sharing code of practice; Digital Economy Act 2017 Part 5.