Data Sharing Agreements
A Data Sharing Agreement (DSA) is a document setting out a common set of rules to be followed by two or more organisations who are sharing personal data.
A DSA will help parties be clear about their roles and responsibilities, set out the purpose of the data sharing and the expectations of what will happen to the data at each stage.
Whilst not mandatory, it is good practice and will help ensure the continued adherence to data protection principles including accountability and lawfulness throughout the sharing.
Do I need a Data Sharing Agreement
It is best practice to have a signed DSA when sharing personal data with third party organisations. It is in accordance with the ICO Data Sharing Code of Practice.
If there is already documentation governing the relationship between organisations which makes provision for data sharing, this may negate the need for a DSA for example, a contract or data processing agreement. There is no need to duplicate the contents of existing agreements with a separate document.
There may be occasions when third parties have access to our systems when working in partnership with us or have been commissioned to undertake a specific piece of work which requires access to our information. There is no need for a DSA in these circumstances, but you should ask them to sign a confidentiality agreement or acceptable use agreement
Temporary contractors who are employed by Cheshire East Council may need to sign a confidentiality agreement which sets out the expectations when handling personal data.
Select the most appropriate document below for your purpose and tailor the wording accordingly. Copies of signed documents should be retained by the relevant service.
If you are unsure whether you require a DSA , or you want to know whether we have an existing DSA, contact dp@cheshireeast.gov.uk and a member of the team will assist.
How do I complete a Data Sharing Agreement
All agreements must be considered by the Information Governance Collaboration Group (IGCG), who may recommend amendments before approving.
If you are satisfied that you require a Data Sharing Agreement, refer to the data sharing framework to complete the template:
Once you are satisfied that your agreement meets the requirements, please forward it to dp@cheshireeast.gov.uk and it will be added to the next IGCG agenda and an invitation for the meeting will be sent to you.
The DSA will be circulated to members of the group who will provide feedback and may ask questions during the meeting. It will be approved once the group are happy with the content.
Once approved, the relevant Head of Service or Director should sign it and a copy of the agreement sent back to dp@cheshireeast.gov.uk for uploading to the Information Governance Group secure SharePoint site.
Information Sharing Gateway (ISG system)
New DSAs instigated by Cheshire East Council will no longer be created through the Information Sharing Gateway.
If you have an account, you can still view or review existing DSAs held in the Information Sharing Gateway system.
Other organisations may still generate DSAs through the ISG system for Cheshire East to sign off. They can be accessed and reviewed by the relevant officers as they are received.