The Information Commissioner’s Office (ICO) has published its Data Sharing Code of Practice.
The code, and a suite of new resources, provides practical advice to businesses and organisations on how to carry out responsible data sharing.
Data sharing is central to digital innovation in both the private and public sectors. It can lead to many economic and social benefits, including greater growth, technological innovations, and the delivery of more efficient and targeted services.
Information Commissioner Elizabeth Denham said the COVID-19 pandemic brought the need for fair, transparent and secure data sharing into even sharper focus.
She said:
“I have seen first-hand how sharing data between organisations has been crucial to supporting and protecting people during the response to the COVID-19 pandemic.
“That includes public authorities and supermarkets sharing information to support vulnerable people shielding or health data being shared to support fast, efficient and effective delivery of pandemic responses.”
Provision for the code was included in the Data Protection Act 2018 and it addresses many aspects of the new legislation including transparency, lawful bases for using personal data, the new accountability principle and the requirement to record processing activities.
Alongside the code, the ICO has launched a data sharing information hub where organisations can find targeted support and resources, including:
- Data sharing myths busted
- Data sharing code: the basics for small organisations and businesses
- Data sharing FAQs for small organisations and businesses
- Case studies
- Data sharing checklists
- Data sharing request and decision forms template
- Sharing personal data with a law enforcement authority toolkit
- Guidance on sharing personal data with law enforcement authorities
- Guidance on data sharing and reuse of data by competent authorities for non-law enforcement purposes
Ms Denham said the publication of the code was not a conclusion, but a milestone.
She said:
“This code demonstrates that the legal framework is an enabler to responsible data sharing and busts some of the myths that currently exist.
“I want my code of practice to be part of a wider effort to address the technical, organisational and cultural challenges for data sharing. The ICO will be at the forefront of a collective effort, engaging with key stakeholders. I know I can count on a collective effort from practitioners and government to understand the code and work with the ICO to embed it.”
As part of its ongoing work, the ICO is encouraging organisations that are developing products and services that support complex data sharing in the public interest to apply for its regulatory Sandbox.
The regulator will also increase its engagement with organisations to help them understand the code and promote the benefits of sharing data.
For more information visit ico.org.uk/datasharing.
