Sharing personal data
It is likely that at some stage you will be required to A share in the capital of a company (sometimes also referred to as stock, for example in relation to US companies). Shares in a company give to the holders, known as shareholders, rights in relation to that company such as to vote, to receive dividends and to a return of capital. Holders of shares in a company own that company and the company, not its shareholders, owns the company's assets. Any information about an identifiable, living person. Information which cannot be used to identify someone on its own will still be personal data if it can be used in combination with other information to identify that individual. with another organisation either because you are transferring or receiving it. Unauthorised disclosure can result in significant fines. This section will provide practical guidance about when you can A share in the capital of a company (sometimes also referred to as stock, for example in relation to US companies). Shares in a company give to the holders, known as shareholders, rights in relation to that company such as to vote, to receive dividends and to a return of capital. Holders of shares in a company own that company and the company, not its shareholders, owns the company's assets. Any information about an identifiable, living person. Information which cannot be used to identify someone on its own will still be personal data if it can be used in combination with other information to identify that individual. with other organisations and what measures you must put in place when doing so, including when you will need a data sharing or An agreement between a data controller and a data processor, required under the GDPR, to share personal data with another person or business, which must detail the data involved, what is to be done with it and why, and the roles and responsibilities of each party in relation to the data., when you can A share in the capital of a company (sometimes also referred to as stock, for example in relation to US companies). Shares in a company give to the holders, known as shareholders, rights in relation to that company such as to vote, to receive dividends and to a return of capital. Holders of shares in a company own that company and the company, not its shareholders, owns the company's assets. Any information about an identifiable, living person. Information which cannot be used to identify someone on its own will still be personal data if it can be used in combination with other information to identify that individual. outside the United Kingdom of Great Britain and Northern Ireland and the impact of Brexit on your data transfers.
The rules about sharing personal data
- 1.When can I share personal data?
- 2.Can I share someone's personal data if I am a data processor?
- 3.Can I share someone's personal data to fulfil an order they have placed?
- 4.What does a legitimate interest to share someone's personal data mean?
- 5.Can I share someone's personal data if I have a legitimate interest in doing so?
- 6.Can I share someone's personal data if I have their consent?
- 7.Can I share someone's personal data if the law requires me to?
- 8.Do I need to carry out a data protection impact assessment before I share personal data?
Sharing personal data outside the UK
- 9.What implications did Brexit have for sharing personal data outside the UK?
- 10.Can I share personal data outside the UK?
- 11.Can I share personal data outside the UK on a website?
- 12.Can I share anonymised personal data outside the UK?
- 13.Can I share personal data outside the UK to a company that is in the same group as mine?
- 14.What are the restrictions on transferring personal data outside the UK?
- 15.Can I share personal data with countries in the EEA?
- 16.How can I send personal data from the UK to the EEA?
- 17.How can I receive personal data from the EEA?
- 18.What does an EU Commission adequacy decision mean?
- 19.What are UK adequacy regulations?
- 20.What are appropriate safeguards that will allow me to make a transfer of personal data outside the UK?
- 21.What are UK Binding Corporate Rules?
- 22.What are Standard Contractual Clauses?
- 23.What are the exceptions to the restriction on the transfer of personal data outside the UK?
- 24.How did Brexit affect personal data transferred to me from an EEA country before the end of the transition period?
Key obligations when sharing personal data
- 25.What are my obligations when sharing personal data?
- 26.What does compatibility of data sharing when I share personal data mean?
- 27.What does only sharing necessary personal data mean?
- 28.Do I have to make sure the personal data I share is accurate?
- 29.How long can I keep the personal data that someone has shared with me for?
- 30.What security measures must I have in place when sharing personal data?
- 31.What systems and procedures will I need to put in place when sharing personal data?
- 32.What contractual safeguards will I need to put in place when sharing personal data?
- 33.What should my privacy policy say about sharing personal data?
- 34.How does Brexit affect what my privacy policy should say about sharing personal data?
- 35.What should my privacy policy say if the data I share comes from a third party?
- 36.Do I always need to provide privacy information if the data I share comes from a third party?
- 37.What is the Data Sharing Code of Practice?
Data processing agreements and data sharing agreements
- 38.What is a data processing agreement?
- 39.What is a data sub-processor?
- 40.Can I share personal data with a data sub-processor?
- 41.Do I need a contract to share personal data with a data sub-processor?
- 42.Can I share personal data with another data controller?
- 43.Do I need a contract to share personal data with another data controller?
- 44.What is a data sharing agreement?
- 45.What type of agreement do I need for data sharing within my group?
- 46.How does Brexit affect which authority I deal with when sharing personal data within the EEA?
- 47.What happens if another business that I have shared data with breaches its data protection obligations?
- 48.Am I liable as a data controller if data has been shared and there has been a data breach?
- 49.Am I liable as a data processor if data has been shared and there has been a data breach?
- 50.Who is responsible for responding to data subject requests when personal data has been shared?