Agents, partner organisations and contractors

Working with third parties

If a contractor, partner organisation or agent of the council is appointed or engaged to collect, hold, process or deal with personal data on behalf of the council, or if they will do so as part of the services they provide to the council, the lead council officer must ensure that appropriate contractual clauses for security and Data Protection requirements are in place, and that personal data is kept and used in accordance with the principles of the Data Protection legislation and this policy.

A data confidentiality agreement must be in place prior to a third party being given access to personal information to undertake work that is not under contract, e.g. as part of the tender / procurement process.

Disclosure of personal information about third parties

The personal data of a third party must not be disclosed, except in accordance with the Data Protection legislation. If you believe it is necessary to disclose information about a third party to a person requesting data, you must first seek advice from the Information Management Service.

Disclosure of personal information to a third party

See disclosure of person information to third parties policy for details regarding when / if it is appropriate to share personal data with a third party.