A controller-to-controller agreement for regular data sharing, built around the statutory Data Sharing Code – purpose, lawful basis, transparency, security, rights, breaches and review.
Data protection & GDPR
Data Sharing Agreement
About this document
An agreement between two (or more) organisations that will each use shared personal data for their own purposes as separate controllers – for example a referral partnership, a franchise network, a charity and a local authority, or a group of businesses sharing customer data. It follows the approach of the regulator’s statutory Data Sharing Code of Practice and records the purpose, lawful basis, data, security and responsibilities of each party.
The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.
Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.
Included in the pack
Data protection & GDPR
for every document in this category
Editable Microsoft Word files
Guidance notes in every document
Written for UK businesses
Download and keep
Need more than one category?
Documents All-Access gives you every category for 12 months for £295.
Compare options →Need it tailored?
We can adapt any template to your business, or write a document from scratch.
Talk to us →
