ScHARR Information Governance
Policy Section 8: Data processing by third parties
The need to maintain high standards of information processing and handling is not limited to employees of the University of Sheffield. The same duty of care must apply to any person undertaking work on behalf of ScHARR.
A contract or data processing agreement must be in place detailing how the data will be processed by the third party.