ScHARR Information Governance


Policy Section 8: Data processing by third parties

Version 17/03/31

Background

The need to maintain high standards of information processing and handling is not limited to employees of the University of Sheffield. The same duty of care must apply to any person undertaking work on behalf of ScHARR.

Policy

A contract or data processing agreement must be in place detailing how the data will be processed by the third party.