ico.org.uk, as data

Your agreement should also deal with the main practical problems that may arise when sharing personal data. This should ensure that all organisations involved in the sharing:* have detailed advice about which datasets they can share, to prevent irrelevant or excessive information being disclosed;* make sure that the data they are sharing is accurate, for example by requiring a periodic sampling exercise and data quality analysis;* record data in the same format, abiding by open standards when applicable. The agreement could include examples showing how to record or convert particular data items, for example dates of birth;* have common rules for the retention and deletion of shared data items, as appropriate to their nature and content, and procedures for dealing with cases where different organisations may have different statutory or professional retention or deletion rules;* have common technical and organisational security arrangements, including the transmission of the data and procedures for dealing with any breach of the agreement in a timely manner;* ensure their staff are properly trained and are aware of their responsibilities for any shared data they have access to;* have procedures for dealing with access requests, complaints or queries from members of the public;* have a timescale for assessing the ongoing effectiveness of the data sharing initiative and the agreement that governs it; and* have procedures for dealing with the termination of the data sharing initiative, including the deletion of shared data or its return to the organisation that supplied it originally.**What further details should we include?**It is likely to be helpful for your agreement to have an appendix or annex, including:* a summary of the key legislative and other legal provisions, for example relevant sections of the DPA 2018, any law which provides your legal power for data sharing and links to any authoritative professional guidance;