Legal Gateways. 2.1 The GLAA licensing scheme regulates businesses who provide workers to the fresh produce supply chain and horticulture industry, to make sure they meet the employment standards required by law under The Gangmasters (Licensing) Act 2004 (as amended by the Immigration Act 2016). Section 19 enables the GLAA and the HSE to disclose information to each other
Legal Gateways. The Legal gateway(s) contained in Appendix A set out the basis on which the partners can share data for the provision of direct care across health and care services. The Health & Social Care (Safety & Quality) Act 2015, places a duty on organisations providing health and adult social care services to share data where it facilitates the provision of care to an individual in their best interests, unless the individual objects or it relates to an anonymous access service. This duty does not remove the need to comply with data protection legislation or common law confidentiality requirements. Each partner is responsible for ensuring that there are appropriate legal gateways (see Appendix A) for the data they share into the ICR.
Legal Gateways. All public sector organisations have legal powers for using data for purposes beyond the provision of direct care. However the following restrictions need to be noted: Provider organisations – without further agreement can only use the personal data they hold in relation to their own service development. Commissioning organisations – can use data related to the population that they cover. The legal powers of public sector organisations are set out in the NHS England Secondary Use Data Governance Tool (SUDGT) and can be accessed here: xxxxx://xxxx.xxxxxxx.xxx.xx/sudgt/activities#secondary-data-use-activities The CCG has wide ranging statutory functions it performs that require the use of data for those functions to be performed effectively. The PHM platform will provide the CCG with a richer source of data, where records have been robustly linked and de-identified than it has previously had access to. These functions can generally be supported by use of anonymised or pseudonymised data.
Legal Gateways. 3.1. Information may be shared between the Commission and other parties by virtue of: • S.29 and s.35 of DPA 1998 • S.30 and s.350 of GA 2005 • case law
Legal Gateways. 2.3.1 S30(4) of the Gambling Xxx 0000 permits the provision of information received by the Commission in exercise of its functions to other parties for the purpose of a criminal investigation or criminal proceedings.
Legal Gateways. Except as provided for in paragraph 28 below, the lawful basis for the Partners sharing the personal data covered by this DSA and for the Partners processing the data in the way described in this DSA is that it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(1)(e) of the UK GDPR). Specifically, this data sharing and processing is required in order for: [LA to add any specific LA functions that are supported by SW data sharing.] BEIS Secretary of State to carry out his functions in relation to fuel poverty as set out under the Warm Homes and Energy Conservation Act 2000 and the Fuel Poverty (England) Regulations 2014; and [LA to confirm content with this and, if so, add further relevant examples] each Partner to carry out their functions as regards effectively managing the spending of public funding, including BEIS being able to review how and where the SW funding is spent, including decisions as to whether further tranches of funding should be provided to the Authority as well as assessing whether the funding has achieved its objectives. The full list of purposes for which processing of data under this DSA is needed are set out under Principle 2 – Purpose Limitations below. [LA to confirm content with this legal gateway.]The lawful basis for the Authority sharing with BEIS, and BEIS using, the personal data covered by this DSA to re-contact consumers in the way described in this DSA is that the data subject has given consent for BEIS or its contractors to re-contact him or her (Article 6(1)(a)). As per paragraphs 75 and 77 of the MOU, it is the responsibility of the Authority to seek to obtain the relevant consent in accordance with the DPA and UK GDPR.
