Designated Officer. In order to ensure compliance with the Data Protection Act, participants to this Agreement shall nominate a Designated Officer to whom all requests and from whom all disclosures of personal information will be made. Disclosure requests, disclosure decisions and the details of personal information that has been disclosed will be in writing and the designated officer will maintain a record. The identity of the data owner must also be recorded against the relevant data. No secondary use or other use may be made unless the consent of the disclosing party to that secondary use is sought and obtained. Information discovered to be inaccurate or inadequate for the purpose will be notified to the data owner who will be responsible for correcting the data. The data owner will then notify all other recipients of that data, who must ensure that the correction is applied. Decisions on disclosures reached at meetings must be minuted. The designated officer will ensure that appropriate security arrangements are in place within their respective organisations to prevent unauthorised access to and disclosure of personal data. A list of designated officers will assume responsibility for data protection, security and confidentiality issues and compliance with legislation within their respective organisations will be made available to partner organisations as a matter of routine.
Appears in 2 contracts
Sources: Data and Information Sharing Agreement, Data and Information Sharing Agreement