Common use of Ownership of Shared Information Clause in Contracts

Ownership of Shared Information. All information shared under MAPPA must be processed in line with the DPA 2018. Most personal information remains the responsibility of the agency that provided it and they are considered to be the data controller under DPA. For example, the NPS is the data controller for information regarding their statutory supervision of the offender and the police are the data controller for information regarding their management of a registered sexual offender. All agencies that retain copies of the minutes of MAPPA meetings or other information shared under MAPPA act as joint data controllers for those minutes or that information under DPA. Subject Access Requests (SAR) and Freedom of Information (FOI) requests concerning shared information must be responded to in line with the MAPPA Guidance (see Chapter 13b – MAPPA Meeting Minutes). Each MAPPA agency will have responsibility for complying with its legal obligations as data controllers under the DPA.