RESOLUTION OF DISPUTES WITH DATA SUBJECTS OR THE INFORMATION COMMISSIONER Clause Samples

RESOLUTION OF DISPUTES WITH DATA SUBJECTS OR THE INFORMATION COMMISSIONER. 11.1 In the event of a dispute or claim brought by a Data Subject or the Information Commissioner concerning the processing of Shared Personal Data against either or both Parties, the Parties will inform each other about any such disputes or claims, and will cooperate with a view to settling them amicably in a timely fashion. 11.2 In the event that a dispute cannot be resolved by the Parties in accordance with Paragraph 11.1, the Parties shall seek to resolve it in accordance with the dispute resolution procedure provided in the Agreement. This is the Annex referred to in the foregoing Schedule Part 8 (Information Sharing Protocol) between the Council and the Provider Agreed Purposes, Types of Personal Data and Categories of Data Subject, Legal Grounds for Sharing Personal Data and Retention Periods Agreed Purpose (No) Agreed Purpose (description) Types of Personal Data and Categories of Data Subject Legal Ground/s for Sharing Personal Data Retention Period 1 To comply with any legal obligation to which the Council or Provider is subject; Child/user of services: - first name; - middle name(s); - surname; - date of birth; - characteristics (e.g. gender, ethnicity and disability/ additional learning needs) Parent/Guardian of child/user of services: - parent/guardian personal email address; - parent/guardian personal address, - whether from workless household or in receipt of qualifying benefits (eligibility for free meals) i. ii. iii. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (GDPR Art 6. 1 (e)) or, processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (GDPR Art 6. 1 (f). consent. 4 years 2 To enable effective management and planning of early years services and facilities by receiving comprehensive As above As above As above demographic information;

RESOLUTION OF DISPUTES WITH DATA SUBJECTS OR THE INFORMATION COMMISSIONER. 13.1 In the event of a dispute or claim brought by a Data Subject or the Information Commissioner concerning the Processing of Shared Personal Data against either or both Parties, the Parties will inform each other about any such disputes or claims, and will cooperate with a view to settling them amicably in a timely fashion. Agreed Purposes, Types of Personal Data and Categories of Data Subject, Legal Grounds for Sharing Personal Data and Retention Periods 1 Permitted purposes are those activities requiring the sharing of data pursuant to the delivery of social care provision purchased under this agreement. The activities include operations undertaken in the performance of the contractual obligations that requires the collection, recording, organisation, storage, adaption or alteration, retrieval, consultation, use dissemination or otherwise making available alignment or combination restriction, erasure or destruction of data. Personal data required includes service user identifying information that covers names, addresses, dates of birth, national insurance numbers, bank details, CHI numbers, email addresses, and Pen Profile and Personal Histories Such data as may be included in the information, records and other materials in the Council’s possession as may reasonably be required by the service provider to undertake the Services; that is an identifier of the service user. The nature of the services will require the processing of Special Categories of Personal Data that may include: Racial or ethnic origin Religious beliefs Health data which may include but is not limited to physical and/or learning disabilities, substance misuse Social Work (Scotland) Act 1968 Public Bodies (Joint Working) Scotland Act 2014 Human Rights Act 1998 Data Protection Act 2018 The Adult Support and Protection (Scotland) Act 2007 Each Data Controlling party will retain personal information in line with their own Data Retention policy/procedures. The retention period would not be shorter than six (6) years. and mental health problems Genetic data Sex life or sexual orientation The commission or alleged commission by them of any offence Any proceedings for any offence committed or alleged to have been committed by them, the disposal of such proceedings or the sentence of any court in such proceedings

RESOLUTION OF DISPUTES WITH DATA SUBJECTS OR THE INFORMATION COMMISSIONER. 11.1 In the event of a dispute or claim brought by a Data Subject or the Information Commissioner concerning the processing of Shared Personal Data against either or both Parties, the Parties will inform each other about any such disputes or claims, and will cooperate with a view to settling them amicably in a timely fashion. 11.2 In the event that a dispute cannot be resolved by the Parties in accordance with clause 11.1, the Parties shall seek to resolve it in accordance with the dispute resolution procedure provided in the Agreement.