The Information Commissioner's Office (ICO's) new
version of its statutory data sharing code of practice (the Code)
came into force on 5 October.
The Code provides practical guidance for organisations on how to
share personal data in compliance with the requirements of the UK
GDPR and Data Protection Act 2018, including transparency, the
lawful basis for processing, the accountability principle and the
need to document processing requirements.
The Code has been issued under section 125 of the Data
Protection Act 2018. Although a failure to act in accordance with
it does not make a person liable to legal proceedings in a court or
tribunal, the code is admissible in evidence in legal proceedings.
As the Code has not been updated since 2011 employers will need to
be aware of the changes to the data protection landscape. It's
a good idea to review the Code and make any necessary amendments to
your current data protection practices.
