Your organisation proactively takes steps to only share necessary personal data with processors or other third parties.
Ways to meet our expectations:
- Your organisation only shares the personal data necessary to achieve its specific purpose.
- When information is shared, it is pseudonymised or minimised wherever possible. You also consider anonymisation so that the information is no longer personal data.
Can you answer yes to the following questions?
- Do staff understand what they should consider when sharing data to make sure it is limited appropriately?