The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

Third-party products and services

Your organisation considers ‘data protection by design’ when selecting services and products to use in data processing activities.

Ways to meet our expectations:

  • When you use third-party products or services to process personal data, you make sure to choose suppliers that design their products or services with data protection in mind.

Can you answer yes to the following questions?

  • Do staff consider suppliers’ approach to data protection when using third-party products or services to process personal data?
  • Is there a clear way for them to do this?