Beta

This is a new service - your will help us to improve it.

My commissioner (Local Authority or NHS) is telling me I need to accept a new contract. What do I do?

New data protection legislation requires organisations to reassess their contracts and, in some instances, to update the terms of these contracts.

Before accepting any contract, you must make sure you agree with the terms.

Many of these contracts presume that you will be a data processor – it is unlikely that this is the case. As a care provider, you determine how you process data to provide care and are therefore a data controller.

​You must not accept any contract which says that you are a data processor unless you are absolutely certain that you are one.

Back to FAQs