The Information Commissioner's Office has today issued a draft framework code of practice for use by organisations that share personal data. The ICO website contains a press release, an overview, and the draft framework code of practice itself.
Most usefully from a data subject's perspective, the framework suggests that where a number of organisations share personal information, the organisations provide a single point of contact for requests for information.
For organisations who share information with others, the most important part of the code (apart from the single point of contact suggestion) is section 1, which sets out a method for assessing what information should be shared. The rest of the framework seems to be pretty generic in terms of setting out key data protection law compliance issues.
The deadline for comments is 1 October 2007, and the ICO has helpfully provided a comments sheet for you to complete.
Comments