Working group member responsibilities

A pan-London DSA (Data Sharing Agreements) working group is made up of relevant subject matter experts (SMEs), and information governance (IG) professionals. The objective is to complete a DPIA (Data Protection Impact Assessment) and DSA (Data Sharing Agreement) that covers the proposed data sharing and represents every data controller due to be involved in the sharing, not just those on the working group.  

Using a smaller group of individuals that act on behalf of every data controller of their type of organisation, such as local authorities, is designed to produce outputs more quickly than seeking input from every data controller that is a party to the data sharing.

Members must:

• Meet regularly to develop the DPIA and DSA.
• Be proactive in reading relevant project documents, researching the subject matter, identifying relevant legislation, and drafting the DPIA and DSA.
• Liaise with relevant people within your organisation; mainly SMEs or IG officers, but this may include your legal team or senior management if that is necessary for you to complete and endorse the DSA.
• Work together until all members are happy to endorse the DPIA and DSA produced by the group.

The Lead Officers are responsible for:

• Setting deadlines for group action and arranging for necessary meetings.
• Providing updates to IGfL (Information Governance for London) and any oversight groups on progress of the work.
• Arranging for one DPO to sign off the DSA (including within the ISG (Information Sharing Gateway) system) when the agreement is ready for publication for signature.
• Arranging for senior sign off and endorsement of the work e.g. a Head of Procurement or Director of Adult Social Care.
• Reporting to the Pan-London Information Governance Lead if there are significant concerns that a consensus may not be reached by the working group, or if additional support or input is required.

Outputs

Outputs will be a DPIA and DSA but the group may decide to produce or provide additional documents such as:

• Frequently Asked Questions
• Specific guidance on the purposes for this sharing
• Flowcharts
• Cyber security assurance
• IG Review reports of earlier stages of a project