between University College London and Dated: O N [Insert Name of Partner Institution] LY Data Sharing Agreement EEA PL E Ref: [insert file reference] SA M IN RESPECT OF THE SHARING OF PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)1 FOR THE PURPOSES OF COLLABORATIVE TEACHING ARRANGEMENTS 1 For countries recognised by the European Commission as possessing an adequate level of protection for personal data on the basis of Article 25(6) of Directive 95/46/EC use template 1. For a list of countries recognised as adequate see http://ec.europa.eu/justice/data-protection/document/international-transfers/adequacy/index_en.htm THIS AGREEMENT is made the day of BETWEEN: (1) UNIVERSITY COLLEGE LONDON a body corporate established by Royal Charter with company number RC000631 of Gower Street, London, WC1E 6BT (UCL); (2) LY and SECOND PARTY [Insert Details] (the Partner Institution). [Drafting Note: Partner Institution to provide details] WHEREAS: UCL and the Partner Institution have agreed to collaborate to allow one or more students registered with UCL and studying for an award of [Insert Name of Degree] at UCL to undertake a [placement/research project] at the Partner Institution; (2) To facilitate the provision of the Programme, the Parties wish to enter into this Agreement. 1. Overview O N (1) PL E 1.1 The following agreement governs the provision of staff and student personal data between the partners and explains the purposes for which the information may be used. 2. Information to be shared 2.1 The following data may be shared between the Parties under the terms of this Agreement: [INDICATIVE INFORMATION] Staff names and personal contact details, role or post and professional opinions; Applicant names and qualification details; Student names; Student identity reference numbers (issued by the respective Party); Student personal contact details including address, email addresses and telephone numbers; Information relating to student health, disabilities and well-being and arrangements in relation to these, with the explicit consent of the student; Module details pertaining to students, including but not limited to module titles, student attendance or participation, progress, assessment details, marks; Programme details pertaining to students, including but not limited to credits taken, modules selected, progress; Details of allegations relating to breaches of regulations and non-academic offences and of the outcome of any processes and procedures relating to these allegations M SA 3. How the information will be used 3.1 The information will be used by [PARTNER INSTITUTION] for the purposes of administering a collaborative teaching programme with UCL. 4. Information provision 4.1 Information will be provided to [PARTNER INSTITUTION] prior to a student commencing a collaborative teaching arrangement and at such time as required during the course of their studies to enable the administration of their studies and award. The information shared may include the names of relevant UCL staff and their academic/pastoral opinions 5. Transfer of data 5.1 The personal data will be transferred in accordance with UCL data protection and information security policies. 6. Conditions for the processing of UCL staff and student personal data ensure that all staff, and any staff of data processors processing on their behalf, who handle personal data are appropriately trained. ensure adequate security and that any data processor it uses has security policies and procedures that are compliant with principle 7 of the UK Data Protection Act 1998 (DPA) (Article 17 Directive 95/46/EC (The Directive)) and be responsible for ensuring that there is a written contract in place and that any processing, or sub processing, is carried out in accordance with Principle 7 of the DPA (Article 17 of The Directive). N LY 6.1 All information will be processed by in accordance with the data protection principles and in particular [PARTNER INSTITUTION] shall: O 7. Restrictions on the use of students’ personal information PL E 7.1 The information provided by the UCL to [PARTNER INSTITUTION] shall not be passed to any third party without the express consent of individual(s) concerned, except where written consent has been obtained or where the disclosure is required by law, for crime prevention or detection purposes, or in order to comply with a legal obligation. 7.2 The personal information provided by the University shall not, without the express consent of the individual concerned, be used for the purpose of marketing services provided by organisations or individuals other than [PARTNER INSTITUTION] 7.3 Students and staff shall give an option in each marketing mailing to opt out of future mailings. 8. Retention of information 8.1 Personal data will be retained only as long as necessary in accordance with principle 5 of the DPA (Article 6(1)(c) of the Directive) 9. Review and publication This agreement will be reviewed as appropriate. M 9.1 10. Governing Law This Agreement shall be governed by and interpreted in accordance with the laws of England and SA 10.1 Wales. Any dispute arising under or in accordance with this Agreement shall be subject to the exclusive jurisdiction of the courts of London. 3 EXECUTED on the date set out at the head of this Agreement. [Authorised Signatory]. [SIGNATURE OF AUTHORISED SIGNATORY] Print name O Date N Title LY Signed for and on behalf of UNIVERSITY COLLEGE LONDON by PL E Signed for and on behalf of [the PARTNER INSTITUTION] [Authorised Signatory]. by [SIGNATURE OF AUTHORISED SIGNATORY] Print name Title SA M Date 4