Document Actions

Contracting with third parties

Many organisations contract with third parties and exchange personal data with them for a variety of purposes. Birkbeck is no exception.

In terms of data protection legislation these third parties are deemed to be either Data Processors or Data Controllers. Processors act entirely under our instructions. Controllers make autonomous decisions about the use of the data they control.

Example data processors include Microsoft for the provision of Office 365 online services.

Example data controllers include partner institutions with whom we run joint programmes (and those on the programme are students of both institutions).

It is essential that all such arrangements are entered into with an appropriate written legally binding contractual agreement. You must not enter into such an arrangement without first seeking confirmation that such an agreement is in place, or the terms of a new proposed agreement are suitably robust. Please contact in the first instance to discuss any such proposals.