Dear Laura
I smiled to see your question, as I’m thinking about our international agent agreements currently and struggling with this too. One of my basic issues is that
all the references to international transfers are about transfer TO the third country, and some of our information flow is inwards or both ways. Solicitors have inserted data controller and data processor clauses in the agent agreements but suggest the MCCs
are needed too (both the controller-controller and controller-processor ones), but I don’t feel they properly represent the data flows and are a bit heavy. I too wondered if we could rely on necessary for entering contract, or consent, as these are agreements
for introduction of potential students to us by agents.
Kind regards
Anne
|
|
Dr Anne Jolly | Information
Compliance Officer |
|
Secretariat |
|
|
From: This list is for those interested in Data Protection issues [mailto:[log in to unmask]]
On Behalf Of Laura Jones
Sent: 26 January 2018 08:46
To: [log in to unmask]
Subject: [data-protection] Transfer of Personal Data to International Universities
Hello All,
I wondered if anyone has started reviewing their international transfer arrangements? In particular, we’ve been reviewing the exchange of student data with our international partner universities for example where our student attends a placement
or whether we validate an award delivered by another university.
We have a number of non-EU partner university and are considering negotiating the MCCs (where we don’t already have them).
I did consider whether we could rely on the derogations that the transfer is necessary for the performance of a contract or with the consent of the student. However, I note the GDPR provides that these derogations aren’t available to a
public authority in the performance of its public task. I’ve taken the view that this would cover the provision of higher education in the context of placements and validation awards.
Are others taking the same approach and implementing the MCCs in these contexts?
Best wishes,
Laura
Laura Jones| Solicitor | Information Law
Legal Services|The Manchester Metropolitan University | Room 215 | All Saints| Oxford Road |
Manchester | M15 6BH
Email: [log in to unmask]
Telephone: 0161 247 3406
"Before acting on this email or opening any attachments you should read the Manchester Metropolitan University email disclaimer available on its
website http://www.mmu.ac.uk/emaildisclaimer "
All archives of messages are stored permanently and are available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
Selected commands (the command has been filled in below in the body of the email if you are receiving emails in HTML format):
All user commands can be found at
https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html and are sent in the
body of an otherwise blank email to
[log in to unmask]
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
(Please send all commands to
[log in to unmask] not the list or the moderators, and all requests for technical help to
[log in to unmask], the general office helpline)