A Data Sharing Agreement is a formal contract between organisations that sets out how personal data is shared, used, and protected. It defines:
- What data is shared
- Why it is shared
- The lawful basis for processing
- Security measures
- Roles and responsibilities
- How long data is kept and how it is disposed of
DSAs ensure all organisations handle personal information lawfully, transparently, and securely under GDPR.