Part 1 Data Sharing
Many companies and organisations share personal data. However where you do share data you must comply with the data protection principles contained in the Data Protection Act 1998 (‘DPA’).
If you are going to share data then you need to be both compliant with the DPA and adhere to the Information Commissioner’s sharing code of practice (Data Sharing Code).
Failure to do so may lead to a fine of up to £500,000, but this is rarely imposed unless you are the Hanibal Lecter of Data abuse – a more damaging penalty would be any reputational damage that might arise.
The Code can be found here