DataSharingPolicyEN · Table (p.12)
From DataSharingPolicyEN.pdf · page 12
| 0 | 1 | 2 | 3 | 4 |
|---|---|---|---|---|
| Fifth: Mechanism for Determining Data | ||||
| Sharing Controls | ||||
| All Data Sharing Parties shall determine the necessary controls to adequately | ||||
| manage and protect the data to be shared, as follows: | ||||
| 1. Legal Basis: | ||||
| (Related Principles: First Principle: Data Sharing Culture. Second Principle: | ||||
| The Single Source of Truth (SSOT). Third Principle: Legitimate Purpose. | ||||
| Sixth Principle: Collective Accountability. Eighth Principle: Ethical Data | ||||
| Use). | ||||
| A. The legal basis or the justifiable operational need for data sharing shall be | ||||
| established, including, for example, the entity's regulations or the relevant | ||||
| orders and decisions that qualify the entity to obtain the data. | ||||
| B. Data confidentiality shall be maintained in accordance with its classification | ||||
| level, the privacy of Personal Data Subjects, and the protection of intellectual | ||||
| property rights. | ||||
| 2. Authorization: | ||||
| (Related Principles: | Fourth | Principle: Authorized Access. | Seventh | |
| Principle: Data Security). | ||||
| A. Authorized personnel shall be appointed to request and receive data-sharing | ||||
| requests among the Data Sharing Parties in accordance with the Access and | ||||
| Usage controls stipulated in the Data Classification Policy. The authorized | ||||
| Document | Classification: Public | 12 |
Source Metadata