## Section 2: Safe Organisations & Bodies

#### 2.1 Organisation or Body Leading Proposal

This is the organisation (e.g. University of Aberdeen ) or body (e.g. Scottish Infection Research Network ) that is putting forward the proposal requesting access to data for the purposes specified in the application. The applicant at section 1.1 is acting on this organisation's behalf and is usually employed by this organisation. Where multiple organisations are collaborating to produce the proposal, the lead organisation should be the one which has a lead in the operational delivery of the proposal and will therefore be taking responsibility for matters relating to the access and processing of data.

2.1.01 Please provide the full name of the organisation or body. 2.1.02 Please indicate what type of organisation this is using the drop-down box. 2.1.02a If the organisation is commercial in nature please provide details of any commercial aspects of the organisation ' s work. This should include details of industry sector, the organisation ' s activities within this sector, and also any previous experience of working with NHSS data. Please attach any relevant supporting information. 2.1.03 Please indicate whether the organisation is wholly funding or paying the costs of conducting the proposal (by selecting ' Wholly funding / partially funding / not funding).

###### If the answer is wholly funding, you do not need to complete question 2.3.

#### 2.2 Main Contact for Lead Organisation

The organisation (e.g. University of Aberdeen ) or body (e.g. Scottish Infection Research Network ) is putting forward the proposal requesting access to data for the purposes specified in the application. The applicant at section 1.1 is acting on this organisation's behalf.

Under the Data Protection Accountability principle, you and your organisation are responsible for complying with Data Protection law and the GDPR and you must be able to demonstrate your compliance. You and your organisation need to put in place appropriate technical and organisational measures to meet the requirements of accountability.

This main contact should be the agreed person within the leading organisation that is aware of the proposal and accepts the organisation ' s obligations and roles in respect to any processing of data and compliance with data protection law. Note that this person should not be the Applicant, Clinical Lead, Data custodian or anyone from within the research team but someone who is able to assure the organisation ' s role in the project. This role is to ensure organisational accountability for the data and therefore this role should not be filled by anyone involved in the study. If applicable and appropriate, this can be the same person as the Research Sponsor.

2.2.01 Please provide the full name of the Main contact. 2.2.02 Please provide the title (for example Mr, Mrs, Ms, Dr, Professor ) of the main contact. 2.2.03 Please provide the position of main contact. 2.2.04 Please provide the work email address of the Main Contact. This should be an email address associated with their organisation or institution, and not a personal email address (hotmail or gmail).

#### 2.3 Organisation or Body Funding Proposal

Please complete this question if the organisation or body providing the financial resource to fund the proposal is different to the organisation detailed in section 2.1. You do not need to complete this section if the organisation mentioned in section 2.1.01 is wholly funding the proposal. Examples of