7 Part 2 - T&Cs 4.Data Recipient responsibilities Do you consider the Data Recipient responsibilities to be appropriate? If no, please provide your comments. Yes/No Comments 8 Part 2 - T&Cs 5.Data Protection Responsibilities of the Data Controller and Data Processor are set out in the DPA 1998 and as such these responsibilities form part of the DSFC and DSA. Do you consider the Data protection responsibilities to be appropriate? If no, please provide your comments. Yes/No Comments 9 Part 2 - T&Cs 6.Confidentiality Do you consider the confidentiality responsibilities to be appropriate? If no, please provide your comments. Yes/No Comments 10 Part 2 - T&Cs 7.Audit and specific rights Do you consider the audit and specific rights conditions to be appropriate? If no, please provide your comments. Yes/No Comments 11 Part 2 - T&Cs 9.Charges Do you consider the charges conditions to be appropriate? If no, please provide your comments. Yes/No Comments 12 Part 2 - T&Cs 10.Liability The Liability conditions were set out to protect the HSCIC’s position when it releases data as HSCIC is taking the majority of the risk in providing data to the recipient. The HSCIC is not a profit making organisation. It provides data on a cost recovery basis. As a
19 Part 2 - T&Cs 17.Governing law and jurisdiction Do you consider the governing law and jurisdiction responsibilities to be appropriate? If no, please provide your comments. Yes/No Comments 20 Part 2 - T&Cs 18.Entire Agreement Do you consider the entire agreement responsibilities to be appropriate? If no, please provide your comments. Yes/No Comments 21 Part 2 – T&Cs All other T&Cs You are welcome to provide comments on any other Terms and Conditions or provide additional comments on any of the above. Comments 22 Schedule 1 Interpretation Do you consider the interpretation responsibilities to be appropriate? If no, please provide your comments. Yes/No Comments 23 Schedule 2 Data Security Requirements Do you consider the data security responsibilities to be appropriate? Do you have any significant issues meeting these responsibilities? Pease provide your comments. Yes/No Yes/No Comments 24 Schedule 3 List of relevant legislation and standards Do you consider the list of relevant legislation and standards to be appropriate? If no, please provide your comments. Yes/No Comments 25 Schedule 4 Sub-licensing conditions Do you consider the Sub-licensing conditions to be appropriate? If no, please provide your comments. Yes/No Comments
If no, please provide your comments. Is it clear that if a recipient organisation (as a data controller) part or all of their work to a data processor then the recipient organisation is legally responsible for any acts or omissions of the data processor? If no, what changes could be made to make this clearer? Comments Yes/No Comments 29 6.Charges Do you consider the charges section to be appropriate? If no, please provide your comments. Yes/No Comments 30 7.Terms and Conditions This Terms and Conditions clause repeats the key terms and conditions from the DSFC for the benefit of the staff who will be processing the data, given that they may not be aware of the Contract or its content. Do you consider the and Conditions section to be appropriate? If no, please provide your comments. Yes/No Comments 31 8.Data Access Do you consider the data access section to be appropriate? If no, please provide your comments. Yes/No Comments 32 Annex A Data Specification Do you consider the data specification annex to be appropriate? If no, please provide your comments. Yes/No Comments 33 Annex B Do you consider the data security annex to be appropriate? Yes/No