Contracts

In situations where you are handling data from other organisations or you are handling data through other organisations/companies, it is necessary to have set up or sign a contract with the third party. For guidance on contracts see the articles on 'Collaborators and data sharing' and 'Working with external organisations'.

The details of any agreements between UCL and any third parties, made in writing and relating to the handling of confidential information, should be uploaded to the Information Governance Advisory Portal Contracts Form by registered research project information asset owners or administrators. You need to fill in some mandatory fields such as the agreement effective and expiry dates and the UCL signatory. Upload a copy of the agreement if you have one to hand.

When all the relevant agreement details have been entered, use the 'Save' button. To self-certify the Stage 2 requirement for a 'review of contracts' you need to mark the toggle labelled 'If you are done adding agreement details [...]' as 'Complete'.

It is important to remember that registering or signing a contract and being compliant with it are very different things. Owners of contracts (those who are accountable for complying with them) should read the terms and understand how they are required to comply, and consult if there is any uncertainty. You should liaise with Information Governance Advisory Service (infogov@ucl.ac.uk) about any uncertainty when handling contracts.