A partner hospital shares patient contact lists with another organisation for a joint health fair without assessing the recipient's safeguards. What should privacy practice require before such sharing?
Select an answer to reveal the explanation.
Short Explanation
Before you hand over patient contacts, check that the other shop can lock the door. Sharing for a health fair is still sharing personal data—assess safeguards and wrap the transfer in proper agreements. Good intentions on a flyer don't replace that homework.
Full Explanation
When personal data is disclosed to another organisation, controllers must ensure the sharing is lawful and that appropriate security and contractual arrangements protect the data. Assessing recipient safeguards and documenting instructions or agreements is part of responsible third-party sharing; event marketing alone does not remove that duty.