Legal Obligations

Where a school/ETB enters into an agreement with a data processor for the processor to process data on behalf of the school/ETB, the school/ETB is legally obliged to put a written service-level agreement or data processing agreement in place between the school/ETB as data controller and the contracted company. Having a data processing agreement in writing is a legal obligation imposed by section 2C(3)(a)-c Data Protection Acts.