Public Sector (Data Sharing) Act 2016

A data provider and data recipient must ensure that public sector data provided under Part 3 or Part 4 is maintained and managed in compliance with any legal requirements concerning its custody and control (including, for example, requirements under the State Records Act 1997) that are applicable to them.

If a data recipient arranges for a person or body (other than another public sector agency) to conduct data analytics work using public sector data with which it has been provided, the data recipient must ensure that appropriate contractual arrangements are in place before the public sector data is provided to ensure that the person or body deals with the data in compliance with any requirements of this Act, the State Records Act 1997 and any data security policies that are applicable to the data recipient.