This service has been setup to allow the secure exchange of information between the NSPCC and 3rd parties. To use this service the following responsibilities must be met.

1. Before information is exchanged the NSPCC information asset needs to authorise the exchange of information in this way.

2. Where information is considered to be sensitive or classified as restricted then a legal contract must be in place before any information is exchanged. This process will include an information security assessment of the 3rd party.

3. In order to receive information from the NSPCC the 3rd party must be registered under the Data Protection Act. That is information exchanged should be used only for its intended purpose. And it needs to be kept secure and protected from potential abuse.

4. Information should be verified to be free of any viruses or malware before it is exchanged.

5. Any rights to the information will remain with the copyright holder.

6. Information provided to the NSPCC will be maintained to the level agreed with the 3rd party.

7. When an information exchange ceases between the NSPCC and a 3rd party then the FTP account(s) should be disabled. And the 3rd party shall remove any information provided by the NSPCC from their systems.

8. If either the NSPCC or the 3rd party becomes aware that an exchange of information has not met the responsibilities above then this should be reported immediately to the NSPCC Security Manager.

9. Failure to comply with the responsibilities above may result in disciplinary action or termination of contract.

If you are in doubt as to whether you should proceed, please contact your manager or the member of staff who has provided you with access to this site.