e which agencies or organisations you are able to share safeguarding information with and what they can do with the information. Seek advice whenever you are uncertain. Data Sharing Agreements (DSA) It is good practice for agencies or organisations to have in place DSAs22 with agencies or organisations with which they will be sharing information regularly. DSAs are also known as information sharing agreements (ISAs) or protocols. Data Protection Impact Assessments (DPIA) It is not usually necessary to undertake a DPIA23 for sharing information on a one-off basis. However, before sharing any personal information on a regular basis, as part of a routine or planned sharing exercise, you or your agency or organisation should carry out a DPIA. For more information you can refer to Step 5 of the ICO’s 10 step guide. Knowing the amount of information to share The sharing of personal information must be necessary, fair and proportionate – only share the personal information that is adequate, relevant and limited to what is necessary to protect a child from harm. Requests to share information should explain clearly what is required and why, clarifying any meaning or terminology where needed to avoid misinterpretation or misunderstanding. If in doubt about what information is needed, always seek clarification from the requesting agency or organisation. Where you have concerns about a child and are unsure if they are at risk of harm, be open to contacting other practitioners who have contact with the child and sharing limited information with them, to see if they hold additional information which gives cause to believe the child is at risk of harm. Information must always be shared securely. If you are unsure how to send or share information securely you should contact your manage