Eclipse Hosted and Data protection regulation etc questions

[ChrisH]

What kind of policies or regulation standard type things need to be abided by by a company such as MLS to have access to you MIS data? Is there a certain ISO they have to be compliant in or a document they need to sign or is it down to the data they hold on their servers? Just trying make sure I understand our legal obligations here for using their hosted service and them having a connection to our MIS.

[pcstru]

They should be registered with the ICO, or if not in the EEA (European Economic Area), they should reside in a country which is either on the EU Commissioners list of countries providing adequate protection for rights and protections of data subjects, or they should be signatory to the US safe Harbour Agreement. However, regardless of any of that, the data use will be covered by your registration and you are responsible for it (the company are acting as a service supplier to you).