The Surrey Multi Agency Information Sharing Protocol (MAISP)

Information sharing during COVID-19

Dame Fiona Caldicott stated in an article published on 3 April:

"Information sharing must be done differently to support the fight against COVID-19 and to protect citizens compared to ordinary times. Information may need to be shared more quickly and widely across organisations than normal, or different types of information may need to be collected and used."

Related article: Data sharing during this public health emergency

Agencies across Surrey are working together in order to share appropriate information in a safe and secure manner with the purpose of protecting Surrey's citizens.

COVID-19 privacy notice

The pages in this section layout the Multi Agency Information Sharing Protocol (MAISP), it's framework and useful guidance for you to follow when signing up to the MAISP.

These pages replace version 5 of the MAISP. This is version 6.0/2021. The MAISP will be reviewed at intervals by the Surrey MAISP user group.

What is the MAISP?

We all need to share personal information to do our jobs. Data sharing between agencies gives practitioners access to relevant and accurate information and enables them to provide the best services to our users and, where appropriate, the best support.

The MAISP is an overarching framework that identifies the commitments that are required by each organisation to enable the responsible sharing of personal information to take place.

It provides guidance for practitioners on best practice when sharing information between agencies. It outlines the principles, standards, legal and justifiable basis for using and sharing information about people. It also links to sources of further advice and support.

When used correctly, the MAISP can help you cut down on replicating administrative processes and provide assurance that any information disclosed or shared has been shared carefully and responsibly in compliance with data protection legislation.

The Surrey MAISP identifies the obligations and commitments required by each organisation to enable sharing of personal information.

The Surrey MAISP will also help you demonstrate your obligations under the Data Protection Act 2018 (DPA) and UK-GDPR.

It can be used as part of your Records of Processing activities and it will help with the requirements placed on you to demonstrate accountability and transparency while making sure that the people whose data you share have access to all their rights. It will also help with due diligence when merging or acquiring new services.

Any information sharing about individuals can only happen when it is legal and necessary to do so. All public sector organisations, voluntary sector organisations and those private organisations contracted to deliver relevant services to the public sector and who provide services involving the health, education, safety, crime prevention and social wellbeing of people in Surrey are able to sign up to the Surrey MAISP.

There are also context specific sharing Tier 2 protocols in place across Surrey that are separate but complementary to this framework. Make sure you are using the correct protocol for the data you are sharing. They are:

  • Surrey Heartlands and Care Partnership
  • Education
  • Health
  • Social Care
  • Crime and Disorder
  • Civil Contingencies

The MAISP only covers the sharing of personal data. However, due to an increase in commitments from Central Government to improve how it uses data to drive better public services, we also make reference to best practice for pseudonymised and anonymised data.


  • Provides guidance to staff on how and when to share personal data
  • Provides you with a checklist of requirements before data sharing (MAISP Tier 1)
  • Helps you with the requirements in the DPA and UK-GDPR around transparency and accountability
  • Can form part of your Record of Processing Activities

The MAISP does NOT

  • Give you an automatic right to share any data
  • Make any data sharing mandatory
  • Automatically override any local practice or your own DPO advice
  • Constitute any form of legal advice and should not be relied on or treated as a substitute for specific advice relevant to particular circumstances

Handling of complaints, information requests or breaches of the MAISP

A Surrey MAISP user Group has been set up and an inauguration meeting will be held in January 2022.

If you have any questions, please email

In this section