Election results for East Surrey Council and West Surrey Council

How we share information with other organisations

Information sharing (Surrey Multi Agency Information Sharing Protocol)

The pages in this section layout the Multi Agency Information Sharing Protocol (MAISP), it's framework and useful guidance for you to follow when signing up to the MAISP.

These pages replace version 6 of the MAISP. This is version 7.0/2026. The MAISP will be reviewed at intervals by the Surrey MAISP action group.

What is the MAISP?

We all need to share personal information to do our jobs. Protocols and data sharing between organisations gives practitioners access to relevant and accurate information and enables them to provide the best services to our users and, where appropriate, the best support.

The MAISP is an overarching framework that identifies the commitments that are required by each partner organisation to enable the responsible sharing of personal information to take place.

It provides guidance for practitioners on best practice when sharing information between organisations. It outlines the principles, standards, lawful and justifiable basis for using and sharing information about people. It also links to sources of further advice and support.

When used correctly, the MAISP can:

  • help you cut down on replicating administrative processes
  • provide assurance that any information disclosed or shared has been shared carefully and responsibly in compliance with data protection legislation
  • be used as part of Records of Processing activities
  • help with requirements to demonstrate accountability and transparency
  • make sure the people whose data is shared have access to all their rights

The Surrey MAISP identifies the obligations and commitments required by each organisation to enable lawful, fair and proportionate sharing of personal and non-personal information. The Surrey MAISP will, for the purposes of sharing personal data, also assist organisations in meeting their obligations under the Data Protection Act 2018 (DPA) and UK General Data Protection Regulation (GDPR).

The Surrey MAISP will, for the purposes of sharing non-personal data, help support organisations to recognise and apply their obligations and good practice when processing non-personal data for the purpose of Local Government Reorganisation (LGR) related work. Non‑personal data shared under this Protocol may include aggregated, anonymised, or otherwise non‑identifiable information relating to service demand, asset management, financial modelling, workforce planning, infrastructure, and geographic or demographic trends, to support evidence‑based decision‑making, strategic planning and the development of future service delivery and operating models.

We have published some good practice principles applicable to the sharing of non-personal data under this Protocol. This provides definitions, examples and a checklist to support the application of those principles in practice.

Any information sharing about individuals can only happen when it is lawful and necessary to do so. All public and voluntary sector organisations, private organisations contracted to deliver relevant services on behalf of the public sector and organisations providing health, education, safety, crime prevention and social wellbeing services to people in Surrey can sign up to the Surrey MAISP.

The Information Commissioner's Office has produced guidance on data sharing.

There are several context specific MAISP Tier 2 information sharing protocols (ISP) in place in Surrey that are separate but complementary to this framework. They are:

The Surrey Heartlands ISP (which was a health and social care specific tier 2 ISP under MAISP) is being decommissioned and it is expected that lead organisations will take forward new data sharing arrangements under appropriate frameworks.

Local Government Reorganisation (LGR)

Government has confirmed plans for local government reorganisation in Surrey, announcing that two new unitary councils will replace the existing 12 councils in April 2027.

The creation of two unitary councils, East Surrey and West Surrey, means that from April 2027 an East Surrey unitary authority will replace the current areas covered by Elmbridge, Epsom and Ewell, Mole Valley, Reigate and Banstead, and Tandridge councils. A West Surrey unitary will take over the areas of Guildford, Runnymede, Spelthorne, Surrey Heath, Waverley and Woking.

Local Government Reorganisation is a complex process and there will be a period of transition to allow for services and support systems to be securely transferred.

During this time existing arrangements for data processing will be maintained until they can be reviewed, and new privacy notices issued.

Legal Bases

Section 24 of the Local Government and Public Involvement in Health Act 2007 allows the Secretary of State to issue a direction that restricts the financial and contractual activities of local authorities that are to be dissolved under a structural change order. This is to ensure that the current councils do not make significant financial or contractual commitments that could affect the future authorities' ability to manage their resources effectively.

The Surrey (Structural Change) Order 2026 Statutory Instrument No. 264 (SCO) is the legal instrument that creates the shadow authorities. It also puts in place the process by which those authorities will assume responsibility for the delivery of services in the following years based upon the following legislation:

  • Local Government Act 1972
  • Local Government and Housing Act 1989
  • Local Government Act 2000
  • Local Government and Public Involvement in Health Act 2007
  • Localism Act 2011
  • Digital Economy Act 2017

MAISP explained

In this section

Did you find this information helpful?

Rating Did you find the information helpful?

We aren't able to reply to individual comments, so please don't include any personal details.