Summary of the Initial Data Protection Impact Assessment Sample Clauses

Summary of the Initial Data Protection Impact Assessment. The DPIA completed by the data controllers identified the following risks and additional actions to be taken mitigate impact: • Inappropriate access to individuals’ personal data to be mitigated via: o Anonymised patient / service user data to be used wherever possible; o Pseudonymised NHS patient data to be used is subject to data sharing agreements with NHS Digital and NHS Providers; o Identifiable and confidential patient / service user data will only be used with written authorisation from the SCC / CCG Caldicot Guardian; o Special Category Personal Data of Staff will only be used where approved by SCC / CCG Information Asset Owner • ICT systems holding / processing personal data are not secure leading to IG incidents, to be mitigated via: o Completion of Digital Technology Assessment Criteria (DTAC) by suppliers of any new ICT systems o Completion of appropriate ICT related assurance by data controllers for all ICT systems that hold personal data • Individuals’ rights under data protection legislation are not met, to be mitigated via: o Agreed Standard Operating Procedure for handling Information Rights Requests relating to integrated commissioning teams o Privacy Notices and Records of Processing of SCC and CCG updated to detail sharing of data for these purposes • Inappropriate sharing of commercially sensitive data, to be mitigated via: o Confidentiality related clauses in Surrey Heartlands ISA and data included in Schedule o Honorary Agreements in place with SCC / CCG staff granted access to data The data controllers are satisfied that once the controls detailed above have been implemented that the risks will have been mitigated to a level that is considered by them to be acceptable.
Sample 1Sample 2Sample 3See All (4)
AutoNDA by SimpleDocs
Summary of the Initial Data Protection Impact Assessment. The project has been carefully designed to place the interests of patients uppermost. Concepts of informed consent and compliance with the Caldicott and Data Protection Principles have been incorporated into the software design. The design and data protection and security risks and the associated security measures and safeguards have previously been subjected to a detailed and rigorous impact assessment by representatives from each of the participating partner organisations acting together as the IG Steering Group that oversees Connected Care . The IG Steering Group is satisfied that all appropriate technical and physical measures against unauthorised or unlawful access, accidental loss or destruction of care data are in place. The initial DPIA recommends that a new Data Protection Impact Assessment is not required. It is the recommendation of the IG Steering Group that the proposed Connected Care analytics capability based on GraphNet’s Azure platform is appropriate for the Connected Care programme. Furthermore, it is the view of the Berkshire Local Medical Committee “that the Graphnet solution and proposed change for creating a Central Data Repository has been subjected to a rigorous Information Governance and technical security assessment. It is therefore the LMC’s recommendation that the Graphnet solution and proposed Central Data Repository is fit for purpose, appropriate and justifiable”. Agreement Implementation Status On behalf of the Sharing Organisation I confirm that the information sharing arrangements described in this schedule are agreed and the information described in this schedule is to be made available to the User Organisations and individuals identified in this schedule starting on the Sharing Requirement Start Date and ending on the Sharing Requirement End Date. SU190005 – Windsor Riverside PCN Analytics Agreed by {{!guardian_es_:font(name=calibri,size=10) }} as Caldicott Guardian / Designated Officer / Data Protection Officer, for and on behalf of {{!org_es_:font(name=calibri,size=10) }} {{!addr_es_:font(name=calibri,size=10) }}. End of Schedule K Schedule L – SU190005/{{!dpiaprefix_es_:font(name=calibri,size=10)}}– Windsor Riverside PCN Analytics This schedule to the Regional Health and Social Care Information Sharing Agreement provides key questions covering six risk categories which when answered objectively offer an initial assessment of the additional risks to privacy posed by the proposed sharing of information. Where a question...
Sample 1See All (4)
Summary of the Initial Data Protection Impact Assessment. The Data Protection Impact Assessment completed for this sharing activity has identified: • That this is existing data sharing activity for which there are no known incidents having occurred • The data sharing has a lawful basis under the Data Protection Xxx 0000 and the UK General Data Protection Regulation • The Common Law Duty of Confidentiality has been met via an implied consent process where the service users (or their representative) are provided with information regarding how their data will be used and given the opportunity to object to this should they wish to do so • That data will be held securely by the CCG and SCC and only shared with those that require it for a legitimate purpose • Risks associated with inappropriate disclosure of the data by the recipients of data – these can be partially mitigated by the application of protective markings and restrictions on usage of data when this is provided to recipients. The residual risk for this is accepted by the data controllers. Summary of Consultations The sharing has been discussed with partners at: • The Surrey IG Group, which includes the Data Protection Officers of Data Controllers • The ICS Data Governance Group, which includes the ICS Chief Clinical Information Officer Agreement Implementation Status On behalf of the Sharing Organisation I confirm that the information sharing arrangements described in this schedule are agreed and the information described in this schedule is to be made available to the User Organisations and individuals identified in this schedule starting on the Sharing Requirement Start Date and ending on the Sharing Requirement End Date. Agreed by as Caldicott Guardian / Designated Officer for and on behalf of NHS Surrey Heartlands Clinical Commissioning Group Annex D.1 – Sharing Service Profiles Data will be processed by: • staff and contractors of the CCG and SCC who work as part of the Integrated SEND Team • staff and contractors of the CCG and SCC that support delivery of the activity (e.g. IG, Complaints etc.) Annex D.2 – Opt-in/opt-out and Consent Model Sharing of service user identifiable personal and special category data is for direct care purposes only. The National Data Opt- out does not apply for the processing of personal data for the purpose of direct care. However, data subjects can object to their data being processed in line with UK GDPR Article 21 by contacting the relevant data controller. The data controller may refuse to comply with the objection to ...
Sample 1
Summary of the Initial Data Protection Impact Assessment. The project has been carefully designed to place the interests of patients uppermost. There is sharing of data through multiple stakeholders who utilise appropriately secured communication channels. The users of the information covered by this schedule would normally be expected to have access to this level of information as part of their normal working environment. Following on from the Initial Data Protection Impact Assessment, which has been answered objectively, a full PIA has been conducted. The Data Protection Impact Assessment for Connected Care project has identified 38 privacy and information security related risk topic areas. Following the implementation of appropriate mitigation measures for each privacy-related risk topic area the residual risk for all of these topic areas is now assessed as low. Representatives from each of the participating partner organisations acting together as the IG Steering Group covering Connected Care have completed a thorough review of the Data Protection Impact Assessment and the IG steering group is satisfied that all appropriate technical and physical measures against unauthorised or unlawful access, accidental loss or destruction of care data are in place. It is the recommendation of the IG Steering Group that the proposed Connected Care Intelligence capability based on GraphNet’s Azure platform is appropriate for the Connected Care programme.
Sample 1Sample 2
Summary of the Initial Data Protection Impact Assessment. The project has been carefully designed to place the interests of patients uppermost. The design and data protection and security risks and the associated security measures and safeguards have previously been subjected to a detailed and rigorous impact assessment by representatives from each of the participating partner organisations. The Clinisys ICE solution has been active for the last ten years without issue the system can be regarded as tried and proven. However, a new summary level Data Protection Impact Assessment has been conducted. The summary level Data Protection Impact Assessment has been prepared for the BSPS Clinisys ICE (DPIA0036) and has been reviewed and approved by the Regional IG Steering Group. In the opinion of the Regional IG Steering Group all risks are satisfactorily mitigated and now have a residual rating of “low”.
Sample 1
Summary of the Initial Data Protection Impact Assessment. The Surrey Care Record project is a continuation of an already proven concept, exercised over a year ago by SABP team. This is a text file-based type of integration dedicated to daily clinical shared data record exchange between SystmOne and Connected Care, Frimley ICS Shared Care Record that also uses Graphnet’s signature software application product called Care Centric.
Sample 1
Summary of the Initial Data Protection Impact Assessment. The project has been carefully designed to place the interests of patients uppermost. Concepts of informed consent and compliance with the Caldicott and Data Protection Principles have been incorporated into the software design. The design and data protection and security risks and the associated security measures and safeguards have previously been subjected to a detailed and rigorous impact assessment by representatives from each of the participating partner organisations acting together as the IG Steering Group that oversees Connected Care . From the existing Data Protection Impact Assessment for the Connected Care Clinical Platform (DPIA0001) the IG Steering Group is satisfied that all appropriate technical and physical measures against unauthorised or unlawful access, accidental loss or destruction of care data are in place. Furthermore, it is the view of the Berkshire Local Medical Committee “that the Graphnet solution and proposed change for creating a Central Data Repository has been subjected to a rigorous Information Governance and technical security assessment. It is therefore the LMC’s recommendation that the Graphnet solution and proposed Central Data Repository is fit for purpose, appropriate and justifiable”. As a consequence a new or updated Data Protection Impact Assessment is not required for Connected Care. However, a new Data Protection Impact Assessment is required for the Surrey Ice and Connected Care interface. A Data Protection Impact Assessment has been prepared for the Surrey Ice and Connected Care interface (DPIA0022) and has been reviewed and approved by the Regional IG Steering Group.
Sample 1
AutoNDA by SimpleDocs
Summary of the Initial Data Protection Impact Assessment. The project has been carefully designed to place the interests of data subjects uppermost. There is sharing of data through multiple stakeholders who utilise appropriately secured communication channels. The users of the information covered by this schedule would normally be expected to have access to this level of information as part of their normal working environment.
Sample 1

Related to Summary of the Initial Data Protection Impact Assessment

  • Data Protection Impact Assessment If, pursuant to Data Protection Law, Customer (or its Controllers) are required to perform a data protection impact assessment or prior consultation with a regulator, at Customer’s request, SAP will provide such documents as are generally available for the Cloud Service (for example, this DPA, the Agreement, audit reports or certifications). Any additional assistance shall be mutually agreed between the Parties.

  • Data Protection Impact Assessments Xxxx shall provide reasonable assistance to Client with any data protection impact assessments, and prior consultations with a Supervisory Authority, required under Data Protection Laws, in each case solely in relation to Processing of Personal Data by, and taking into account the nature of the Processing and information available to, Xxxx.

  • Data Protection Impact Assessment and Prior Consultation Processor shall provide reasonable assistance to the Company with any data protection impact assessments, and prior consultations with Supervising Authorities or other competent data privacy authorities, which Company reasonably considers to be required by article 35 or 36 of the GDPR or equivalent provisions of any other Data Protection Law, in each case solely in relation to Processing of Company Personal Data by, and taking into account the nature of the Processing and information available to, the Contracted Processors.

  • Impact Assessment If Service Provider desires to make any change, upgrade, replacement or addition that may have an adverse impact or require changes as described in Section 9.6(c) or increase the risk of Service Provider not being able to provide the Services in accordance with this Agreement or violate or be inconsistent with DIR Standards or Strategic Plans, then Service Provider shall prepare a written risk assessment and mitigation plan (1) describing in detail the nature and extent of such adverse impact or risk, (2) describing any benefits, savings or risks to DIR or the DIR Customers associated with such change, and (3) proposing strategies to mitigate any adverse risks or impacts associated with such change and, after consultation and agreement with DIR, implement the plan.

  • Risk Assessment An assessment of any risks inherent in the work requirements and actions to mitigate these risks.

  • Evaluation Cycle: Formative Assessment A) A specific purpose for evaluation is to promote student learning, growth and achievement by providing Educators with feedback for improvement. Evaluators are expected to make frequent unannounced visits to classrooms. Evaluators are expected to give targeted constructive feedback to Educators based on their observations of practice, examination of artifacts, and analysis of multiple measures of student learning, growth and achievement in relation to the Standards and Indicators of Effective Teaching Practice.

  • Periodic Risk Assessment Provider further acknowledges and agrees to conduct periodic risk assessments and remediate any identified security and privacy vulnerabilities in a timely manner.

  • Conformity Assessment Procedures 1. Each Party shall give positive consideration to accepting the results of conformity assessment procedures of other Parties, even where those procedures differ from its own, provided it is satisfied that those procedures offer an assurance of conformity with applicable technical regulations or standards equivalent to its own procedures.

  • Comprehensive Assessment an initial and ongoing part of the member-centered planning process employed by the interdisciplinary team (IDT) to identify the member’s outcomes and the services and supports needed to help support those outcomes. It includes an ongoing process of using the knowledge and expertise of the member and caregivers to collect information about:

  • Risk Assessments a. Risk Assessment - Transfer Agent shall, at least annually, perform risk assessments that are designed to identify material threats (both internal and external) against Fund Data, the likelihood of those threats occurring and the impact of those threats upon the Transfer Agent organization to evaluate and analyze the appropriate level of information security safeguards (“Risk Assessments”).

Time is Money Join Law Insider Premium to draft better contracts faster.