Non-compliance compliance with not possible with DPA principle 1 fair and lawful to eliminate fair and lawful processing at this stage – processing Assurance that as the there will be an Comms 1. May lead to active plan will public mistrust communication need to 2. May lead to campaign ensure it sanction by the All relevant staff addresses Information informed of all aspects Commissioners need to to enable office (ICO) understand and individuals disseminate to be fully communication informed. material. Integrate the PIA outcomes back into the project plan NB. This must include any actions identified in Table 1 and Table 2. Who is responsible for integrating the PIA outcomes back in to the project plan and updating any project management paperwork? Who is responsible for implementing the solutions that have been approved? Who is the contact for any privacy concerns which may arise in the future? Ref Action to be taken Date for Anticipated Responsibility Current No. completion risk score for action job – of actions following title not names mitigation RAG Likelihood status Impact Project Manager Meeting Communications plan to liaise with arranged to be developed 2 2 Communication with lead and embed into project plan Lead
Non-compliance with DPA principle 1 – fair and lawful processing 1. May lead to public mistrust 2. May lead to sanction by the Information Commissioners office (ICO) compliance with fair and lawful processing Assurance that there will be an active communication campaign All relevant staff informed of need to understand and disseminate communication material. not possible to eliminate at this stage as the Comms plan will need to ensure it addresses all aspects to enable individuals to be fully informed. Integrate the PIA outcomes back into the project plan NB. This must include any actions identified in Table 1 and Table 2. Who is responsible for integrating the PIA outcomes back in to the project plan and updating any project management paperwork? Who is responsible for implementing the solutions that have been approved? Who is the contact for any privacy concerns which may arise in the future? Ref No. Action to be taken Date for completion of actions Anticipated risk score following mitigation Responsibility for action – job title not names Current Likelihood Impact RAG status Communications plan to be developed 2 2 Project Manager to liaise with Communication lead and embed into project plan Meeting arranged with Lead