14. Does implementation of the Please policy or procedure necessitate summarise NO processing information about people the YES (No PIA who can be identified from that categories, required) information or in combination with if not listed other information in 15, below Political opinions or Other please – Physical or mental Proven or alleged membership of a Sexual life 15. Does implementation of the health offences Specify below trade union policy or procedure necessitate processing sensitive or otherwise Information that Religion and belief confidential personal data? Please Race or ethnic Gender could be used to (including lack of N/A highlight any affected categories origin Reassignment commit identity belief) fraud Please summarise any other information processed that would cause significant damage or distress to people if disclosed without their consent 16. Have you agreed actions with Secure Disclosure/data Yes Data minimisation Staff training the Head of Heritage and communication sharing protocols Information Governance to manage No: to be agreed on Physical security the data securely? If yes, please IT security Retention policy Secure destruction [date] controls indicate the actions agreed 18. Date for future review of 17. Date PIA Completed policy/function
14. Does implementation of the policy or procedure necessitate processing information about people who can be identified from that information or in combination with other information YES NO (No PIA required) Please summarise the categories, if not listed in 15, below 15. Does implementation of the policy or procedure necessitate processing sensitive or otherwise confidential personal data? Please highlight any affected categories Physical or mental health Political opinions or membership of a trade union Sexual life Proven or alleged offences Other – please Specify below Race or ethnic origin Religion and belief (including lack of belief) Gender Reassignment Information that could be used to commit identity fraud N/A Please summarise any other information processed that would cause significant damage or distress to people if disclosed without their consent 16. Have you agreed actions with the Head of Heritage and Information Governance to manage the data securely? If yes, please indicate the actions agreed Yes Data minimisation Staff training Secure communication Disclosure/data sharing protocols No: to be agreed on [date] Physical security controls IT security Retention policy Secure destruction 17. Date PIA Completed 18. Date for future review of policy/function