Introduction Privacy Impact Assessments (PIAs) serve to ensure the organisation remains compliant with the General Data Protection Regulation (GDPR). There is a legal requirement under the European Union General Data Protection Regulation (EU) 2016/679 for Data Privacy Impact Assessments to be conducted where there is the possibility that the privacy rights of individuals may be impacted. Projects that involve personal information or intrusive technologies give rise to privacy issues and concerns. Privacy embraces "confidentiality" and "patient consent" and as an overarching principle this policy advocates that respect for patient privacy and dignity should be considered at the outset of any project, which embraces confidentiality and patient consent. To enable an organisation to address the privacy concerns and risks a Privacy Impact Assessment (PIA), as advocated by the Information Commissioner, must be used. Article 35 of the GDPR - Data Protection Impact Assessment: Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, the Controller shall prior to the processing, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data. Purpose Through the PIA processes the Trust Information Governance Team will be better foresee problems and negotiate solutions to ensure data protection compliance. Risks that are identified through this process can then be managed through the gathering and sharing of information with key stakeholders. Systems can then be designed to avoid unnecessary intrusion into people's privacy where possible and features can be built in from the outset, hence reducing the likelihood of privacy intrusion. Where the success of a project depends on people accepting, adopting and using a new system, process or programme, privacy concerns can be a significant risk factor that threatens the Trust credibility and integrity. In order to address this risk, it is advisable that the used of the PIA is seen as a risk management technique. Carrying out a PIA will increase public confidence in our data collection and the services we provide 3.Scope Privacy impact Assessment (PIA) is a process which enables organisations to anticipate and address the likely impacts of new initiative on an individual's privacy. It is important to notes that the individuals referred to are patients/ services users and staff. The Trust guidance for carrying out a PIA applies to all individual involved in the introduction of new processes or proposed changes to existing methods. All staff are required to be familiar with and comply with this guidance
Introduction Privacy Impact Assessments (PIAs) serve to ensure the organisation remains compliant with the General Data Protection Regulation (GDPR). There is a legal requirement under the European Union General Data Protection Regulation (EU) 2016/679 for Data Privacy Impact Assessments to be conducted where there is the possibility that the privacy rights of individuals may be impacted. Projects that involve personal information or intrusive technologies give rise to privacy issues and concerns. Privacy embraces "confidentiality" and "patient consent" and as an overarching principle this policy advocates that respect for patient privacy and dignity should be considered at the outset of any project, which embraces confidentiality and patient consent. To enable an organisation to address the privacy concerns and risks a Privacy Impact Assessment (PIA), as advocated by the Information Commissioner, must be used. Article 35 of the GDPR - Data Protection Impact Assessment: Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, the Controller shall prior to the processing, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data. Purpose Through the PIA processes the Trust Information Governance Team will be better foresee problems and negotiate solutions to ensure data protection compliance. Risks that are identified through this process can then be managed through the gathering and sharing of information with key stakeholders. Systems can then be designed to avoid unnecessary intrusion into people's privacy where possible and features can be built in from the outset, hence reducing the likelihood of privacy intrusion. Where the success of a project depends on people accepting, adopting and using a new system, process or programme, privacy concerns can be a significant risk factor that threatens the Trust credibility and integrity. In order to address this risk, it is advisable that the used of the PIA is seen as a risk management technique. Carrying out a PIA will increase public confidence in our data collection and the services we provide 3.Scope Privacy impact Assessment (PIA) is a process which enables organisations to anticipate and address the likely impacts of new initiative on an individual's privacy. It is important to notes that the individuals referred to are patients/ services users and staff. The Trust guidance for carrying out a PIA applies to all individual involved in the introduction of new processes or proposed changes to existing methods. All staff are required to be familiar with and comply with this guidance