Privacy and Actions Table Please see appendix 2 for additional guidance on completing this table Likelihood of this Impact happening 1 1 Very Will risk be unlikely 2-Minor Overall risk accepted, Mitigating action to reduce or Explain how What are the potential risks to the 2 Unlikely 3-Moderate score reduced or eliminate each risk Expected this action Responsible individuals whose personal data 3 Possible 4-Major (likelihood eliminated? OR eliminates or you hold? 4 Likely x impact = Where risk is accepted give date reduces the risk 5 Very Likely score) justification. (See (See guidance guidance below for below for definition) definition)) No patient identifiable data will be held. No patient identifiable data will be transferred. Any loss of anonymised data would not result in harm to any individual, since they can’t be identified. Data is protected by the Ensures that BMC Network and Data staff are Security Policy. This aware of includes that all BMC staff data are Data Protection protection trained. risks and BMC are in the process of work within Illegitimate access, undesired completing the new Data an agreed modification and Security and Protection policy Director disappearance of data 1 1 1 Eliminated toolkit framework Accidental receipt of patient identifiable data (e.g. carer Random samples of the Programme such as a carer writing a data will be scanned for Manager name in a text box on the 1 1 1 Eliminated any personal data. NHSBN
Privacy and Actions Table Please see appendix 2 for additional guidance on completing this table What are the potential risks to the individuals whose personal data you hold? Likelihood of this happening 1 Very unlikely 2 Unlikely 3 Possible 4 Likely 5 Very Likely (See guidance below for definition)) Impact 1 2-Minor 3-Moderate 4-Major (See guidance below for definition) Overall risk score (likelihood x impact = score) Will risk be accepted, reduced or eliminated? Mitigating action to reduce or eliminate each risk OR Where risk is accepted give justification. Explain how this action eliminates or reduces the risk Expected date Responsible Illegitimate access, undesired modification and disappearance of data 1 1 1 Eliminated No patient identifiable data will be held. No patient identifiable data will be transferred. Any loss of anonymised data would not result in harm to any individual, since they can’t be identified. Data is protected by the BMC Network and Data Security Policy. This includes that all BMC staff are Data Protection trained. BMC are in the process of completing the new Data Security and Protection toolkit Ensures that staff are aware of data protection risks and work within an agreed policy framework Director Accidental receipt of patient identifiable data (e.g. carer such as a carer writing a name in a text box on the 1 1 1 Eliminated Random samples of the data will be scanned for any personal data. Programme Manager NHSBN
NACEL%20DPIA%20v6%20180618.docx