Please refer to roles/ job tit les. Yes No □ □ 22. Is there a useable audit trail applicable □Not inI place for the project? If yes, please outline the audit plan: For example, to identify who has accessed a record? 23. Detail where will the data be kept/stored/accessed? Please outline what data will be stored where. Fax .24 I Please indicate all methods □ □Email (Unsecure/Personal) D Email (Secure/nhs.net) Internet (unsecure - e.g.http) □ in I - e.g. https) which data will be transferred □Telephone □Internet (secure By hand Courier □ □ Post - - normal □ track/traceable □Post D Other: enter text. I Does the project 25. D Yes No □ involve privacy enhancing If yes, please give details: technologies? New forms of encryption; 2 factor authentication, pseudonymisation. Is there a documented 26. Yes No □ □ SystemI Level Security Policy D Not applicable (SLSP) or process for this project? If yes, please provide a copy. A SLSP is required for new systems. Privacy and Electronic Communications Regulations I Will the project involve the 27. I No □Yes □ sending of unsolicited marketing messages If yes, what communications will be sent? electronically such as telephone, fax, email and Will consent be sought prior to this? text? D Yes D No Please note that seeking to influence an individual is If no, please explain why consent is not being sought first : considered to be marketing. Records Management
Please refer to roles/ job tit les. 22. Is there a useable audit trail inI place for the project? For example, to identify who has accessed a record? □ Yes □ No □Not applicable If yes, please outline the audit plan: 23. Detail where will the data be kept/stored/accessed? Please outline what data will be stored where. .24 I Please indicate all methods in I which data will be transferred □ Fax □Email (Unsecure/Personal) D Email (Secure/nhs.net) □ Internet (unsecure - e.g.http) □Telephone □Internet (secure - e.g. https) □ By hand □ Courier □ Post - track/traceable □Post - normal D Other: enter text. 25. I Does the project involve privacy enhancing technologies? New forms of encryption; 2 factor authentication, pseudonymisation. D Yes □ No If yes, please give details: 26. Is there a documented SystemI Level Security Policy (SLSP) or process for this project? A SLSP is required for new systems. □ Yes □ No D Not applicable If yes, please provide a copy. Privacy and Electronic Communications Regulations 27. I Will the project involve the sending of unsolicited marketing messages electronically such as telephone, fax, email and text? Please note that seeking to influence an individual is considered to be marketing. I □Yes □ No If yes, what communications will be sent? Will consent be sought prior to this? D Yes D No If no, please explain why consent is not being sought first : Records Management
Privacy%20Impact%20Assessment_COR64_September%202018.docx