Changes to your premises that will involve private spaces where clients or customers may disclose their personal information Example: Changing the location of the reception desk, where people may discuss personal details New regulatory requirements that could lead to compliance action against individuals on the basis of information about them Example: Adding a new medical condition to the requirements of a pilot’s license List anything else that may impact on privacy, such as bodily searches, or intrusions into physical space 2.2 Initial risk assessment If you answered to any of the questions above, use the table below to give a rating “Yes” – either Low (L), Medium (M), or High (H) for each of the aspects of the project set out in – the first column. For risks that you’ve identified as Medium or High, indicate (in the right-hand column) how the project plans to lessen the risk (if this is known). If you answered to all the questions in 2.1 above, move on to section 3 below. “No” Aspect of the Project Rating Describe any medium and high (L, M or H) risks and how to mitigate them Level of information handling L Minimal personal information will be – handled M A moderate amount of personal – information (or information that could become personal information) will be handled H A significant amount of personal – information (or information that could become personal information) will be handled
Changes to your premises that will involve private spaces where clients or customers may disclose their personal information Example: Changing the location of the reception desk, where people may discuss personal details New regulatory requirements that could lead to compliance action against individuals on the basis of information about them Example: Adding a new medical condition to the requirements of a pilot’s license List anything else that may impact on privacy, such as bodily searches, or intrusions into physical space 2.2 Initial risk assessment If you answered “Yes” to any of the questions above, use the table below to give a rating – either Low (L), Medium (M), or High (H) – for each of the aspects of the project set out in the first column. For risks that you’ve identified as Medium or High, indicate (in the right-hand column) how the project plans to lessen the risk (if this is known). If you answered “No” to all the questions in 2.1 above, move on to section 3 below. Aspect of the Project Rating (L, M or H) Describe any medium and high risks and how to mitigate them Level of information handling L – Minimal personal information will be handled M – A moderate amount of personal information (or information that could become personal information) will be handled H – A significant amount of personal information (or information that could become personal information) will be handled
Template-1-Brief-Privacy-Analysis-Part-1-Appendix-A.docx