Is the information you are likely to be of good enough quality for the purposes it is used for? Relevant Adequate, Are you able to amend information when necessary to up ensure it is up to date? and How are you ensuring that date personal information obtained to from individuals or other organisations is accurate? Accurate are the retention periods for the personal information and how will this be implemented? there any exceptional circumstances for retaining certain information for longer than the normal period? Retention How will information be fully anonymised or destroyed after it is no longer necessary? How will you action requests from individuals (or someone of acting on their behalf) for access to their personal the Rights information once held? individual What procedures are in place to ensure that all staff with and access to the information have adequate information measures governance training? If you are using an electronic technical system to process the information, what security measures are in place? How will the information be organisational Appropriate provided, collated, used and stored? What security measures will be used to transfer the identifiable information?
Adequate, Relevant Is the information you are likely to be of good enough quality for the purposes it is used for? Accurate and up to date Are you able to amend information when necessary to ensure it is up to date? How are you ensuring that personal information obtained from individuals or other organisations is accurate? Retention are the retention periods for the personal information and how will this be implemented? there any exceptional circumstances for retaining certain information for longer than the normal period? How will information be fully anonymised or destroyed after it is no longer necessary? Rights of the individual How will you action requests from individuals (or someone acting on their behalf) for access to their personal information once held? Appropriate technical and organisational measures What procedures are in place to ensure that all staff with access to the information have adequate information governance training? If you are using an electronic system to process the information, what security measures are in place? How will the information be provided, collated, used and stored? What security measures will be used to transfer the identifiable information?
20180425_Data_Protection_Impact_Assessment_Policy_Appendix_02.docx