Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Part of Data Protection Impact Assessment Direct Care APIs (GP Connect)

Further actions

Previous Chapter

Identify and assess risks

Current Chapter

Current chapter – Further actions

View all
Page contents

The completed DPIA should be submitted to the PTE Helpline Service ([email protected] ) for review.

The IAO should keep the DPIA under review and ensure that it is updated if there are any changes (to the nature of the processing and/or system changes).

Signatories

The DPIA accurately reflects the processing and the residual risks have been approved by the Information Asset Owner:

Summary of high residual risks

Next steps

DPO to inform stakeholders of ICO consultation outcome.

IAO along with DPO and SIRO to build action plan to align the processing to ICO’s decision.

Last edited: 26 March 2024 12:40 pm

Chapters

  1. Data Protection Impact Assessment Direct Care APIs (GP Connect)
  2. Consultation with stakeholders
  3. Purpose of the processing
  4. Nature and scope of the processing
  5. Summary of GP Connect service
  6. Data flow diagram
  7. Describe the legal basis for the processing (collection, analysis or disclosure) of personal data?
  8. Demonstrate the fairness of the processing
  9. Is it necessary to collect and process all data items?
  10. Identify and assess risks
  11. Further actions