Data Protection Impact Assessments

Data Protection Impact Assessments are an integral part of taking a “privacy by design” approach. Data Protection Impact Assessments are a tool that The Clatterbridge Cancer Centre NHS Foundation Trust use to identify and reduce the privacy risks of projects. Projects could include:

• Introduction of a new paper or electronic information system for storing and accessing personal data
• Update or revision of a key system that might alter the way in which the organisation uses, monitors and reports personal data
• Changes to an existing system where additional personal data will be collected
• Proposal to collect personal data from a new source or for a new activity
• Using existing data for a new and unexpected purpose
• Plans to outsource business processes involving storing and processing personal data
• Plans to transfer services from one provider to another that include the transfer of information or information systems
• Changes to or introduction of new information sharing agreements
• A new surveillance system

A Data Protection Impact Assessment can reduce the risks of harm to individuals through the misuse of their personal information.It can also help us to design more efficient and effective processes for handling personal data.

Below is a table containing a short description of recent Data Protection Impact Assessments that the Trust has undertaken to ensure continued consideration is given to the privacy of its patients and staff:

Name of Data Protection Impact Assessment	Brief Description	Full Scale Data Protection Impact Assessment Required	Date Signed Off	By Whom
Clinical Utilisation Review (CUR): Software Transition Project	Transition to a different supplier of Clinical Utilisation Review software.	Yes	July 2018	Senior Information Risk Owner
e-Xchange	Participation in a regional clinical portal	Yes	October 2018	Information Governance Board
Referral to the Macmillan eHNA service run by Brio Leisure in West Cheshire	To facilitate referrals to the Macmillan eHNA service run by Brio Leisure in West Cheshire for patients with unmet needs who meet the referral criteria	Yes	October 2018	Information Governance Board
Clinical Speech Recognition	To facilitate the implementation of clinical voice recognition to enable clinical staff to use real time voice recognition and reduce turnaround time for clinical documents	Yes	December 2018	Caldicott Guardian
Rita Software	Facility to use the ‘collage’ and ‘life story’ sections of the reminiscence software already in use in the trust.	No	December 2019	Data Protection Officer
Mobile CRIS Project	To facilitate the roll out of the CRIS Mobile solution to enable the implementation of a paper lite environment in Radiology	No	January 2019	Data Protection Officer
ePADR	To develop an on line performance management and development review process based on best practice and to help embed a performance and development focused culture	No	March 2019	Data Protection Officer
Malinko	To facilitate the roll out of Malinko to help Clatterbridge Cancer Centre manage the community treatment team through automating and optimizing the patient appointment allocation process.	Yes	June 2019	Data Protection Officer
My Medical Record	To facilitate the roll out of The My Medical Record service is a personal health record (PHR) for patients/healthcare service users and medical professionals. It is used to support the provision of healthcare for several clinical conditions	Yes	October 2019	Senior Information Risk Owner
eConsent	To provide an electronic solution for obtaining patient consent forms for treatment.	Yes	February 2020	Caldicott Guardian
CCTV in the Isolators at Clatterbridge Cancer Centre - Liverpool	To facilitate the installation of CCTV in the Pharmacy Department Isolators to enable monitoring of settle and finger plates for any growth and therefore out of specification results	Yes	February 2020	Caldicott Guardian
DLC Custom Model Development	To facilitate the creation of custom DLCExpert models to allow auto-contouring on radiotherapy CT scans	No	February 2020	Data Protection Officer
Referro Telehealth	To facilitate the roll out of a Telehealth solution across the Trust to provide clinicians and patients with a stable, secure and robust video Conference system	Yes	February 2020	Deputy Caldicott Guardian
ICNet	To facilitate the use of a clinical surveillance platform used to support infection prevention and control	Yes	April 2020	Caldicott Guardian
Electronic Transfer of Care to Pharmacy	To facilitate the electronic transfer of information relating to discharge medication to the patient’s designated community pharmacy	Yes	April 2020	Caldicott Guardian
Blood360	To facilitate the implementation of a electronic blood tracking system	Yes	May 2020	Caldicott Guardian
Teenage Cancer Trust IAM Portal	To facilitate the implementation of a Teenage & Young Adult IAM system enabling professionals and young people to work in partnership through the young person’s cancer journey, living with and beyond cancer.	Yes	May 2020	Caldicott Guardian
CATCH	Service evaluation to support work on the COVID-19 pandemic for radiotherapy	No	May 2020	Data Protection Officer
Adaptive Radiotherapy Collaboration	Prototype software for adaptive radiotherapy will analyse images acquired through the course of a radiotherapy treatment and advise users on the impact of patient anatomical changes on the delivered dose	No	May 2020	Data Protection Officer
Wirral HIE/MIG Data Sharing	The data is intended for use in clinical settings and provides health professionals with access to a patient’s Primary Care Record, Community Care Record or Hospital Record.	Yes	August 2020	Data Protection Officer
CIPHA	Share2Care is a collaborative programme between Cheshire and Merseyside and the Lancashire & South Cumbria Health and Care Partnerships to deliver the electronic sharing of health and care records	Yes	September 2020	Data Protection Officer
Datix CloudIQ	Change from Datixweb to Datix CloudIQ.	Yes	October 2020	Caldicott Guardian
National COVID-19 Chest Imaging Database (NCCID)	To facilitate the creation a national database of chest X-ray, CT and MR images and other relevant patient information that enables the development and validation of automated analysis technologies that may prove effective in supporting COVID-19 care pathways.	Yes	October 2020	Senior Information Risk Owner, NHS England
Text Reminders - Radiology	To facilitate the implementation of text reminders for radiology appointments	No	April 2021	Data Protection Officer

A copy of the Trust’s Data Protection Impact Assessments are available upon request. Please email ccf-tr.cccdataprotectionofficer@nhs.net to request copies.

This page was last reviewed in May 2021