Organisational Risk a Sample Clauses

Organisational Risk a. The proposed change involves data controller and processor organisations that have a prior history of working with similar shared information. b. The organisations concerned have considerable history of working together in the provision of care. The organisation risk level is considered low as the job functions, roles and confidentiality requirements are understood by all involved. 4. Data Risk a. This is a sharing arrangement that relies on technology that is tried and proven and the categories of data that are being shared would normally be shared or be available for sharing on a manual basis for consultations and the provision of care by the organisations concerned. b. The data can only be shared on a person by person basis and only after the data users have logged in with secure patient access credentials. c. The data can only be shared on a person by person basis and no bulk data access is available. d. The only patient data accessed during a consultation or case review is held in the EMISweb system and in the DocMan system (for shared attachments). e. No new data is created. f. None of the shared data is stored outside of EMISweb. g. Clinical documentation is not made available for sharing where a practice has indicated that the clinical documentation concerned is not to be shared and where the clinical documentation relates to excluded codes. Any known activities that will have a direct impact on this piece of work: None The sharing arrangements assessed in this DPIA have been agreed by the IG Steering Group.