Human Tissue (Authorisation) (Scotland) Bill: DPIA
The Data Protection Impact Assessment (DPIA) for the Human Tissue (Authorisation) (Scotland) Bill explores how the Bill impacts on personal data and privacy.
7. Risks identified and appropriate solutions or mitigation actions proposed
Is the risk eliminated, reduced or accepted?
| Risk |
Ref |
Solution or mitigation |
Result |
|---|---|---|---|
| Paper registration form processing is contracted out to a supplier – they have data storage centres outside of the European Economic Area ( EEA). |
1 |
All data is transferred securely via SFTP in accordance with IT Security procedures. This information is communicated to registrants in the data privacy statement. Sample checking is completed. |
Reduce |
| Data is shared with external partners such as a mailing house |
2 |
All data is transferred securely via SFTP in accordance with IT Security procedures. A data sharing agreement is in place. |
Reduce |
Contact
There is a problem
Thanks for your feedback