Information

Human Tissue (Authorisation) (Scotland) Bill: DPIA

The Data Protection Impact Assessment (DPIA) for the Human Tissue (Authorisation) (Scotland) Bill explores how the Bill impacts on personal data and privacy.


7. Risks identified and appropriate solutions or mitigation actions proposed

Is the risk eliminated, reduced or accepted?

Risk

Ref

Solution or mitigation

Result

Paper registration form processing is contracted out to a supplier – they have data storage centres outside of the European Economic Area ( EEA).

1

All data is transferred securely via SFTP in accordance with IT Security procedures.

This information is communicated to registrants in the data privacy statement.

Sample checking is completed.

Reduce

Data is shared with external partners such as a mailing house

2

All data is transferred securely via SFTP in accordance with IT Security procedures.

A data sharing agreement is in place.

Reduce

Contact

Back to top