Trauma Responsive Social Work Services Programme: data protection impact assessment

Questions to identify data protection issues

Necessity

Personal data is required for delivery of training and evaluation to support engagement with the programme and monitor and evaluate outcomes. Names need to be collated for the issuing of certificates upon completion of training. Email addresses need to be collated to communicate with individuals about any changes to privacy notices, for example identifying an independent evaluation company. Appropriate evaluation is required to test out if this model of delivery is effective and inform us of any improvements to make. An evaluation report will help us identify next steps.

Proportionality

We will also be collecting additional information relating to your characteristics in the form of your ethnicity and health data in relation to your wellbeing at work. Wellbeing questions are required to measure the impact of our programme over time. This information will not be shared out with the TRSWS team, the procured evaluator. Qualtrics survey tool will be used to capture this data.

The team discussed at length with experts in Improvement Service our needs and identified the minimum data we need to collate to ensure we receive a robust evaluation. The governance groups have been consulted.

Justification

Ensuring Scotland’s social work services are able to recognise where people are affected by trauma, and respond in ways which reduce risks of retraumatising and supports recovery is a priority for the Scottish Government. Supporting the social work services workforce will improve services for users and those working within them.

Involvement of multiple organisations

Multiple organisation involvement will be kept to a minimum. Each implementation site will directly interface with the TRSWS team. The only inclusion of another organisation is any locally commissioned service, and the contractor evaluating the programme.

Anonymity and pseudonymity

Names will be required so that certificates can be issued upon the completion of training. Email addresses are required to register for training and for the team to communicate with individuals around any changes to privacy notice. The risk of this will be fully assessed within the risk section below.

Technology

The use of Qualtrics and Microsoft tools for survey/questionnaires creation and administration is required due to functionality not existing within other available software. Risks appropriately covered below.

Identification methods

Names will be required so that certificates can be issued upon the completion of training. Email addresses are required to register for training and for us to communicate with individuals around any changes to privacy notice. The risk of this will be fully assessed within the risk section below.

Sensitive/Special Category personal data – including biometric data

Ethnicity will be captured. Other special category data which may be collated would be if anything captured in videos for our training packages and this will be covered in our consent form.

We will also be collecting additional information relating to your characteristics in the form of your ethnicity and health data in relation to your wellbeing at work. Ethnicity is required due to the evolving evidence base in how the impact of trauma can be different depending on an individual’s ethnicity. Wellbeing questions are required to measure the impact of our programme over time. This information will not be shared out with the TRSWS team, the procured evaluator. Qualtrics survey tool will be used to capture this data. There is potential that some special category data is captured in any recordings of individuals created for training materials. This will be covered in a separate consent form.

Children or other vulnerable data subjects (people)

Not applicable.

Data matching or linkage

No further data will be captured unless specified in this form.

Changes to data handling procedures

No changes other than contracting evaluator are expected. The DPIA and privacy notices will be reviewed with any changes. Individuals will be notified of any privacy notice changes.