Summary of NHS Dorset approved Data Protection Impact Assessments to assess privacy risks to new systems and services.
Please note that some of these Data Protection Impact Assessments may apply to NHS Dorset Clinical Commissioning Group rather than NHS Dorset Integrated Care Board.
2025/26
Reference: DPIA-2025-ICB01
Summary: For continuous assessment of the use of high-cost drugs which are on the Dorset formulary
Date approved: 1 May 2025
Reference: DPIA-2025-ICB02
Summary: A prescription decision support tool
Date approved: 5 June 2025
Reference: DPIA-2025-ICB05
Summary: A SharePoint list caseload tracker
Date approved: 6 June 2025
Reference: DPIA-2025-ICB06
Summary: To allow one member of staff to work abroad for a fixed period of time
Date approved: 3 July 2025
Reference: DPIA-2025-ICB08
Summary: To enable cross tenant synchronisation in both directions to and from the nhs.net Microsoft Office 365 tenancy and the NHS Dorset tenancy across the cluster
Date approved: 7 August 2025
Reference: DPIA-2025-ICB10
Summary: For the sharing of any data deemed necessary for the purpose of bringing the parties together to form a cluster, following direction from NHS England
Date approved: 22 October 2025
2024/25
Reference: DPIA-2024-ICB01
Summary: Care Navigation Service Instance of Amazon Connect and AWS
Date approved: 2 July 2024
Reference: DPIA-2024-ICB02
Summary: To manage and govern the business and information technology architecture of Our Dorset Health & Care System
Date approved: 3 July 2024
Reference: DPIA-2024-ICB05
Summary: To enable automation for downloading reports to support the requirement for PHC to report direct to the SLT within NHS Dorset
Date approved: 21 August 2024
Reference: DPIA-2024-ICB09
Summary: Delegation of pharmacy, optometry and dental (POD) commissioning services
Date approved: 16 December 2024
Reference: DPIA-2024-ICB11
Summary: To manage internally the physiotherapy self-referral form
Date approved: 4 June 2025
Reference: DPIA-2024-ICB12
Summary: To trial the use of Microsoft CoPilot in all age continuing care
Date approved: 6 June 2025
2023/24
Reference: DPIA-2023-01
Summary: The use of SharePoint within the safeguarding team
Date approved: 4 July 2023
Reference: DPIA-2023-02
Summary: To provide support to individuals previously detained for treatment under the Mental Health Act
Date approved: 23 May 2023
Reference: DPIA-2023-03
Summary: The ICB to take responsibility for for the commissioning of pharmacy, optometry, and dental (POD) services
Date approved: 10 May 2023
Reference: DPIA-2023-05
Summary: To help the management and coordination of student placements
Date approved: 11 August 2023
Reference: DPIA-2023-07
Summary: A dedicated website to provide up-to-date, accessible and informative information on education, career development, and support available for primary care staff
Date approved: 24 July 2023
Reference: DPIA-2023-08
Summary: Guest Wi-Fi access at NHS Dorset offices
Date approved: 11 August 2023
Reference: DPIA-2023-09
Summary: To create, share and manage educational and career events offered to general practice
Date approved: 22 January 2024
Reference: DPIA-2023-12
Summary: To provide a secure print solution for NHS Dorset ICB
Date approved: 10 October 2023
Reference: DPIA-2023-13
Summary: The use of Power Automate in PHC to streamline time consuming processes
Date approved: 24 April 2024
Reference: DPIA-2024-14
Summary: The NHS Type 2 Diabetes Path to Remission (T2DR) programme to treat obesity and type 2 diabetes
Date approved: 22 February 2024
2022/23
Reference: DPIA-2022-02
Summary: Access to ICNET System
Date approved: 28 April 2022
Reference: DPIA-2022-02
Summary: Access to ICNET System
Date approved: 28 April 2022
Reference: DPIA-2022-04
Summary: Provision of software solution aimed at increasing the security and protection of our email systems
Date approved: 18 May 2022
Reference: DPIA-2022-05
Summary: Access to SystmOne for Infection Prevention and Control
Date approved: 15 June 2022
Reference: DPIA-2022-06
Summary: The use of Miro as a virtual collaboration tool in population health management workshops and facilitated discussions
Date approved: 7 November 2022
Reference: DPIA-2022-07
Summary: The introduction of a bring your own device policy
Date approved: 5 January 2023
Reference: DPIA-2022-09
Summary: To carry out the annual reviews for CHC eligible patients
Date approved: 14 March 2023
Reference: DPIA-2022-11
Summary: To understand of the attitudes of young people in Dorset/Hampshire/Isle Of Wight towards sharing of health and care information
Date approved: 14 March 2023
Reference: DPIA-2022-10
Summary: To help GPs identify patients at risk of cancer
Date approved: 3 April 2023
Reference: DPIA-2022-12
Summary: To identify people at risk of developing type 2 diabetes
Date approved: 11 October 2023
2021/22
Reference: DPIA-2021-03
Summary: Introduction of E-triage for patients referred as colorectal 2ww
Date approved: 05 July 2021
Reference: DPIA-2021-04
Summary: Process for the approval and reimbursement of rental costs for GP Practices providing primary care medical services in the community
Date approved: 23 July 2021
Reference: DPIA-2021-05
Summary: Provision of a series of training modules and courses designed to teach the concepts of Project Management.
Date approved: 06 September 2021
Reference: DPIA-2021-06
Summary: Read only access to RiO for the provision of Continuing HealthCare
Date approved: 14 September 2021
Reference: DPIA-2021-07
Summary: Process for the application and approval of funding for Minor Improvement Grants
Date approved: 12 November 2021
Reference: DPIA-2021-08
Summary: Provision of a service by Marie Curie for those individuals who are found to be Fast Track eligible
Date approved: 17 December 2021
Reference: DPIA-2021-09
Summary: Proposed use of the Digital, Referral, Assessment and Review Portal (DRAR) to share clinical information with the Local Authorities to process continuing healthcare claims
Date approved: 28 January 2022
Reference: DPIA-2021-10
Summary: Outsourcing of 41 retrospective continuing healthcare claims to NHS Midlands and Lancashire Commissioning Support Unit
Date approved: 26 January 2022
Reference: DPIA-2021-14
Summary: Use of Teams Telephony for voice mail
Date approved: 01 April 2022
Reference: DPIA-2021-17
Summary: Provision of a digital referral form for children and young person’s continuing care
Date approved: 20 April 2022
2020/21
Reference: DPIA-2020-04
Summary: Use of Zoom video conferencing by the Engagement and Communications Team to support public involvement work in line with the Statutory Duty to Involve
Date approved: 17 September 2020
Reference: DPIA-2020-05
Summary: Use of an email marketing system for digital marketing
Date approved: 24 November 2020
Reference: DPIA-2020-06
Summary: Use of CHC Healthcare and Attenti to assist with the backlog of CHC patients caused by Covid-19
Date approved: 17 November 2020
Reference: DPIA-2020-07
Summary: Use of Celoxis as a project management tool to replace existing software at contract renewal
Date approved: 18 November 2020
Reference: DPIA-2020-16
Summary: Use of a virtual tool to collect feedback during public engagement sessions
Date approved: 09 March 2021
Reference: DPIA-2020-15
Summary: Provision of Care (Education) and Treatment Reviews (C(E)TRs) as part of NHS England’s commitment to improving the care of children, young people and adults with learning disabilities, autism or both in England with the aim of reducing admissions and unnecessarily lengthy stays in specialist mental health or learning disability hospitals and reducing health inequalities
Date approved: 09 April 2021
Reference: DPIA-2020-10
Summary: The introduction of an online Occupational Health (OH) Portal for managers to complete referrals, and for new starter pre-employment checks
Date approved: 27 July 2021
Reference: DPIA-2020-12
Summary: Management and processing of crisis applications and information sharing for joint funding between CHC and local authorities
Date approved: 28 July 2021
Reference: DPIA-2020-13
Summary: To ensure more efficient commissioning and provision of packages for S117 aftercare through regular review to check remain more appropriate and effective means of supporting the individual requiring increased information sharing between organisations
Date approved: 28 July 2021
Reference: DPIA-2020-14
Summary: To ensure continuity of process and remove delays in considering new S117 requests following a change in the Local Agreement with local authorities
Date approved: 28 July 2021
Reference: DPIA-2020-11
Summary: Change provider of front end portal for CHC system to the same as the current back end provider to increase efficiency and reduce duplication of work
Date approved: 03 August 2021
2019/20
Reference: DPIA64 04/19
Summary: Proposal by Personal Health Commissioning (PHC) team to outsource the processing of the backlog of retrospective funding applications to a third party provider
Date approved: 9 April 2019
Reference: DPIA65 05/19
Summary: Service to allow users from participating public sector organisations to gain secure internet access via WiFi at any GovRoam enabled site
Date Approved: 23 May 2019
Reference: DPIA66 07/19
Summary: Proposal to run a query with GP practice computer systems to assist with determining the number of people diagnosed with dementia living in care homes in Dorset. Required to support attainment of the national dementia diagnosis rate
Date Approved: 16 July 2019
Reference: DPIA67 07/19
Summary: Use of software called MiDatabank to log and manage medicine enquiries received by the pharmacy team. The software will provide the Medicines Optimisation team with the functionality to store enquiries and responses securely in an auditable way, aligning them with other pharmacy colleagues across Dorset
Date Approved: 16 July 2019
Reference: DPIA68 07/19
Summary: Storage of staff personal contact details in the SMS alerting system and on call pager group to meet the CCG’s incident response duty. Acknowledgement of the potential for the CCG to be party to, and to facilitate the sharing of sensitive personal information about vulnerable individuals during a response to an incident
Date Approved: 29 July 2019
Reference: DPIA69 08/19
Summary: Proposal to enable CCGs Skype for Business interoperability with NHSmail to support collaboration across health and social care partners
Date Approved: 19 August 2019
Reference: DPIA70 09/19
Summary: Transfer of approval of applications to join the National GP Retention Scheme from NHS England to the CCG Primary Care Team
Date Approved: 10 September 2019
Reference: DPIA71 09/19
Summary: Procurement of the provision of complex care domiciliary services for one adult service user
Date Approved: 10 September 2019
Reference: DPIA72 09/19
Summary: Application to use visual vitals technology, employing cameras as sensors to detect four vital signs
Date Approved: 19 September 2019
Reference: DPIA73 10/19
Summary: Proposal for the configuration of Outlook calendar sharing between health and social care organisations in Dorset using Office 365 mail services
Date Approved: 17 October 2019
Reference: DPIA 78 01/20
Summary: Dorset CCG have been delegated responsibility from NHS England for reimbursing locums for sickness, parental and adoption leave
Date Approved: 16 January 2020
Reference: DPIA 79 03/20
Summary: Proposal to use an app, Healthy.io to identify those who may be at risk of kidney disease and proactively manage early interventions for the benefit of patient care
Date Approved: 11 March 2020
Reference: DPIA 80 03/20
Summary: Proposal to deliver a Pan-Wessex (Dorset, Hampshire and the Isle of Wight) Cancer Information Portal which has been sponsored by the Wessex Cancer Alliance in collaboration with the Dorset Cancer Partnership and Macmillan Cancer Support
Date Approved: 28 April 2020
Reference: DPIA 81 04/20
Summary: Proposal to use Thoughtonomy, a Blue Prism product to run Robotic Workers as Virtual Machines to perform tasks within the Personal Health Commissioning processes, which are usually carried out by a user
Date Approved: 29 April 2020
Reference: DPIA 82 03/20
Summary: Proposal to establish the use of Whatsapp for the early warning and notification of cyber-incidents to senior IT managers in Dorset
Date Approved: 12 May 2020
Reference: DPIA 83 05/20
Summary: Proposal to utilise ORCHA to evaluate digital health and care applications for clinical effectiveness, usability, security and impact
Date Approved: 20 May 2020
Reference: DPIA 85 04/20
Summary: Proposal to seek views for improvement of mental health services in Dorset
Date Approved: 07 July 2020
Reference: DPIA 86 02/20
Summary: Proposal to utilise IEG4 to process Continuing HealthCare referrals
Date approved: 08 February 2020
