Summary of NHS Dorset approved Data Protection Impact Assessments to assess privacy risks to new systems and services.

Please note that some of these Data Protection Impact Assessments may apply to NHS Dorset Clinical Commissioning Group rather than NHS Dorset Integrated Care Board.


Reference: DPIA-2022-02

Summary: Access to ICNET System

Date approved: 28 April 2022

Reference: DPIA-2022-02

Summary: Access to ICNET System

Date approved: 28 April 2022

Reference: DPIA-2022-04

Summary: Provision of software solution aimed at increasing the security and protection of our email systems

Date approved: 18 May 2022

Reference: DPIA-2022-05

Summary: Access to SystmOne for Infection Prevention and Control

Date approved: 15 June 2022


Reference: DPIA-2021-03

Summary: Introduction of E-triage for patients referred as colorectal 2ww

Date approved: 05 July 2021

Reference: DPIA-2021-04

Summary: Process for the approval and reimbursement of rental costs for GP Practices providing primary care medical services in the community

Date approved: 23 July 2021

Reference: DPIA-2021-05

Summary: Provision of a series of training modules and courses designed to teach the concepts of Project Management.

Date approved: 06 September 2021

Reference: DPIA-2021-06

Summary: Read only access to RiO for the provision of Continuing HealthCare

Date approved: 14 September 2021

Reference: DPIA-2021-07

Summary: Process for the application and approval of funding for Minor Improvement Grants

Date approved: 12 November 2021

Reference: DPIA-2021-08

Summary: Provision of a service by Marie Curie for those individuals who are found to be Fast Track eligible

Date approved: 17 December 2021

Reference: DPIA-2021-09

Summary: Proposed use of the Digital, Referral, Assessment and Review Portal (DRAR) to share clinical information with the Local Authorities to process continuing healthcare claims

Date approved: 28 January 2022

Reference: DPIA-2021-10

Summary: Outsourcing of 41 retrospective continuing healthcare claims to NHS Midlands and Lancashire Commissioning Support Unit

Date approved: 26 January 2022

Reference: DPIA-2021-14

Summary: Use of Teams Telephony for voice mail

Date approved: 01 April 2022

Reference: DPIA-2021-17

Summary: Provision of a digital referral form for children and young person’s continuing care

Date approved: 20 April 2022


Reference: DPIA-2020-04

Summary: Use of Zoom video conferencing by the Engagement and Communications Team to support public involvement work in line with the Statutory Duty to Involve

Date approved: 17 September 2020

Reference: DPIA-2020-05

Summary: Use of an email marketing system for digital marketing

Date approved: 24 November 2020

Reference: DPIA-2020-06

Summary: Use of CHC Healthcare and Attenti to assist with the backlog of CHC patients caused by Covid-19

Date approved: 17 November  2020

Reference: DPIA-2020-07

Summary: Use of Celoxis as a project management tool to replace existing software at contract renewal

Date approved: 18 November 2020

Reference: DPIA-2020-16

Summary: Use of a virtual tool to collect feedback during public engagement sessions

Date approved: 09 March 2021

Reference: DPIA-2020-15

Summary: Provision of Care (Education) and Treatment Reviews (C(E)TRs) as part of NHS England’s commitment to improving the care of children, young people and adults with learning disabilities, autism or both in England with the aim of reducing admissions and unnecessarily lengthy stays in specialist mental health or learning disability hospitals and reducing health inequalities

Date approved: 09 April 2021

Reference: DPIA-2020-10

Summary: The introduction of an online Occupational Health (OH) Portal for managers to complete referrals, and for new starter pre-employment checks

Date approved: 27 July 2021

Reference: DPIA-2020-12

Summary: Management and processing of crisis applications and information sharing for joint funding between CHC and local authorities

Date approved: 28 July 2021

Reference: DPIA-2020-13

Summary: To ensure more efficient commissioning and provision of packages for S117 aftercare through regular review to check remain more appropriate and effective means of supporting the individual requiring increased information sharing between organisations

Date approved: 28 July 2021

Reference: DPIA-2020-14

Summary: To ensure continuity of process and remove delays in considering new S117 requests following a change in the Local Agreement with local authorities

Date approved: 28 July 2021

Reference: DPIA-2020-11

Summary: Change provider of front end portal for CHC system to the same as the current back end provider to increase efficiency and reduce duplication of work

Date approved: 03 August 2021


Reference: DPIA64 04/19

Summary: Proposal by Personal Health Commissioning (PHC) team to outsource the processing of the backlog of retrospective funding applications to a third party provider

Date approved: 9 April 2019

Reference: DPIA65 05/19

Summary: Service to allow users from participating public sector organisations to gain secure internet access via WiFi at any GovRoam enabled site

Date Approved: 23 May 2019

Reference: DPIA66 07/19

Summary: Proposal to run a query with GP practice computer systems to assist with determining the number of people diagnosed with dementia living in care homes in Dorset. Required to support attainment of the national dementia diagnosis rate

Date Approved: 16 July 2019

Reference: DPIA67 07/19

Summary: Use of software called MiDatabank to log and manage medicine enquiries received by the pharmacy team. The software will provide the Medicines Optimisation team with the functionality to store enquiries and responses securely in an auditable way, aligning them with other pharmacy colleagues across Dorset

Date Approved: 16 July 2019

Reference: DPIA68 07/19

Summary: Storage of staff personal contact details in the SMS alerting system and on call pager group to meet the CCG’s incident response duty. Acknowledgement of the potential for the CCG to be party to, and to facilitate the sharing of sensitive personal information about vulnerable individuals during a response to an incident

Date Approved: 29 July 2019

Reference: DPIA69 08/19

Summary: Proposal to enable CCGs Skype for Business interoperability with NHSmail to support collaboration across health and social care partners

Date Approved: 19 August 2019

Reference: DPIA70 09/19

Summary: Transfer of approval of applications to join the National GP Retention Scheme from NHS England to the CCG Primary Care Team

Date Approved: 10 September 2019

Reference: DPIA71 09/19

Summary: Procurement of the provision of complex care domiciliary services for one adult service user

Date Approved: 10 September 2019

Reference: DPIA72 09/19

Summary: Application to use visual vitals technology, employing cameras as sensors to detect four vital signs

Date Approved: 19 September 2019

Reference: DPIA73 10/19

Summary: Proposal for the configuration of Outlook calendar sharing between health and social care organisations in Dorset using Office 365 mail services

Date Approved: 17 October 2019

Reference: DPIA 78 01/20

Summary: Dorset CCG have been delegated responsibility from NHS England for reimbursing locums for sickness, parental and adoption leave

Date Approved: 16 January 2020

Reference: DPIA 79 03/20

Summary: Proposal to use an app, to identify  those who may be at risk of kidney disease and proactively manage early interventions for the benefit of patient care

Date Approved: 11 March 2020

Reference: DPIA 80 03/20

Summary: Proposal to deliver a Pan-Wessex (Dorset, Hampshire and the Isle of Wight) Cancer Information Portal which has been sponsored by the Wessex Cancer Alliance in collaboration with the Dorset Cancer Partnership and Macmillan Cancer Support

Date Approved: 28 April 2020

Reference: DPIA 81 04/20

Summary: Proposal to use Thoughtonomy, a Blue Prism product to run Robotic Workers as Virtual Machines to perform tasks within the Personal Health Commissioning processes, which are usually carried out by a user

Date Approved: 29 April 2020

Reference: DPIA 82 03/20

Summary: Proposal to establish the use of Whatsapp for the early warning and notification of cyber-incidents to senior IT managers in Dorset

Date Approved: 12 May 2020

Reference: DPIA 83 05/20

Summary: Proposal to utilise ORCHA to evaulate digital health and care applications for clinical effectiveness, usability, security and impact

Date Approved: 20 May 2020

Reference: DPIA 85 04/20

Summary: Proposal to seek views for improvement of mental health services in Dorset

Date Approved: 07 July 2020

Reference: DPIA 86 02/20

Summary: Proposal to utilise IEG4 to process Continuing HealthCare referrals

Date approved: 08 February 2020