Context Navigation

Warning: Can't synchronize with repository "(default)" (/home/git/ome.git does not appear to be a Git repository.). Look in the Trac log for more information.

Changes between Version 2 and Version 3 of Ticket #6330

Timestamp:: 07/26/11 09:48:36 (13 years ago)
Author:: adjudson
Comment:

Legend:

: Unmodified
: Added
: Removed
: Modified

Ticket #6330 – Description

-                      v2
+                      v3
 . The audit trail should allow dataset inspection e.g. which project have used smr... In theory a data owner (the custodians, patients or caldicotts) may want to see how safe our model is or who is using 'their' data.
+. The embedding of risk prediction models, privacy impact assessments and disclosure controls. These are mechanisms that are being discussed in the SHIP blueprint as ways to facilitate risk based & proportionate data governance. Once the next blueprint draft/final copy is available I'll update this story.
+. The embedding of risk prediction models, privacy impact assessments and disclosure controls. These are mechanisms that are being discussed in the SHIP blueprint as ways to facilitate risk based & proportionate data governance.
+The following points are from the Jan2001 draft of the blueprint, once the final version is available I'll update this story.
+- Assessing privacy risks is an integral component of a data controller’s responsibilities and should form a central part of their privacy policy. This process should include the identification of confidentiality, security and privacy risks of any data handling including linkages, storage and access considerations. The Information Commissioner's Office have developed a privacy impact assessment handbook [http://bit.ly/A2cga] containing guidance for carrying out risk assessments.
+- Appropriate disclosure control should be applied to all outputs; this should be carried out under the authority and oversight of the designated privacy officer. The Information Services Divison (ISD) of NHS Scotland have developed various documents on data protection and confidentiality [http://bit.ly/nPOMZY] and of particular importance is their protocol for disclosure control.