Data Protection

NHSCFA Data Protection Impact Assessments

Privacy assessments of processes, systems or technologies holding personal identifiable data.
Caldicott policy

How we protect confidential patient identifiable information.
Data protection (GDPR) policy

How we ensure the protection of the person-identifiable information we process, in accordance with legislation.
Data Protection by Design and Default Guidance

How our systems, processes and technologies protect data.
Data quality policy

How we ensure the quality of our data.
Confidentiality policy

How we take responsibility for the confidentiality of person-identifiable data.
Confidentiality Audit Procedure

Our procedure to monitor access to person-identifiable data.
Data subject access form

Submit a data subject access request for personal data.
Data Subjects’ Rights Policy

This is the approved Data Subjects’ Rights Policy for the NHS Counter Fraud Authority.
Consent policy

This is the organisation’s formal Consent Policy.

Information regarding compliance with data protection requirements and how to find out how to make a subject access request.