The Department of Health and Social Care (DSHC) supports ministers in leading the nation’s health and social care to help people live more independent, healthier lives for longer. Some of their key responsibilities include:

  • Supporting and advising ministers – help them shape and deliver policy that delivers the government’s objectives
  • Setting direction – anticipate the future and lead debate ensuring global and domestic health is both improved and protected
  • Accountability – ensure the department and arm’s length bodies deliver on agreed plans and commitments
  • Acting as guardians of the health and care framework – ensure the legislative, financial, administrative and policy frameworks are fit for purpose and work together
  • Troubleshooting – in the last resort, the public and Parliament expect the DSHC to take the action needed to resolve crucial and complex issues

Department of Health Project

Project Goals

Ensure the DSHC Test & Trace is compliant in a large range of privacy related initiatives across COVID Test, Trace and Contain activities. Programmes include: COVID Vaccination programmes for the UK, Scotland, Wales, International Arrivals, Red/Blue/Green countries classifications, LFD/PCR testing, Home test kits, Schools testing, Testing for the Public and Private Sector, Events testing, Contact tracing, Contain (with Public Health England). 

Contributions

For each initiative at DSHC, the below privacy tasks were worked on to ensure their compliance; this list is not exhaustive:

  • Privacy Impact Assessments (PIA)
  • Data Protection Impact Assessments (DPIA)
  • Vendor due diligence & support with procurement
  • Records of processing activities
  • Privacy notices 

Also prepared a Data Protection Manual, Risk Control Framework, Privacy Risk Register

Support with ICO Audit of the Test and Trace DPIA

Technologies/Framework/Platform for data/management/delivery

 

Outcomes

Helped all their initiatives be GDPR compliant, and provided extra support through the risk control framework, privacy risk registry, data protection manual, etc. 

View other portfolios: