A privacy impact assessment (PIA) has been undertaken for the primary care patient experience survey (PES). The report addresses the impact that the PES and reporting may have on individual privacy.
It identifies potential areas of risk for breaches of privacy and outlines the strategies that will be in place to mitigate the risk. At the same time, the report also indicates to stakeholders that due diligence has been carried out to assess and minimise potential areas of risk along with compliance with the information privacy principles.
Currently all district health boards, primary healthcare organisations, general practices, the Commission and Cemplicity (the national survey system provider) have processes in place to ensure the privacy of information. We take privacy seriously.
The ability to design system architecture which addresses actual or potential privacy concerns is dependent, to some extent, on early identification of privacy issues and where risks lie. With this in mind we have prepared an ‘interim’ privacy assessment in the early phases of system development, sought feedback from the Privacy Commissioner and incorporated this feedback in the survey system design.
A copy of the interim PIA is available here.
As the survey system design is finalised, tested and implemented the PIA will be updated and a final report published.