Data protection context
No filters
Overseeing DPO
Population subset
Controller or joint controller
Processor or subprocessor
APPLICABLE TO THE SELECTED CONTEXT
Data protection health
2 CriticalData breaches
- Employee remote device lost with unencrypted timesheetsPIMS-118 · Medium-47d72h lapsed
- Unauthorised access attempt to EU customer databasePIMS-115 · High-37d72h lapsed
- Rehabilitation outcome dataset accidentally included identifiersPIMS-122 · High-29d72h lapsed
Data subject requests
- Portability: Cardiology Study X record0dPIMS-125·Portability·Fulfilment in progress
- Rectification: employment record4dPIMS-127·Rectification·Received
- Erasure: child's website account9dPIMS-130·Erasure·Identity verification
Processing Activities Life Cycle
- Marketing Website AnalyticsPIMS-025 · Processing activityIn review
- Oncology Study Y: Research Data SharingPIMS-026 · Processing activityIn review
- Joint EU/UK Marketing CampaignPIMS-027 · Processing activityUnder change
| Key | Processing activity | Purpose | Legal basis | Status | |
|---|---|---|---|---|---|
| PIMS-022 | Employee Payroll Processing | Calculate and disburse salaries, benefits and tax filings | Contract (Art. 6(1)(b)) | In Use | |
| PIMS-023 | Cardiology Study X: Patient Records | Provide cardiology clinical care and study follow-up | Vital Interests (Art. 6(1)(d)) Art. 9Art. 9(2)(h): Healthcare provision | In Use | |
| PIMS-024 | EU Customer Order Fulfilment | Process orders, payments and delivery for EU customers | Contract (Art. 6(1)(b)) | In Use | |
| PIMS-025 | Marketing Website Analytics | Measure marketing website usage and improve UX | Consent (Art. 6(1)(a)) | Under Review | |
| PIMS-026 | Oncology Study Y: Research Data Sharing | Enable ONCO-Y research collaboration with Cambridge | Public Task (Art. 6(1)(e)) Art. 9Art. 9(2)(j): Scientific research | Under Review | |
| PIMS-027 | Joint EU/UK Marketing Campaign | Co-marketing with MediPartners AG | Consent (Art. 6(1)(a)) | In Progress | |
| PIMS-028 | Primary Care Appointment Booking | Schedule and remind patients of primary care appointments | Contract (Art. 6(1)(b)) | Draft | |
| PIMS-029 | Prospects Lead Nurturing | Track and nurture sales leads through email and web forms | Consent (Art. 6(1)(a)) | In Use | |
| PIMS-030 | Vendor Onboarding and Due Diligence | Collect and verify vendor contact and banking details | Contract (Art. 6(1)(b)) | In Use | |
| PIMS-031 | Children's Website Registration | Provide age-appropriate access to educational content | Consent (Art. 6(1)(a)) | Under Review | |
| PIMS-032 | US Customer Support | Handle support tickets and refunds for US customers | Contract (Art. 6(1)(b)) | In Use | |
| PIMS-033 | Remote Workforce Time Tracking | Record working hours and location for remote employees | Legal Obligation (Art. 6(1)(c)) | In Use | |
| PIMS-034 | Patient Rehabilitation Outcomes | Monitor rehabilitation outcomes and adjust care plans | Vital Interests (Art. 6(1)(d)) Art. 9Art. 9(2)(h): Healthcare provision | In Use | |
| PIMS-035 | Joint Controller Analytics with HealthNet | Analyse cross-border health outcomes with HealthNet Alliance | Public Task (Art. 6(1)(e)) Art. 9Art. 9(2)(j): Scientific research | In Progress | |
| PIMS-036 | E-signature Document Workflow | Sign and archive contracts using electronic signature | Contract (Art. 6(1)(b)) | In Use | |
| PIMS-037 | Marketing SMS Campaign | Send promotional SMS to opted-in customers | Consent (Art. 6(1)(a)) | Draft | |
| PIMS-038 | Research Collaboration with Global Partners | Share anonymised research data with Global Research Partners | Legitimate Interests (Art. 6(1)(f)) Art. 9Art. 9(2)(j): Scientific research | Under Review | |
| PIMS-039 | HR Portal Recruitment | Manage job applications and candidate communication | Contract (Art. 6(1)(b)) | In Use | |
| PIMS-040 | Customer Feedback Analytics | Analyse feedback surveys to improve products | Legitimate Interests (Art. 6(1)(f)) | In Use | |
| PIMS-041 | Clinical Trial Data Export | Export clinical trial data to regulatory authorities | Legal Obligation (Art. 6(1)(c)) Art. 9Art. 9(2)(i): Public health | In Use | |
| PIMS-042 | Backup and Disaster Recovery | Back up personal data for business continuity | Legal Obligation (Art. 6(1)(c)) | In Progress |