Child's Interview Right's Practitioner regulations: data protection impact assessment

5. Questions to identify privacy issues

5.1 Involvement of multiple organisations

SG and PS share information and contact details about ChIRPS. The training provider shares information with SG about training undertaken by ChIRPs.

5.2 Anonymity and pseudonymity

N/A. ChIRPs' contact details need to be shared by SG with PS.

5.3 Technology

There are no new or additional information technologies used. Data is transferred by SG secure e-mail.

5.4 Identification methods

E-mail, phone numbers and email addresses for ChIRPs are shared between SG and PS.

5.5 Sensitive/Special Category personal data

Bank account details of ChIRPs are held. This is needed to ensure they are paid for their services. Bank account details will only be shared with those who are maintaining the register, SG Finance [?] and the individual ChIRP.

5.6 Changes to data handling procedures

The data is handled according to the SG [and PS] data handling policy and procedures.

5.7 Statutory exemptions/protection

None. The data processing is not exempt from the Data Protection Act.

5.8 Justification

There is a clear justification for the new data handling and sharing of information held on the ChIRP register. Doing so ensures that SG meets the statutory requirement to maintain the register of ChIRPs and ensures any child who will be subject to an investigative interview is provided with a ChIRP by providing their contact details to PS.

5.9 Other risks

There are no further risks identified.