Data Protection Impact Assessment (DPIA)

This document outlines the Data Protection Impact Assessment (DPIA) conducted for the CRANE database, in accordance with UK GDPR and Section 251 requirements. It details the lawful basis for data processing, identifies potential risks to patient confidentiality, and describes the safeguards implemented to mitigate those risks.

The DPIA supports the CRANE Database’s commitment to ethical data governance, transparency, and the protection of personal information throughout its audit and reporting activities.

Click on the image below to download a copy of the DPIA:

Last updated: 16 September 2025.