beta

You're viewing our new website - find out more

Publication - Report

Work Able Scotland: privacy impact assessment

Published: 13 Oct 2017

Privacy impact assessment for our Work Able Scotland programme, which will provide employability support for people at risk of long term unemployment as a result of a health condition.

16 page PDF

326.1kB

16 page PDF

326.1kB

Contents
Work Able Scotland: privacy impact assessment
Annex A

16 page PDF

326.1kB

Annex A

WAS Process List

Customer Journey
Reference
Description of activity and Data Processing Arrangements
1. SDS Provide DWP 3 rd Party Team with Provider details and fact sheets.
  • No personal data is shared at this stage
2. DWP 3 rd Party Team enter WAS Contracted Provider opportunity on LMS and WSP and provider factsheet onto DWP District Toolkit?
  • No personal data is shared at this stage
3. JCP Work Coach identifies eligible customers for WAS
  • No data is shared at this stage.
4. JCP work coaches make clerical referrals on WAS Referral document to WAS Contracted Provider Single Point of Contact
  • DWP will send completed WAS Referral form containing customer data by post to WAS Contracted Provider.
  • SDS Information Security policy - Appendix 9 must be adhered to or Provider will be in breach of Contract with SDS and may have their contract terminated
5. JCP contacts provider to arrange suitable date to meet customer (within 5 working days of referral)
  • Work Coach discusses sensitivities by telephone with provider
6. With the customer's consent the WAS Contracted Provider will complete an Exit Report for both the customer and DWP within 5 calendar days of the actual end date.
  • Customer data potentially including sensitive information
  • Shared by WAS Contracted Providers with DWP In person or through secure mail
  • Leaving details must be entered immediately onto CTS/ FIPS using the leaving codes set out in the training agreement
7. JCP work coach will action the Exit Report from the SG Providers (if received)
  • No data is shared at this stage.
8. WAS Contracted Provider notifies DWP about the death of a customer
  • Data Protection Act does not apply.
9. DWP notifies WAS Contracted Provider about the death of a customer
  • Data Protection Act does not apply
10. Customer Complaints
  • Customer data including personal information
  • Shared between customer, SDS, SG, WAS Contracted Provider and potentially DWP by email / scanned letter via email.
11. WAS Contracted Provider Reports Customer Unacceptable Behaviour
  • Customer data including personal information
  • Shared between WAS Contracted Provider and SG and/or DWP by secure email

Contact