HIE IG Training Assessment 2024

1) What is the best example of anonymised data?

2) In the course of conducting a service evaluation, HIE will receive data from GPs. This data will include age, ethnicity, gender, diagnosis, and appointment types and times. Which exemption can be relied on to process this Special Category Data?

3) What steps can we take to mitigate the risk of re-identification?

4) A group of clinicians at an NHS Trust are conducting a research study. To protect the confidentiality of the patients the clinicians assign a study ID to each study participant. What process has taken place?

5) True or False: Re-identification can be described as turning anonymised data back into personal data through the use of data matching or similar techniques.

6) HIE conducts service evaluations where another organisation determines what data will be collected in the process and how the outcome will be used. Therefore, the other organisation is the data controller. Who is responsible for completing a DPIA?

7) Where can you find the Incident Report Form?

8) What are the five principles to keep in mind when using AI?

9) What are the two conditions that must be met to engage third party providers that process personal data on behalf of HIE?

10) You have accidentally sent an email, that contains personal data, to the wrong person. You have just realised that you sent it to the wrong person, but you sent the email one hour ago. What is your next step?

11) True or False: You cannot use a system that uses real-time biometric identification without the review of the DPO.

12) True or False: You are using generative AI to help write some emails because you are under pressure to meet deadlines. Some of the emails you need to send require mentioning personal data, but you will be reviewing the AI output for accuracy before you send out the email, so this is acceptable.