Privacy & Data Protection

This portal is designed to support privacy-by-design for health information. Production deployment must implement lawful processing, purpose limitation, data minimisation, access controls, retention, secure deletion, breach response, data-subject rights, processor governance and audit logging.

Do not enter real patient medical information into the prototype until the production security and governance controls have been completed.