Guidance/Context

The purpose of this question is to identify apps which are within the NordDEC scope of assessment. This includes any apps which have a clear health or medical purpose, are condition specific, or have a valid place in a clinical setting. This also includes wellness apps if they have a clear focus on a particular need or condition, eg. yoga apps for pregnancy. Apps which have no clear or specific health focus are excluded, eg. generic meditation apps.

Response

Yes / No

Answer Criteria

Yes: If the app has a specific health, fitness, lifestyle purpose or claim. If the app is condition specific. If the app has a clear place in a clinical setting.

No: If app has no obvious health purpose (e.g. voice recorder, screen recorder, keyboard, a timer app, recipe books)If the app has no health purpose and does not relate to any kind of health condition (e.g. general meditation apps). Fitness app where exercises are not designed to prevent a specific condition e.g. a circuit training app with no health claims.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if there are any algorithms used in the app. This question then influences if other questions around AI and Clinical Calculators are asked later on in the assessment.

Response

Yes / No

Answer Criteria

Yes: If the app uses an algorithm to provide an output, using the health data input by the user OR If the app provides an average from input data, or calories burned.

No:  If the app does not calculate anything with the data it collects OR If the algorithm doesn’t come from health data input.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question allows the assessor to describe what the algorithm does and what area it focuses on. There are questions later on in scene setters which will probe diagnoses/treatment further.

Response

Free Text - E.g. perform a calculation for diagnosis etc.

Answer Criteria

N/A

Logic

DISABLEMENT LOGIC - Disabled if AI01 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if is any form of AI used within the app. Somethings this may be difficult to decipher from just using the app so the assessor should read around the app to see if the Developer makes these claims.

Response

Yes/ No

Answer Criteria

YES: If the app uses a chatbot which learns from and reacts to what the user says.

YES: If the app/developer claims to use AI techniques.

YES: If the app uses machine learning to improve the quality of its automated decision making.

NO: If the app doesn’t use a chatbot.

NO: If the app/developer makes no claim about using AI techniques.

NO: If the app doesn’t use machine learning to improve the quality of its automated decision making.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

The Developer may state in app store description or their website what type of AI they use. If it is unclear what AI is used within the app, the assessor should try and find this information through reading the app store description and app website.

Response

Free text

Answer Criteria

Examples: 

Natural Language Processing (NLP) - Includes Natural Language Understanding, Natural Language generation, Machine Translation. E.g. If the app uses a chatbot which learns from and reacts to what the user says.

Machine Learning - If the app uses machine learning to improve the quality of its automated decision making.

Image Recognition - If the app uses AI to identify something in a picture

Logic

DISABLEMENT LOGIC - Disabled if AI03 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

To ensure AI is used both appropriately and effectively, humans should have oversight through monitoring/maintaining/updating the app. Developers may monitor their AI by asking healthcare professionals to review the decision making and output. If the output does not appear be in line with the healthcare professionals knowledge, the Developer should correct this. Assessors should look for these mentions via the app, the app/google play store and associated website.

Response

Yes / No

Answer Criteria

YES: If the developer mentions specifically that their AI is monitored/maintained/updated.

No: If there is no specific mention of them updating/maintaining the AI.

No: If they only mention improvements based upon input (learning from input).

Logic

DISABLEMENT LOGIC - Disabled if AI03 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to contribute to the apps functions and features. It is also used to inform the ESF tiering.

Response

Yes / No

Answer Criteria

Yes: If the app provides any generic info around the general topic area, in text or diagram form.

Yes: If the app can provide information as a diary back to the user if monitoring is taking place.

No: If the app provides no real information or guidance aimed at health or wellbeing.

No: If the only information is provided by other users on a forum, information must come from the developer/app itself.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to contribute to the apps functions and features. It is also used to inform the ESF tiering.

Response

Yes / No

Answer Criteria

Yes: If any of the information provided is personalised to the user. E.g. provides recommended activities/actions based on assessment over a period of time OR tailors therapy/treatment program based on one off assessment which includes taking a lot of information from the user.

No: If the app provides no information which is personalised to the user.

Logic

DISABLEMENT LOGIC - Disabled if I01 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to contribute to the apps functions and features. It is also used to inform the ESF tiering.

Response

Yes / No

Answer Criteria

YES: If the app provides links/signposts to online services or local services.

YES: If the app points to services where the user can take control of their/somebody’s condition e.g. pharmacy.

NO: If the app provides no information which is personalised to the user.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to contribute to the apps functions and features. It is also used to inform the ESF tiering.

Response

Yes / No

Answer Criteria

YES: If the app provides details of external environmental factors which may impact health/wellbeing, such as temperature, pollen count etc.

NO: If the only information provided is the location.

Logic

DISABLEMENT LOGIC - Disabled if I01 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

In most cases the answer to this question will be yes because the scope of the question is so broad. The only instance an assessor should answer no to this question is if the app is aimed at providing information, resources or activities for administrative purposes instead of health related purposes. If I01 is yes, this will also be yes. This question also guides the ESF tiering later.

Response

Yes / No

Answer Criteria

Yes: Any app that provides a resource, either condition specific or generalised.

No: Administration apps which have no effect on patient outcomes for instance a schedule system.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This is looking at apps which provide individual risk to a user, which is personalised based on the user health data collected (e.g. apps which have red zones/percentages of having a condition for specific readings).

Response

Yes / No

Answer Criteria

Yes: If the app provides a calculation, paragraph, table or diagram indicating a users risk, or potential diagnoses.

No: If the app provides no form of risk assessment or diagnoses to a user.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to discover if the app diagnoses/screens/detects a disease or condition (i.e., using sensors, data, or other information from other hardware or software devices, pertaining to a disease or condition). This is a key question for identifying diagnostic medical devices under FDA.

Response

Yes / No

Answer Criteria

Yes: A healthcare professional can see “We think you have..”.

Yes: If the app diagnoses a specified clinical condition using clinical data.

No: If it states ‘you might have a condition please see a professional’, this would be no as it is not specific enough.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This is looking at apps which provide individual risk assessments to the user. Both ‘Contracting or suffering a healthcare condition’ and ‘The impact of their lifestyle choices and health and wellbeing indicated’ can be selected at the same time.

Response

Multiple Choice

Answer Criteria

Contracting or suffering a healthcare condition: The app provides a risk indicator of a condition or diagnosis to an individual.

The impact of their lifestyle choices and health and wellbeing indicators: The app provides a risk indicator based on the person's lifestyle to an individual, eg a person’s risk of type 2 diabetes based on food intake.

No risk assessment provided: The app provides no risk indicator or diagnoses.

Logic

DISABLEMENT LOGIC - Disabled if PD01 is no AND DG02 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This is looking at apps which provide individual risk assessments to a healthcare professional. Both ‘Contracting or suffering a healthcare condition’ and ‘The impact of their lifestyle choices and health and wellbeing indicated’ can be selected at the same time.

Response

Multiple Choice

Answer Criteria

Contracting or suffering a healthcare condition: The app provides a risk indicator of a condition or diagnosis to an individual.

The impact of their lifestyle choices and health and wellbeing indicators: The app provides a risk indicator based on the person's lifestyle to an individual, eg a person’s risk of type 2 diabetes based on food intake.

No risk assessment provided: The app provides no risk indicator or diagnosis.

Logic

DISABLEMENT LOGIC - Disabled if PD01 is no AND DG02 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question is applicable to apps which provide individual risk to a user using some kind of algorithm or AI. It aims to identify if the user can send their result/information to a healthcare professional to get a further assessment, for more information.

Response

Yes / No

Answer Criteria

Yes: If the app provides a calculation, paragraph, table or diagram indicating a users risk, and allows this to be sent to a HCP for further investigation/information (being able to get a second opinion from a real clinician by sending information on). 

No: If the app provides no form of further investigation/information by a HCP.

No: If the app offers solely virtual consultations with HCP with no transfer of health data logged within the app.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This questions aims to identify apps which collect check the user’s symptoms and provide a possible diagnosis/diagnoses based on the inputted information. The purpose or benefit of the app must be its symptom checking functionality. For instance, if an anxiety/depression app contained GAD-7 or PHQ-9, this would not be a symptom checker.

Response

Yes / No

Answer Criteria

Yes: If the app provides a possible diagnosis based upon the collection of a user’s symptoms.

No: If the app provides no form of diagnosis or risk assessment based upon the collection of a user’s symptoms.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This is looking at whether a symptom checker provides an assessment of what is the most likely cause to the user. For example, 9/10 people who have your symptoms suffer from X.

Response

Yes / No

Answer Criteria

Yes: If the app provides an assessment of chance, or likelihood of certain conditions based on collected symptoms.

No: If the app provides no assessment of chance, or likelihood of certain conditions based on collected symptoms.

Logic

DISABLEMENT LOGIC - Disabled if DG05 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if an app allows the user to filter through the list of conditions the symptom checker provided. It is crucial that the user has the option to turn the filter on or not, if the list is automatically generated in a particular order, this is not providing the user the autonomy to filter. Any filtering rules are applicable from likelihood of symptoms matching a condition to most severe condition symptoms may relate to.

Response

Yes / No

Answer Criteria

Yes: If the app provides a filter for the provided risks. The app needs to provide a specific filter option, and sorting by order of likelihood automatically is NOT sufficient.

No: If the app provides no filter for the provided risks.

Logic

DISABLEMENT LOGIC - Disabled if DG05 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if symptom checker apps provide treatment suggestions alongside the listed conditions. If next to a symptom the app recommends a user should seek treatment through signposting to further services, this is not sufficient. The app must be providing the treatment details itself for this question.

Response

Yes / No

Answer Criteria

Yes: If the app provides any treatment suggestions for the listed conditions.

No: If the app provides no treatment options for the listed conditions.

Logic

DISABLEMENT LOGIC - Disabled if DG05 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if the symptom checker app provides suggestions for the user to seek further treatment, based upon the indicated diagnoses. Anything from calling 911 to a recommended visit to your family physician would be sufficient for this question.

Response

Yes / No

Answer Criteria

Yes: If the app provides any signpost to a further service based upon the symptom checker outcome.

No: If the app does not signpost to a further service based upon the symptom checker outcome.

Logic

DISABLEMENT LOGIC - Disabled if DG05 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

The FDA takes into account the use of algorithms and AI in relation to identifying and assessing medical devices. The identification of a clinical calculator would help support the argument as to whether an app should be classified as a medical device or not.

Response

Yes / No

Answer Criteria

Yes: This includes apps for use by clinicians or users to calculate parameters pertaining to care, such as early warning system software (if there are treatment implications associated with the calculation). 

No: If the app is not for use by clinicians or users to calculate parameters pertaining to care, such as early warning system software.

Logic

DISABLEMENT LOGIC - Disabled if AI03 is no AND if AI01 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question allows the assessor to record information about the type of Clinical Calculator which has been located within the app. For example, contained within the app may be something which calculates the amount of water needed to treat a burns victim.

Response

Free Text

Answer Criteria

N/A

Logic

DISABLEMENT LOGIC - Disabled if TS01 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

Prevention is another key definition in defining a medical device according to FDA regs. If an app is claiming to be used for prevention or its intended use/benefit relates to prevention of a disease or condition it is likely to be a medical device.

Response

Yes / No

Answer Criteria

Yes: If the app is intended to PREVENT a specific disease or condition OR If the actual app will stop you from getting the disease.

No: If the app is trying to catch something early before it develops, e.g. skin vision.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question allows the assessor to explain how the app prevents disease.

Response

Free Text

Answer Criteria

N/A

Logic

DISABLEMENT LOGIC - Disabled if MD01 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if an app provides treatment to a user’s specific condition. This includes both apps that provide information which can be used to enable treatment as well as apps which provide an output which can be used to treat a condition. For example, apps which calculate that are intended to calculate the dose of insulin a diabetic needs to treat their diabetes based on carbohydrate in a meal.

Response

Yes / No

Answer Criteria

Yes: Apps that provide information that can be used to enable treatment to be performed or claim that the output from the app can be used to treat a condition. E.g. an app to calculate the dose of insulin a diabetic needs to treat their diabetes based on carbohydrate in a meal.

No: If the app is intended to treat non-medical conditions e.g. non-specific stress. OR apps intended to just provide tips or advice or link to support groups OR medication reminders.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question allows the assessor to explain what treatment the app provides.

Response

Free Text

Answer Criteria

N/A

Logic

DISABLEMENT LOGIC - Disabled if TS05 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify apps which are guiding the treatment of a condition. This can occur in a number of ways but it is key that the app is guiding the treatment of a condition following best clinical practice guidelines.

Response

Yes / No

Answer Criteria

Yes: Apps which take a user’s health information, and provide specific treatment pathways for the user to follow to treat their condition OR clinician-facing apps that advise treatments.

No: Apps intended to just provide tips or advice which is non-specific to the user.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question allows the assessor to explain how the app can guide the user’s treatment of a condition.

Response

Free Text

Answer Criteria

N/A

Logic

DISABLEMENT LOGIC - Disabled if TS07 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

The question allows the assessor to confirm whether treatment guidance is for a general user or a healthcare professional.

Response

Multiple Choice

Answer Criteria

User: Refers to the patient / carer using the app.

HCP: Health Care Professional.

Logic

DISABLEMENT LOGIC - Disabled if TS07 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to determine whether the app can provide treatment to an individual without a healthcare professional involvement.

Response

Yes / No

Answer Criteria

Yes: If the app provides treatment to the user without HCP involvement.

No: If the treatment is not provided independently of a HCP, or if the app provides no treatment.

Logic

DISABLEMENT LOGIC - Disabled if TS05 is no AND if TS07 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify apps which supports a decision made by a healthcare professional on a case by case basis. The app must be more than a generic textbook and provide information directed towards healthcare professionals.

Response

Yes / No

Answer Criteria

Yes: The app contributes to a professional’s decision about treatment, so this is for doctors to look at OR Supports decision making on a case by case basis (eg Mersey Burns would be yes (tells clinician how much fluid a patient requires based on percentage burns they have suffered).

No: If the app provides generic, non specific care pathways.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

Whilst the FDA regulations do not specify if following a path of a procedure/treatment makes an app a medical device, the assessor will be made aware of the risk which comes with this functionality as well as understanding that additional functionality which could lead the app to be a medical device under FDA regulations.

Response

Yes / No

Answer Criteria

YES:  If the app outlines a treatment / procedure but does not make and communicate any decisions to the user.

NO:  If the app makes any decisions for the user.

Logic

DISABLEMENT LOGIC - Disabled if TS03 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

Apps could still potentially be a MD if this is answered as yes, relying on additional functionality too. FDA is unclear about specifics in this area (would depend on other functions too). That said, if this question is answered no, it is very likely the app would be identified as a MD under the FDA.

Response

Yes / No

Answer Criteria

YES: If the app outlines a treatment/ procedure but does not make and communicate any decisions to the user.

NO: If the app makes any decisions for the user.

Logic

DISABLEMENT LOGIC - Disabled if TS03 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/ Context

Automating the treatment pathway is a software function that makes the app become a regulated medical device by performing patient-specific analysis and providing patient-specific diagnosis, or treatment recommendations.

Response

Yes / No

Answer Criteria

YES: The app creates the treatment pathway for the user, and does not rely on a HCP.

NO: If the app outlines a set of treatments / procedures but the final decision about which treatment is left to the HCP.

NO: If it is a “one size fits all” pathway that doesn’t take into account individual factors.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if the apps intended purpose is to reduce the symptoms or severity of a disease, injury or physical/mental impairment. The app cannot just support a condition or impairment, the app must provide some sort of functionality to reduce the symptoms. For example, a Tinnitus noise cancelling app reduces the symptoms of Tinnitus. This is to help identify Medical Devices.

Response

Yes / No

Answer Criteria

Yes: If an app that provides a physical output to alleviate the symptoms of an existing condition. For example a Tinnitus noise cancelling app.

No: If an app does not provide a physical output to alleviate the symptoms of an existing condition.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if an app compensates for a specific injury or physical / mental impairment. It is important that the assessor identifies this is the app's intended purpose and that it is not meant for general use.

Response

Yes / No

Answer Criteria

Yes: Apps which the developer claims can compensate for an injury or handicap or claims that the output from the app can be used for this purpose. For example apps to magnify text specifically for people with visual impairment or apps amplify sounds for people with reduced hearing.

No: If the app provides no link to a specific injury or handicap. For example apps to magnify text but there is no mention of visual impairment in the manufacturer’s claims OR apps to amplify sound  but there is no mention of hearing impairment in the manufacturer’s claims.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question helps identify if the app’s intended purpose/benefits focuses around conception/contraception. This will in turn help identify if the app is a potential Medical Device as defined by the Food and Drug Administration (FDA).

Response

Yes / No

Answer Criteria

YES: If an app informs the user of when their fertile window is.

NO: If the app does not identify the user’s fertile window.

Logic

DISABLEMENT LOGIC - Disabled if MD08 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question helps identify if the app’s intended purpose/benefits focuses around conception/contraception. This will in turn help identify if the app is a potential Medical Device as defined by the Food and Drug Administration (FDA).

Response

Yes / No

Answer Criteria

YES: If an app or related website or description claims to make pregnancies more likely or to be able to prevent pregnancy.

NO: If an app or related website or description does not claim to make pregnancies more likely or to be able to prevent pregnancy.

Logic

DISABLEMENT LOGIC - Disabled if CC01 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question helps identify if the app’s intended purpose/benefits focuses around conception/contraception. This will in turn help identify if the app is a potential Medical Device as defined by the Food and Drug Administration (FDA).

Response

Yes / No

Answer Criteria

YES: If an app has an assistive device which can be used to record BBT. Measurements can be input manually after taking a reading.

NO: If an app does not have an assistive device which can be used to record BBT, or it does not record BBT.

Logic

DISABLEMENT LOGIC - Disabled if CC02 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question helps identify if the app’s intended purpose/benefits focuses around conception/contraception. This will in turn help identify if the app is a potential Medical Device as defined by the Food and Drug Administration (FDA).

Response

Yes / No

Answer Criteria

YES: If an app uses rhythm/bbt/cervical mucus methods to aid in the prevention of pregnancy or to help conception.

NO: If an app doesn’t use rhythm/bbt/cervical mucus methods to aid in the prevention of pregnancy or to help conception.

Logic

DISABLEMENT LOGIC - Disabled if CC02 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question helps identify if the app is marketed towards facilitating conception/contraception. This will in turn help identify if the app is a potential Medical Device as defined by the Food and Drug Administration (FDA).

Response

Yes / No

Answer Criteria

Yes: If the app markets itself or claims the user can use the app as a natural method of birth control.

No: If the app does not claim to be a natural method of birth control.

Logic

DISABLEMENT LOGIC - Disabled if CC03 is no AND if CC04 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if apps are to be used to control conception through two or more of the practical methods highlighted in CC01 - CC04. This will in turn help identify if the app is a potential Medical Device as defined by the Food and Drug Administration (FDA).

Response

Yes / No

Assessment Criteria

Yes: If the app appears to be a natural form of contraception AND be intended to be used a way of conceiving based on the above answers (CC01, CC02, CC03, CC04 and CC05).

No: If the app only claims to be a natural form of contraception OR intended to be used as a way of conceiving, but doesn’t claim to be both.

Logic

DISABLEMENT LOGIC - Disabled if CC02 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if the app can set medication alerts/reminders, trackers or if the app indicates how much medication the user should take.

Response

Yes / No

Answer Criteria

Yes: If an app provides medication reminders or trackers used as an assistive tool OR if the app influences how much you should take e.g. insulin calculator etc.

No: If an app does not provide medication reminders or trackers used as an assistive tool OR if there are no alarms to take medications.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to understand the context of the app and to also examine whether or not it can be used without the device.

Response

Yes / No

Answer Criteria

Yes: The app is designed to work with a specific device, and likely doesn’t function fully without it e.g. Garmin Watch with Garmin App.

No: The app connects with third party devices e.g. Fitbit watch.

Logic

DISABLEMENT LOGIC - Disabled if DC01 does not contain Devices.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

Due to a logic issue, only one answer should be selected. If the app allows the monitoring of both General Health or Wellness and Specific Condition Data, the assessor should select Specific Condition data. This question will contribute to the outcome of MN04, a question which helps determine what ESF tier the app belongs in.

Response

Multiple Choice

Answer Criteria

Yes - General health or Wellness data: If the app has any capability at all which allows the user to monitor any health information which the app records.

Yes - Specific Condition data: If the app is aimed towards someone with a pre-existing condition e.g. chronic pain, diabetes etc.

No - None: If an app does not collect or allow the monitoring of health information.

Logic

DISABLEMENT LOGIC - Disabled if D01 is no. OR disabled if DT10 does not contain neither Physical and/or Mental Health Data nor General Wellness Data.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if the app allows users to record health information which can be reviewed at a later date. This question contributes to the outcome of MN04, a question which helps determine what ESF tier the app belongs in.

Response

Yes / No

Answer Criteria

Yes: If an app allows the recording and reviewing of data over a period of time to allow the user to monitor their health information.

No: If an app does not collect or allow the monitoring of health information.

Logic

DISABLEMENT LOGIC - Disabled if MN01 contains None.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This questions aims to identify is an app provides further insight around the user’s health data it collects. The app needs to be providing novel insights, automated alerts or reminders from the user’s health data. If the health data is relayed back to the user with no additional information, MN03 will be no. This question contributes to the outcome of MN04, a question which helps determine what ESF tier the app belongs in.

Response

Yes / No

Answer Criteria

Yes: If an app allows the user to record health data, and then the app provides insight back to the user. For example in the form of alerts, reminders or adjustments regarding the user’s health/lifestyle.

No: If an app doesn’t collect health data, or if it collects it and regurgitates it back to the user in the form of a simple graph, without any further insight or information.

Logic

DISABLEMENT LOGIC - Disabled if MN01 contains None.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This questions aims to differentiate between the different types of self-management and therefore different tiers from the Evidence Standards Framework. MN01, MN02 and MN03 all feed into the outcome of this question. Below is a diagram assessors refer to during the assessment process in order to decipher what type of self management tool they reviewing.

Response

Multiple Option

Answer Criteria

A Simple Self Management app: If an app is simple monitoring with wellbeing and general health focus = Tier Bi

A Standard Self Management app: If an app is simple monitoring with a specific condition focus OR complex monitoring with a wellbeing and general health focus = Tier Bii

A Complex Self Management app: If an app is complex monitoring with a specific condition focus = Tier C

Logic

DISABLEMENT LOGIC - Disabled if MN01 contains None.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This questions aims to evidence whether the monitoring the app performs is specifically there to impact on the user’s treatment.

Response

Yes / No

Answer Criteria

Yes: If the app provides a calculated output which is based on the health information collected, which may directly impact an individual’s decision regarding the treatment management of a condition. For example, a peak flow meter which shows decreasing measurements which acts as an early warning software.

No: If the app is not intended to affect the treatment management and is only carrying out complex monitoring that may display trends or other interesting data points.

Logic

DISABLEMENT LOGIC - Disabled if MN04 does not contain Complex Self Management app.

Scoring Impact

There is no scoring impact associated with this question.

This question aims to evidence whether the app allows the monitoring of the user’s health data by people who are not the user.

Response

Yes / No

Answer Criteria

Yes: If the app provides functionality within it that allows someone to monitor the user’s collected health data. This may be a HCP or may be a family member or friend.

No: No functionality within the App for someone who is not the user to view the data collected within the app. Functionality needs to be within the app.

Scoring

DISABLEMENT LOGIC - Disabled if MN01 contains None.

Logic

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify whether the app automatically collects and sends health data, without any sort of intervention from the user.

Response

Yes / No

Answer Criteria

Yes: If the app collects user health data and transmits it to somebody else, without any sort of user intervention.

No: The app does not automatically collect data OR the app does not automatically transmit data.

Logic

DISABLEMENT LOGIC - Disabled if MN07 does not contain Specific Condition data.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to look at whether the app sends a notification to the user/carer/healthcare professional based on any of the data recorded through the app itself or a connected device. For example, a diabetes app could automatically alert the user by creating a noise that notifies the user their blood glucose levels are either hypo (low) or hyper (high) in regards to the satisfactory levels they should usually be.

Response

Yes / No

Answer Criteria

Yes: If the app sends an alarm, alert or notification based on any of the data collected by the app itself or a connected device.

No: The app does not generate alarms based on the health data input and the user has to set them themselves.

Logic

DISABLEMENT LOGIC - Disabled if MN06 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if the user can define the filtering rules surrounding the health data and choose what boundaries trigger an alarm / alert.

Response

Yes / No

Answer Criteria

Yes: If the app alerts the user or HCP to a predefined abnormality manually set by the user.

No: The app does not generate alarms based on the health data input.

No: The app does generate alarms based on health data input but the user can not set these parameters themselves.

Logic

DISABLEMENT LOGIC - Disabled if MN08 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This is to determine what type of treatment the app supplies. Assessors can select more than one, for example if an app had a diary and an insulin calculator both Self-management and Monitoring should be selected. This question helps the assessor place the app in the correct ESF tier.

Response

Multiple Choice

Answer Criteria

Preventative behaviour change: If the app is intended to modify the users behaviour to reduce the risk of a condition.

Psychological intervention: If the app is intended to provide a psychological intervention to someone with a diagnosed psychological condition e.g. not non-specific stress.

CBT: If the app is intended to provide Cognitive Behavioural Therapy to a user in full.

Fertility: If the app is intended to be used to help with fertility treatments.

Self-management (administering measures): If the app is intended to be used to help provide information about how much medicine should be taken e.g. diabetic patient advised to take X units of insulin based on information inputted into the app.

Tailored treatment plan: If the app provides the user with a tailored treatment plan to improve their condition based on collected information.

Monitoring (basic): E.g. diary.

Logic

DISABLEMENT LOGIC - Disabled if TS05 is no AND if TS07 is no AND MN01 is None.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Response

This question provides further context around the functionality of the app.

Response

Yes / No

Answer Criteria

Yes: If the app allows the user to access consultation with relevant professionals. This would be a call or online chat directly with a doctor or professional in the relevant field.

No: The app does not allow consultations or other communication with a relevant professional through the app.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question follows on from the previous questions and it is also a data capture question. It aims to determine how exactly online conversations and consultations are held.

Response

Yes / No

Answer Criteria

Yes: If the user can have a video consultation directly with a relevant profession via the app.

No: If a video call consultation with the relevant professional is not available via the app.

Logic

DISABLEMENT LOGIC - Disabled if F14 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question provides further context around the functionality of the app and importantly informs the user where the advice comes from.

Response

Yes / No

Answer Criteria

YES: If the app enables a HCP to provide advice in whatever format through the app. This may be video consultation, instant messaging or other platform communications.

NO: The app does not allow consultations or other communication from a relevant professional through the app.

Logic

DISABLEMENT LOGIC - Disabled if F14 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question is a data capture question. It aims to collect information about exactly how the app allows a professional to supply clinical advice.

Response

Free text

Answer Criteria

N/A

Logic

DISABLEMENT LOGIC - Disabled if EF09 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question helps identify if an app can help a user order / request prescriptions.

Response

Yes / No

Answer Criteria

Yes: If the app allows users to order or request a prescription from a healthcare professional, healthcare provider or pharmacy.

No: If the app allows the user to record what prescription they would like to request. This would only be acting as a reminder to the user.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This is an information capture question which helps inform the functions and features.

Response

Yes / No

Answer Criteria

Yes: If the app sends push notifications to the device.

No: If there are in-app notifications which are not pushed to the device.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This is an information capture question which helps inform the functions and features.

Response

Yes / No

Answer Criteria

Yes: If the app sends email notifications relating to the user’s use of the app, personalised.

No: If the only emails are marketing/newsletters.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if an app can only be used for its intended purposes if a user has access to one of the connected devices.

Response

Yes / No

Answer Criteria

Yes: If the app ONLY works with a companion device. For instance, the user is unable to input data and therefore cannot use the app at all without the device.

No: If there is a companion device but the app can still be used independently.

Logic

DISABLEMENT LOGIC - Disabled if DC01 does not contain Devices.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to

Response

Yes / No

Answer Criteria

Yes: If the app is used to control an external medical device.

No: The app connects with an external device which is not classified as a medical device.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This is an information capture question which helps inform the functions and features.

Response

Yes / No

Answer Criteria

Yes: If there is any way for users to communicate with other users within the app. This can be through messaging, internal forums, connecting with friends, communicating with a healthcare professional etc.

No: If you can only send a report to a doctor via email for example.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question refers to forums which are within the app rather than ones hosted externally via Facebook, developer website etc.

Response

Yes / No

Answer Criteria

Yes: If the app has an internal forum.

No: If the app provides links to a third party forum or an externally hosted forum. One-to-one communication is not a forum.

Logic

DISABLEMENT LOGIC - Disabled if U19 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question refers to forums which are hosted eternally via Facebook, developer website etc. rather than within the app.

Response

Yes / No

Answer Criteria

Yes: If the app provides links to a third party forum or an externally hosted forum.

No: If the app links to a Facebook page which is not a forum. If the only forum is in-app.

Logic

DISABLEMENT LOGIC - Disabled if U19 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question is an information capture question which informs functions and features. The two way communication needs to exist within the app through chat functions, a forum, video call and must be between two or more people.

Response

Yes / No

Answer Criteria

Yes: If the app allows for any two-way communication between any two people.

No: If the app does not enable two-way communication between two or more people.

Logic

DISABLEMENT LOGIC - Disabled if U19 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question is an information capture question which informs functions and features. The gamification or goal setting features must somehow relate to the user’s health or wellbeing.

Response

Yes / No

Answer Criteria

Yes: If you can choose a goal, get badges or achievements through use of the app.

Yes: If the app provides targets or you can set your own targets.

Yes: If the app encourages engagement with rewards.

No: No goal setting or gamification. If gamification has no real purpose.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question follows on from the previous and aims to identify what type of goals exist in the app.

Response

Multiple Choice

Answer Criteria

Tailored: If the goals are specific to the user. For example, the user can input health parameters and the app generates a goal based on those readings. 

Generic: If the set goals are generic for all users. For instance, goals that are pre-set within the app and are the same for each user. 

User defined: If the user can manually or directly specify or customise their goal. For example, the user can choose a weight loss goal which they can set themselves. 

Logic

DISABLEMENT LOGIC - Disabled if F06 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question allows us to understand further the functionality of the app, it helps us with our adapted ESF tiering.

Response

Yes / No

Answer Criteria

Yes: If ‘User defined' has been selected in the previous question (ORC_F06).

No: If only ‘Tailored’ or ‘Generic’ has been selected in the previous question (ORC_F06).

Logic

DISABLEMENT LOGIC - Disabled if F06 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if the user can edit the style of the app to suit their needs and / or preferences.

Response

Yes / No

Answer Criteria

Yes: If any changes can be made to the presentation theme within the app. This includes editing the background, colours, profile picture, language, measuring units etc.

No: If the presentation of the app cannot be edited or customised by the user in any way.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if the user can set preferences on the device which is carried through to the app to suit their needs and / or preferences.

Response

Yes / No

Answer Criteria

Yes: If the app responds to changes in font size.

Yes: If the app provides support options for users with poor vision/poor hearing.

No: If the app only responds to in-app preferences.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This is an information capture question which used to inform the users whether the app is completely free or if there are some sort of costs involved in the app. If the app has any costs associated with it ranging from in app purchases to licenses required by a healthcare provider, the assessor should answer this question no. If the app requires the user to purchase the associated device in order to use the app, the assessor should answer this question no.

Response

Yes / No

Answer Criteria

Yes: If the app is free to download AND has no in-app purchases or subscriptions AND costs are not incurred or covered by any third party organisation/employees. For instance, licenses are NOT needed to be purchased for distribution).

No: If licenses are needed to be purchased for distribution.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify what the business model is behind the app. If the answer is not apparent through publicly available information, the assessor should select Self-funded as a default.

Response

Multiple Choice

Answer Criteria

In-app purchase: If the app is funded through the user purchasing something within the app after downloading.

Subscription: If the app is funded through subscription fees which the user has to pay in order to download the app.

One off payment: If the app is funded through one off payments which the user needs pay in order to download the app.

Licensed by doctor/healthcare provider: If the app is funded through licenses which need to be purchased in order for doctors/healthcare providers to provide access to their patients.

Donations: If the app is funded through donations.

Government or similar grant: If the app is funded through a government or similar grant.

Charity / Non profit: If the app is funded by a charity or non-profit organisation.

Self-funded: If the app is self-funded by the people who run the company. OR if there is no evidence of how the app is funded then Self funded should be selected.

Logic

DISABLEMENT LOGIC - Disabled if U29 is no.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question aims to identify if the app displays advertisements for external products/services. If the app advertises their own subscriptions or in app purchases, this does not count.

Response

Yes / No

Answer Criteria

Yes: If the app has adverts for other products/services within it.

No: If the app contains adverts for its own in-app purchases.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This questions aims to identify the intended purpose of the app through highlighting the claimed / implied benefits. If the assessor reads a clear benefit described by the developer, this would be a claimed benefit. If the assessor is having to infer a benefit from text written by the developer, this would be an implied benefit. If a claimed or implied benefit does not appear in the list below, the assessor should select Other Claimed/Implied Benefit and make the benefit very clear. In order for evidence to meet the requirements of the framework, the evidence of efficacy should relate to the benefits / intended purposes of the app.

Response

Multiple Choice

Answer Criteria

Cost savings to the healthcare system

Increased access to care

Improved diagnostic or risk assessment

Improved quality of treatment

Improved recovery

Reduced readmission or re-referral

Improved management of a condition

Preventative Behaviour Change

Improved mental wellbeing

Improved physical wellbeing

Improved system/process efficiency

Other Claimed Benefit (please describe)

Other Implied Benefit (please describe)

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question should only be active if personal and/or sensitive data is collected by the app and is shared with the developer/third parties etc. If this appears to be wrongly active then check back on data scene setters.

Response Type

Yes/No

Answer Criteria

Yes: If any data is collected by or through the app, in any way. Including data such as usage data, cookies etc.
No:

Logic

DISABLED LOGIC -This question should only be active if personal and/or sensitive data is collected by the app and is shared with the developer/third parties etc. If this appears to be wrongly active then check back on data scene setters.

Scoring Impact
Maximum risk applied to the data section in this question and all questions that are disabled as a result of answering D39a as No. Questions would be disabled as a result of them not being applicable due to the app not having an applicable policy.

Guidance/Context

Due to the nature of the data being collected being non-identifiable a summary privacy is suitable. This question should only be active if personal and/or sensitive data is not collected by the app or is not shared with the developer/third parties etc. If this appears to be wrongly active then check back on data scene setters.

Response Type

Yes/No

Answer Criteria

Yes: A privacy summary can be a simple paragraph explaining privacy practices of the developer, as collection of non-personal/sensitive data does not require a full privacy policy.

Logic

DISABLED LOGIC -Disabled if data is automatically shared/collected. Only enabled when the app/developer collects only none sensitive data OR when the personal/sensitive data is only shared through direct manual intervention from the user.

Scoring Impact

Maximum risk applied to this question and all questions that are disabled as a result of answering D39b as No. Questions would be disabled as a result of them not being applicable due to the app not having an applicable policy.

Guidance/Context

This question looks to identify when a privacy policy is presented to a user. Making users aware of how their data is collected and used is mandatory.

Response Type

Yes/No

Answer Criteria

Yes: If the privacy policy is displayed when the app is first opened.

Yes: If the user is prompted to view and/or provided with a link to the policy when the app is first opened or on the login page.

Logic

DISABLED LOGIC -Disabled if D39a AND D39b are answered no.

Scoring Impact

High value applied if Yes. Value cannot be applied for both DP03 and DP04.

Guidance/Context

This question looks to identify when a privacy policy is presented to a user. Making users aware of how their data is collected and used is mandatory.

Response Type

Yes/No

Answer Criteria

Yes: When the user is provided with the privacy policy during the sign up process.

No: If the user is not provided with, or linked to the privacy policy during sign up.

Logic

DISABLED LOGIC - Disabled if D39a AND D39b are no, OR if DT14 is no.

Scoring Impact

High value applied if Yes. Value cannot be applied for both DP03 and DP04.

Guidance/Context

A privacy policy must be accessible to the user. This and following question look to identify where the privacy policy is located. Publishing within the app or being accessible via the app result in high value than it only being identifiable on the relevant app store.

Response Type

Yes/No

Answer Criteria

Yes: If the privacy policy is readily available to read at any time within the app.

No: If the privacy policy link takes you out of the app to a web browser.

Logic

DISABLED LOGIC - Disabled if D39a AND D39b are answered no.

Scoring Impact

Medium value applied if Yes. Value cannot be applied for both DP01 and DP02 if both are answered Yes.

Guidance/Context

A privacy policy must be accessible to the user. To determine if a policy is external, a user can enter the app manager screen. If still on the app the policy is internal, if an internet browser has opened separate from the the app then it is external.

Response Type

Yes/No

Answer Criteria

Yes: If the policy links outside of the app to the browser.

Yes: If there is an external link to the website, where there is access the privacy policy. This comes under the 2 click rule. Meaning that a privacy policy is easily accessible within 2 clicks/taps

Logic

DISABLED LOGIC - Disabled if D39a AND D39b are answered no.

Scoring Impact

Medium value applied if Yes. Value cannot be applied for both DP01 and DP02 if both are answered Yes.

Guidance/Context

A privacy policy must be accessible to the user. This and following question look to identify where the privacy policy is located. Publishing within the app or being accessible via the app result in high value than it only being identifiable on the relevant app store.

Response Type

Yes/No

Answer Criteria

Yes: If the policy is accessible through the app store, making sure the privacy policy applies to the app. If it doesn’t link directly make sure it is accessible within 2 clicks.

Logic

DISABLED LOGIC - Disabled if D39a AND D39b are answered no.

Scoring Impact

Low value applied if Yes.

Guidance/Context

This is a multiple choice question. Choices should be selected based on what is stated in the privacy policy. This would normally be found in a section titled like “What Information do we collect?”. Choices should only be selected if the privacy policy states them, this question should not be based off what can be seen in the app.

Response Type

Multiple Choice

Answer Criteria

Sensitive - Physical / Mental Health or Condition (past, current or future status), Sexual Life / Orientation, Political, Religious or other beliefs or opinions, Offences Committed / Alleged to have Committed / Criminal Proceedings / Outcomes / Sentence,  Financial data (that might be used for payment fraud), Trade Union membership, Racial / Ethnic Origin, Genetic or Biometric Data (e.g. fingerprints / facial Recognition) for the purpose of uniquely identifying a person

Personal (combined - If a number of these items have been selected, then there is a possibility that data can be personally identifiable) - Cookies, web beacons, flash cookies, server logs etc which track individual’s browsing behaviour, Other Unique Device Identifiers eg. Device MAC Address, Name, Age/DOB, Gender (self declared or observed), Marital Status |Family / Lifestyle / Social Circumstance, Education / Qualifications / Professional Training / Awards, Other online identifiers / Event Logs, Location Data (Travel / GPS / GSM Data / radio frequency identification tags (RFID))

Personal - Address|Postcode (full), Email Address, Mobile Phone Number / Device Number / Home Phone Number, Physical Description, Username, IP Address, General Identifier e.g. NHS No, Income / Financial / Tax Situation, Employment / Career History, Device IMEI No

Non-Personal - General Wellness data

Logic

DISABLED LOGIC - Disabled if D39a AND D39b are answered no.

Scoring Impact

There is no scoring impact for this question.

Guidance/Context

This questions looks to capture if the data that is stated as collected by the developer within the privacy policy matches what has been identified during assessment and usage of the app.

Response Type

Yes/No

Answer Criteria

Yes if DP06 contains the same selections as DT10.

Logic

DISABLED LOGIC - Disabled if D39a AND D39b are answered no.

Scoring Impact

High risk applied if No AND DT10 and DP06 do not match.

Guidance/Context

This question looks at whether data is stored within the app. An app that requires data to be automatically transferred off the app - even to just be stored remotely - would not meet this requirement.

Response Type

Yes/No

Answer Criteria

Yes: “Stored locally on device” is clearly stated.

Yes: Data is stored only on the device, unless a user chooses to share it, or no data is collected or stored by the developer. 

No: Doesn’t state that personal data is stored only on the device.

No: Personal data is clearly transferred to and stored in any location outside the device with no involvement from the user.

Logic

DISABLED LOGIC - Disabled if D01 OR DS06 are No, or if DS07 OR DS09 are answered Yes.

Scoring Impact

High value if Yes.

Guidance/Context

Consent should be obvious and require a clear, positive, physical action from the user to opt in. Consent requests must be prominent, separate from other terms and conditions, easy to understand, and user friendly.

During sign-up to the app attention should be paid to how, if at all, consent is obtained from the user.

Response Type

Multiple Choice

Answer Criteria

Unmarked opt in check box, separate from other terms and conditions and/or consent requests (separate boxes for privacy policy, terms/conditions and marketing).- if there is an unmarked checkbox where the user can agree or consent to the privacy policy alone.

Clear affirmative acceptance option, separate from acceptance of other terms and conditions and/or consent requests (separate acceptance option for privacy policy, terms/conditions and marketing).- if there is another form of acceptance of the privacy policy, eg. clicking “sign up” after having been presented with the privacy policy.

Explicitly through express confirmation in words, rather than any other positive action (e.g. the user is required to email/write to the developer providing a clear confirmation of consent). This does not apply to a statement in the privacy policy such as “by using this app you consent to us collecting your data.”)- if the user is required to email the developer to provide their written consent.

Another form of positive action to opt in to giving consent (please detail below) - eg. if the acceptance box is for both privacy policy and T&Cs.- if there is an unmarked checkbox to agree to the privacy policy and T&Cs all together.

Other (please detail below), e.g. A statement in the privacy policy such as by using this app you consent to us collecting your data, with no clear confirmation of acceptance of policy. - if there is no clear option to be taken by the user to accept the privacy policy.

Logic

DISABLED LOGIC - Disabled if D39a is No.

Scoring Impact

Very high risk applied if “Other” is selected + multiplier based on nature of the data.

Guidance/Context

A DPO is important to ensure, in an independent manner, that an organisation applies the laws protecting individuals' personal data.

Response Type

Yes/No

Answer Criteria

Yes: If an individual person has been named and declared the person responsible for the company’s privacy practices, with contact details (this can include a generic email, such as dpo@company.co.uk, providing the individual responsible has been named).

No: If an individual person who is responsible for the role of DPO has not been named/detailed.

No: If there is only a generic email address.

Logic

DISABLED LOGIC - Disabled if D39a is no.

Scoring Impact

High value applied if yes.

Guidance/Context

Input the details of DPO from within privacy policy, this should be a named person not just a generic email and “data protection officer”.

Response Type

Free Text

Answer Criteria

N/A

Logic

DISABLED LOGIC - Disabled if DP14 has not been answered yes.

Scoring Impact

None

Guidance/Context

This questions identifies if the developers has clearly stated in the privacy policy how data will be collected from users. For example “ data will be collected when registering to use the app”.

Response Type

Yes/No

Answer Criteria

Yes: If the developer informs users where any data will be collected from. Eg. directly from the user or through third party sources.

No: If the developer has not informed users of all potential sources of information about them. Eg. the user is informed of data collected about them, however, the developers fail to identify that information is obtained from another location, such as Facebook, when the user signs up with this account.

Logic

DISABLED LOGIC - Disabled if D39a and D39b have not been answered yes OR DS06 has been answered Yes.

Scoring Impact

Medium risk applied if No + multiplier based on the nature of the data..

Guidance/Context

This question looks to identify if the purpose of processing has been made clear. For example, a developer may state that email addresses are captured to share marketing information with users.

Response Type

Yes/No

Answer Criteria

Yes: If the policy clearly explains what the user data collected is used for.

Yes: If the policy states all the uses for collected data that are apparent from the app.

No: If there is reason to believe that the developer has not explained any of the purposes for processing user data (Please detail in comments section).

Logic

DISABLED LOGIC - Disabled if D39a and D39b have not been answered yes OR DS06 has been answered yes.

Scoring Impact

Medium risk applied if No + multiplier based on the nature of the data.

Guidance/Context

Selection of answers for this questions should apply to data automatically shared with third parties/HCP/other users/devices - NOT with the developer. The exception to this is marketing should be selected if this a purpose of data sharing with the developer.

Response Type

Multiple Options

Answer Criteria

Legal obligations,

Performance of contract,

Payment transactions,

Research,

Improving of developer services,

Marketing,

Provision of service,

Other (Please specify),

Unclear.

Logic

DISABLED LOGIC - Disabled if D39a and D39b have not been answered yes OR DS06 has been answered Yes.

Scoring Impact

None

Guidance/Context

This question is asking if there is the possibility that data is being shared without this being made clear to the user. Therefore, No is the positive response.

Response Type

Yes/No

Answer Criteria

Yes: If data is shared without user consent, AND users don’t need to agree to the privacy policy. Essentially the opposite of D16.

Yes: If there is an obvious purpose for data use, which isn’t made clear or mentioned in the privacy policy. 

Yes: The policy states that the data will not be shared without first obtaining the user's consent to do so or that the app/developer ‘Won't share for other reasons/ with other parties, except as has been set out in the policy without obtaining your consent’

Logic

DISABLED LOGIC - Disabled if D39a has not been answered Yes.

Scoring Impact

High risk applied if yes + multiplier based on the nature of the data.

Guidance/Context

If direct marketing is being undertaken then developers need separate additional consent from the users. Answers for this questions are typically found in a section with name similar to “What we do with the information we collect” or the developers may have a separate “Marketing” section.

Response Type

Yes/No

Answer Criteria

N/A

Logic

DISABLED LOGIC - Disabled if D39a has not been answered yes or DT13 is answered as non-personal or D01 is answered no.

Scoring Impact

None

Guidance/Context

Consent for marketing should be obtained separately from consent for any processing user data for any other purpose. This must also be prominent, easy to understand and user friendly. E.g. A separate tick box for marketing and consenting with the privacy policy.

Response Type

Yes/No

Answer Criteria

Yes: If consent for marketing is obtained separately for marketing AND the method for gaining this consent is through one of the positive affirmative actions listed in DP08. (Unmarked opt in check box; clear affirmative acceptance option; explicitly through express confirmation in words, another form of positive action to opt in to giving consent (please detail below)).

No: If the user is not asked for consent to use data for marketing separately.

No: If the user has not been required to provide a positive affirmative action, separate from accepting other T’s & C’s / Privacy Policies, to agree to sharing their data for the purposes of marketing.

Logic

DISABLED LOGIC - Disabled if DP10 does not contain Marketing, or if DT13 is answered as non-personal.

Scoring Impact

High risk applied if no + multiplier based on the nature of the data.

Guidance/Context

The list of activities can be found in question ORC_DP10. The developer should state how a user can opt out of each of these processing activities.

Response Type

Yes/No

Answer Criteria

Yes: If the app has an option to opt out/turn off data collection for external research or provides a contact email to get data removed from a study.

Yes: If the policy clearly explains to user how they can contact the developer to opt-out of all  sharing/processing activities.

No: If shared for any other reasons other than legal obligations and no option to opt out (email address in policy explicitly stating how to opt out or sliders within app).

No: If the policy only mentions how the user can opt out of one, but not all, activities.

Logic

DISABLED LOGIC - Disabled if D39a and D39b have not been answered yes.

Scoring Impact

Medium risk applied + multiplier based on the nature of the data. Risk can not be applied to both D28 and DP13.

Guidance/Context

N/A

Response Type

Yes/No

Answer Criteria

Yes: If only shared for legal obligations - Policy must state who they will share the data with and for what legal purposes (e.g. protect rights, copyright).

Yes: If the developer has clearly set out justifiable reasons for not being able to deal with particular requests with regards to stopping certain processing/sharing activities.

No: If users are not informed of how they can either opt out of processing and sharing activities AND there is no justification from the developer as to why users cannot opt out of certain activities.

Logic

DISABLED LOGIC - Disabled if D39a and D39b have not been answered yes or D28 has been answered Yes.

Scoring Impact

Medium risk applied if no + multiplier based on the nature of the data. Risk can not be applied to both D28 and DP13.

Guidance/Context

Developers are required to share who data may be shared with for processing and other activities. Information for this question will typically be located in the privacy policy around information about what third parties data is shared with.

Response Type

Yes/No

Answer Criteria

Yes: If no data is shared without user consent.

Yes: If the policy states that using the app indicates agreement to the policy/given consent for data sharing specified.

No: If data is shared with third parties without user consent.

Logic

DISABLED LOGIC - Disabled if D39a has not been answered yes or D01 has been answered No or if DT13 has been answered non-personal.

Scoring Impact

High risk applied if no + multiplier based on the nature of the data.

Guidance/Context

N/A

Response Type

Yes/No

Answer Criteria

Yes: If the policy states the data is stored in a cloud server e.g. physical location e.g. secure server.

Microsoft Azure is a cloud storage technology.

AWS - amazon web servers.

If policy states the physical address of the data controller.

“May not be stored in your location” isn’t enough.

“In the UK” isn’t enough, has to be an address.

Logic

DISABLED LOGIC - Disabled if D39a And D39b have not been answered yes.

Scoring Impact

Medium value applied if yes.

Guidance/Context

The purpose of this question is to state where data is stored e.g. in a secure server or an AWS server.

Response Type

Free Text

Answer Criteria

N/A

Logic

DISABLED LOGIC - Disabled if DST01 is no.

Scoring Impact

There is no scoring impact for this question.

Guidance/Context

This question is looking to identify if appropriate technologies are being used for secure storage of user data. Technologies that are considered appropriate are detailed in the answer criteria below.

Response Type

Yes/No

Answer Criteria

Yes: If firewall, antivirus, or encryption when in storage/at rest is mentioned. Must state which technology is used, this does not have to be specific.
If AWS, Microsoft Azure or Google cloud server is mentioned.
“256-bit SSL encryption for data transfer and NSA-level 256-bit AES encryption of personal information” - would be “yes” to both encryption in storage and transit.
AES is yes to storage and encryption.
LUKS (Linux Unified Key Setup) is yes.

No: Doesn’t state which technology is used. Only mentions “cloud services” but doesn’t specify provider.

Logic

DISABLED LOGIC - Disabled if D39a And D39b have not been answered yes.

Scoring Impact

High value if yes. High risk if no.

Guidance/Context

The purpose of this question is to ensure that data is transferred securely to ensure there are no breaches of users data.

Response Type

Yes/No

Answer Criteria

Yes: If the policy states encrypted during transit or mentions the encryption type.
Encryption types:
If SSL or TLS = encryption in transit.
HTTPS
Web apps - check the address bar, the padlock means HTTPS.
“256-bit SSL encryption for data transfer and NSA-level 256-bit AES encryption of personal information” - would be “yes” to both encryption in storage and transit.
AES (Yes to both storage and encryption).

No: Doesn’t state the data is encrypted during transit.
Only mentions payment details are encrypted in transit.

Logic

DISABLED LOGIC - Disabled if D39a has not been answered yes.

Scoring Impact

High risk applied if no.

Guidance/Context

Developers need to state that video consultations use secure encryption clearly if appropriate. This should be in addition to the previous question about encryption of other data transfer.

Response Type

Yes/No

Answer Criteria

Yes: If it is made explicitly clear to the end-user, that a secure encrypted connection is used for all video consultations. This may be in the policy or elsewhere on the website/app.

Logic

DISABLED LOGIC - Disabled if D39a has not been answered yes.

Scoring Impact

High risk applied if no .

Guidance/Context

Developers that are compliant with these international data standards are rewarded for compliance with best practice standards of data management.

Response Type

Multiple Option

ISO 27001
Cyber Essentials+
Cyber Essentials (https://www.ncsc.gov.uk/cyberessentials/search)
PCI DSS
Other

Answer Criteria

Yes: If there is a compliance sticker on their website. ISO 27001. (if any other ISOs/BSIs etc. are mentioned, please confirm the appropriateness of the standard for data management.

Yes: Needs to be the COMPANY that is ISO compliant, not the server where data is stored, particularly when the company/developer is the data controller.

No: If there is no evidence of ISO, BSI etc. compliance.

EU-US privacy shield does not count for this question.

If the server (e.g. AWS) is ISO compliant but there is no explicit statement to say the company is.

Logic

DISABLED LOGIC - Disabled if D39a and D39b have not been answered yes.

Scoring Impact

High value applied if yes.

Guidance/Context

N/A

Response Type

Yes/No

Answer Criteria

Yes: If the developer mentions any time period of data retention, even if it’s an indefinite amount of time.

Yes: If the developer states “We only keep your personal information for as long as it’s necessary for our original legitimate purpose for collecting it and for as long as we have your permission to keep it.”

No: If the only mention of data retention is provided where the developer informs users of the rights under GDPR.

No: Developers are obliged to separately inform users of their own policies and procedures regarding data retention in the event that a user has not exercised any of their rights to their data.

No: If the policy mentions a timeframe after which data may be stored in aggregate.

No: If the policy states “we may retain data for…”

Logic

DISABLED LOGIC - Disabled if D39a has not been answered yes.

Scoring Impact

Low risk applied if no.

Guidance/Context

N/A

Response Type

Yes/No

Answer Criteria

Yes: If the policy mentions how the data is deleted, if users haven’t exercised any user rights.

Yes: If the policy details that user data is deleted after a certain time period.

Yes: If users can delete or reset all data within the app, AND it deletes it from the server. Not if it clears the app but stays on the server.

Yes: If users are the data controller and the method of deletion is users contacting the developer to remove their data.

Yes: If the developer has detailed the process for anonymizing personally identifiable information after a given timeframe of inactivity.

No: If the only mention for deletion of data is provided where the developer informs users of the rights under GDPR. Developers are obliged to separately inform users of their own policies and procedures regarding the deletion of data if a user has not exercised any of their rights to their data.

No: If the only mention is removal of data for under 13s/minors.

Logic

DISABLED LOGIC - Disabled if D39a has not been answered Yes.

Scoring Impact

Low risk score applied if D20 has been answered No, + multiplier based on the nature of the data collected.

Guidance/Context

Developers have an obligation to notify the relevant supervisory authority when certain data breaches happen. Developers should therefore have a clear internal procedure in place to help aid the decision-making about whether or not a breach needs to be reported to the supervisory authority or even the affected individuals.

Response Type

Yes/No

Answer Criteria

Yes: If users are informed that they can complain to the Information Commissioner's Office (ICO), if they believe that their data privacy rights have been breached.

Yes: If users are informed they can lodge a complaint with their local data protection authority, if they believe that their data privacy rights have been breached.

Yes: If users are informed that they can complain to the Local Supervisory Authority of the country that the developer is based, if they believe that their data privacy rights have been breached.

Yes: If the user is told that they should inform the company, or the company will inform the user, (if you suspect a breach) and users have the right to file a complaint with the competent supervisory authority (GDPR Art. 77). Check T&Cs too.

Yes: If the developer has detailed in the privacy policy how they will approach any breaches to data security that they become aware of. For example informing users within a reasonable time frame and informing their relevant jurisdictional supervisory authority.

Yes: If the developer has detailed the process in which they will inform the local/jurisdictional regulatory authority of any confidentiality breaches.

No: If the policy doesn’t state what happens in the event of a breach.

No: If you can complain but only to the developer, not to the ICO in the event of a breach.

Logic

DISABLED LOGIC - Disabled if D39a has not been answered Yes.

Scoring Impact

Medium risk applied if D21 has been answered No + multiplier based on the nature of the data collected.

Guidance/Context

This statement may not always be situated within the policy. Check the terms and conditions and also other pages of the web site before answering this question no.

Response Type

Yes/No

Answer Criteria

Yes: If the developer states that they are fully compliant with GDPR or data protection act 2018. Or, are fully compliant to all 5 statements and states the GDPR/EU laws ((EU) 2016/679).

Yes: If the developer is registered with ICO - check registration number on ICO check website and provide a compliance statement.

No: If UK policies are not mentioned.

EU-US SHIELD is not GDPR compliant.

1998 data protection act is out of date.

Logic

DISABLED LOGIC - Disabled if D39a has not been answered Yes.

Scoring Impact

Low risk score applied if D23 has been answered No + with multiplier based on the nature of the data collected.

Guidance/Context

To meet the requirement for this question the developer has to specify ‘the legal basis for data collection is…’

Response Type

Yes/No

Answer Criteria

Yes: If the policy states data is collected under a legal basis, e.g. consent, performance of contract, legal obligation, vital interests, public interest or legitimate interest.

Yes: If the policy states that by using the app you consent to the privacy policy, “If you consent to this app, you consent for us to collect data.”, or a statement similar to this.

Logic

DISABLED LOGIC - Disabled if D39a has not been answered Yes.

Scoring Impact

High risk score applied if D60 has been answered No + multiplier based on the nature of the data collected.

Guidance/Context

Data minimisation means collecting the minimum amount of personal data that a developer needs to deliver an individual element of the service.

Response Type

Yes/No

Answer Criteria

Yes: If the policy mentions that only minimum data items necessary to provide their services are collected.

No: If there is no statement of a commitment to only collect necessary data from users.

No: If they have a statement to say they only collect the necessary health data - this statement doesn’t cover other types of data e.g. contact details.

Logic

DISABLED LOGIC - Disabled if D39a has not been answered Yes.

Scoring Impact

Low risk score applied if DPR03 has been answered No + multiplier based on the nature of the data collected.

Guidance/Context

The developer has an obligation to inform users of any changes that are made to the processing of data. The level to which the developer must notify is determined by the legal basis for processing and the extent of the change being made.

Response Type

Yes/No

Answer Criteria

Yes: If the legal basis is consent and the developer states that if the purpose for processing data changes then consent will be re-obtained before continued use of the service. 

Yes: If consent is not one of the legal basis and the developer has stated in the privacy policy that they WILL inform users of changes to the policy. 

No: If the developer states that they MAY inform the users of changes to the privacy policy.

Logic

DISABLED LOGIC - Disabled if D39a has not been answered Yes.

Scoring Impact

Medium risk score applied if D61 has been answered No + multiplier based on the nature of the data collected.

Guidance/Context

Questions relating to GDPR will only be asked for apps that collect and process personal and/or sensitive data.

Response Type

Yes/No

Answer Criteria

Yes: If the developer has made it clear that the user has certain rights with regards to their data and explains what those rights are.

Yes: If the developer has set out any of the user rights under GDPR.

Logic

DISABLED LOGIC - Disabled if D39a has not been answered Yes.

Scoring Impact

Exceptional risk score applied if DPR01 has been answered No + multiplier based on the nature of the data collected.

Guidance/Context

This is a right users should expect under GDPR.

Response Type

Yes/No

Answer Criteria

Yes If the policy clearly states the user’s right to erasure, or method for how data is deleted, OR the user can clear all data from the app.

Yes: If the policy clearly states the user’s right to be forgotten.

Logic

DISABLED LOGIC - Disabled if D39a Or DPR01 have not been answered Yes.

Scoring Impact

Low value score applied if D93 has been answered Yes.

Guidance/Context

This is a right users should expect under GDPR.

Response Type

Yes/No

Answer Criteria

Yes: If the policy clearly states the user’s right to access their data, and a contact method is given.

Logic

DISABLED LOGIC - Disabled if D39a Or DPR01 have not been answered Yes.

Scoring Impact

Low value score applied if D25 has been answered Yes.

Guidance/Context

This is a right users should expect under GDPR.

Response Type

Yes/No

Answer Criteria

Yes: The policy clearly states the user’s right to rectify, correct, amend or update their information.

Logic

DISABLED LOGIC - Disabled if D39a Or DPR01 have not been answered Yes.

Scoring Impact

Low value score applied if D56 has been answered Yes.

Guidance/Context

This is a right users should expect under GDPR.

Response Type

Yes/No

Answer Criteria

Yes: If the policy clearly states the user’s right to restrict use, or to stop using data.

Logic

DISABLED LOGIC - Disabled if D39a Or DPR01 have not been answered Yes.

Scoring Impact

Low value score applied if D81 has been answered Yes.

Guidance/Context

This is a right users should expect under GDPR.

Response Type

Yes/No

Answer Criteria

Yes: If the policy clearly states the user’s right to object.

Logic

DISABLED LOGIC - Disabled if D39a Or DPR01 have not been answered Yes.

Scoring Impact

Low value score applied if D57 has been answered Yes.

Guidance/Context

This is a right users should expect under GDPR.

Response Type

Yes/No

Answer Criteria

Yes: If the policy clearly states the user’s right to portability, or right to transfer their data, or the right to receive their data in a machine-readable format.

Logic

DISABLED LOGIC - Disabled if D39a Or DPR01 have not been answered Yes.

Scoring Impact

Low value score applied if D59 has been answered Yes.

Guidance/Context

This is a right users should expect under GDPR.

Response Type

Yes/No

Answer Criteria

Yes: If the policy clearly states the user’s right to withdraw consent.

Logic

DISABLED LOGIC - Disabled if D39a Or DPR01 have not been answered Yes.

Scoring Impact

Low value score applied if D58 has been answered Yes.

Guidance/Context

Automated processing is what can occur when applying for things such as insurance, finance, mortgage etc. It gives an output which is based on details entered. The result would be a machine driven decision or figure of cost etc. Users have the right to request any such decision be reviewed by a human.

Response Type

Yes/No

Answer Criteria

Yes: There may be a simpler statement, such as “You have the right to request that we do not process your personal data for the purpose of automated decision making”.

Yes: If the developer has made clear that the user has this right under GDPR, even if they do not specifically process data in such a way.

No: If this user right has not been mentioned in the policy.

Logic

DISABLED LOGIC - Disabled if D39a Or DPR01 have not been answered Yes.

Scoring Impact

Low value score applied if DPR02 has been answered Yes.

Guidance/Context

N/A

Response Type

Yes/No

Answer Criteria

Yes: If a contact method is provided in the policy for the developer, in relation to exercising user rights.

No: If a contact method is only provided for one user right, rather than all rights mentioned.

Logic

DISABLED LOGIC - Disabled if D39a Or DPR01 have not been answered Yes.

Scoring Impact

Low value score applied if D81 has been answered Yes.

Guidance/Context

N/A

Response Type

Yes/No

Answer Criteria

Yes: If a time frame is given, and it is within two months of receipt of the request.

No: If there is no separately provided timeframe and response commitment provided with regards to the user exercising their rights. I.e. if there are only contact details for enquiries about the policy as a whole, with an expected response time.

Logic

DISABLED LOGIC - Disabled if D39a Or DPR01 have not been answered Yes.

Scoring Impact

Low value score applied if D81 has been answered Yes.

Guidance/Context

When reviewing a native (including “hybrid”) app, being informed of the website using cookies, while using the browser, does not answer this question as yes. Reference to “site” in the question is regarding a review of a web app.

Response Type

Yes/No

Answer Criteria

Yes (web app): If when first landing on the website a banner/pop up appears asking users to accept cookies.

Yes (Native Apps): If when first accessing the app, or at the point at which the app attempts to use cookies, the user is clearly informed of the intended use of cookies.

Logic

DISABLED LOGIC - Disabled if the app is not collecting cookies, D01 is answered No or DT10 does not contain “Cookies/Web Beacons”

Scoring Impact

Low risk if answered No + Multiplier based on the nature of the data.

Guidance/Context

It is required that developers gain consent from visitors to the site in order to store or retrieve any information on a computer, smartphone or tablet using cookies.

Response Type

Yes/No

Answer Criteria

Yes (web app): If when first landing on the website a banner/pop up appears asking users to accept cookies.

Yes (Native Apps): If, when users are informed of the use of cookies, they are required to provide a clear confirmation of their acceptance of the use of cookies.

Logic

DISABLED LOGIC - Disabled if the app is not collecting cookies, D01 is answered No or DT10 does not contain “Cookies/Web Beacons”

Scoring Impact

Low risk if answered No + Multiplier based on the nature of the data.

Guidance/Context

Typically found on the bottom banner of a website or link. This should be made available when accepting cookies

Response Type

Yes/No

Answer Criteria

N/A.

Logic

DISABLED LOGIC - Disabled if the app is not collecting cookies, D01 is answered No or DT10 does not contain “Cookies/Web Beacons”.

Scoring Impact

Low risk if answered No + Multiplier based on the nature of the data.

Guidance/Context

N/A

Response Type

Yes/No

Answer Criteria

Yes: The app has content which may be appealing to children, but doesn’t specify an age range, OR the app is intended to be used by children. E.g. Apps that have a reward system that allow users to build up coins that can be exchanged for rewards.

No: If policy states they won’t collect data from under 13s, GDPR still allows for the 13-16 age range to provide consent independently

No: The policy is quite clear that the app is aimed at people over 18 or they won’t take data from an under 18 AND the app does not present any particular content or features that would encourage a minor to attempt to access and use the app.

Logic

DISABLED LOGIC - Disabled if D01 is no, Or DS06 is answered yes, Or if DT13 is answered none personal.

Scoring Impact

None

Guidance/Context

N/A

Response Type

Yes/No

Answer Criteria

Yes: If there is a statement that specifically details what a user should do to inform the developer.

Yes: If the developer specifically states that if they become aware of a minor/child providing personal data, then they will delete this data within a set period of time.

Yes: If the developer explains the app is offering online preventive or counselling services to children and therefore does not obtain parental consent as they are legally obliged to not do so.

No: If the policy does not provide any details on how the developer and/or user should respond when they become aware of a minor/child providing personal data.

Logic

DISABLED LOGIC - Disabled if D01 is no, Or DS06 is answered yes, Or if DT13 is answered none personal.

Scoring Impact

High, Medium or Low risk applied depending on if D44 is answered yes, if the app is designed for child, Pre-teen or teen with a multiplier applied based on the level of data collected (Non-personal, Personal, Sensitive)

Guidance/Context

Developers should make users aware that they should make themselves aware of third party policies as the developers privcay policy no longer applies. This may also be found in the Terms & Conditions.

Response Type

Yes/No

Answer Criteria

Yes: The policy mentions that the developer’s policy doesn’t extend to third parties and users are advised to make themselves aware of the privacy policies of any third party site/platform that they visit through the app.

Yes: Users are provided links to relevant third party privacy policies.

Logic

DISABLED LOGIC - Disabled if D39a And D39b have not been answered Yes.

Scoring Impact

Medium value score applied if D91 has been answered Yes.

Guidance/Context

This question is looking to capture if the user has the ability to contact developers if they have questions around the privacy policy and their processes.

Response Type

Yes/No

Answer Criteria

Yes: The user is informed of/given a method of contact for any queries regarding the policy. Contact method must be in the policy, normally found toward the end of the policy.

No: If it says “contact us” but no contact method is given in the policy.

No: If there is no clear statement that directs the user to contact information for the purpose of enquiring about the company's privacy policy/practices.

Logic

DISABLED LOGIC - Disabled if D39a And D39b have not been answered Yes.

Scoring Impact

Medium value score applied if D92 has been answered Yes.

Guidance/Context

This question looks to capture any sharing preferences includes sharing with third parties, not necessarily other apps.

Response Type

Yes/No

Answer Criteria

Yes: If the app allows user controls over data sharing with individual apps/platforms. I.e. gives the choice to turn on/off sharing with google fit, Instagram, Fitbit etc.

Yes: If it allows sign up through Facebook/Google+ or separately with an email address, as this gives the option to sign up with or without sharing with/from other apps/platforms.

No: If the app doesn’t ask permission to share to other apps, but does so automatically. Even if this is based on user agreement to privacy policies/T’s & C’s.

No: If ONLY sign up with Facebook/Google+ is allowed, i.e. you have no choice but to do so.

Logic

DISABLED LOGIC - Disabled if DS03 is answered No.

Scoring Impact

Medium value score applied if D06 has been answered Yes.

Guidance/Context

This question is looking to identify if users can choose if information is shared with other users. Added control over users own data is beneficial for maintaining privacy where appropriate.

Response Type

Yes/No

Answer Criteria

Yes: Can choose WHAT is being shared with WHO on the app.

Yes: If the data is only ever shared with other users through manual user intervention. E.g. users choose to post on a forum/news feed.

No: The app gives no control over who sees what. E.g. an open forum/send to all clinicians.

Logic

DISABLED LOGIC - Disabled if DS03is answered No.

Scoring Impact

Medium value score applied if DS03 has been answered Yes.

Guidance/Context

This question is specific to the app on the device it has been downloaded onto. e.g Is there a need to access information stored on the app during an emergency.

Response Type

Yes/No

Answer Criteria

Yes: If the intended purpose of the app is to provide information to those providing emergency response, in the event that the individual concerned is unable to communicate with the responder.

No: If access is for any other reason, including if access is remote for clinicians to monitor patients.

Logic

DISABLED LOGIC - Disabled if DS03 is answered No.

Scoring Impact

Medium value score applied if DS03 has been answered Yes.

Guidance/Context

Data contained within an app may be private to an individual. Adding security features to the app itself reassures users.

Response Type

Yes/No

Answer Criteria

Yes: App allows a pass code to be set, or use device security/unlock mechanisms a second time to access the app.

Yes: If there is the option to choose who can see information contained within the user profile/set privacy controls on you account.

No: If the user can set data sharing controls, such as choosing apps to share data with.

Logic

DISABLED LOGIC - Disabled if DO02 has been answered Yes.

Scoring Impact

High value score applied if DO03 has been answered Yes.

Guidance/Context

This question is looking to identify if the users access/identify is verified in any way. This is important to ensure the person creating the account is who they say they are and has access to the related accounts e.g. Email address.

Response Type

Yes/No

Answer Criteria

Yes: If there are any forms of user authentication being used.

No: If the developer does not have any way, beyond signing in, by which they verify that the person creating/accessing an account, is the person that they claim to be/the owner of the account

Logic

DISABLED LOGIC - Disabled if DT14 has been answered no.

Scoring Impact

High value score applied if DO04 has been answered Yes.

Guidance/Context

N/A

Response Type

Multiple Option

Answer Criteria

None

One-step email authentication - if already signed up, check by resetting password, if email link is sent to reset it is this one.

Other one-step authentication - e.g. Biometric access, pin number

HCP Granted Access/Invite - A referral code needed to access the app which comes from the HCP.

Admin Granted Access/Invite - Healthcare provider granting access to each individual HCP/user.

SMS authentication - code sent to phone confirming it is you signing in

Two-step authentication - Use of a separate authenticator app or a code sent to phone/email whenever you sign into the app which needs to be confirmed. The app uses a second authentication step after the user has clicked an email verification link when signing up e.g. requests a mobile number and sends a verification code by text.

Multi-step authentication - any more than 2 steps

Qualification/HCP Registration Check - Being able to register as a clinician and having your credentials checked before being accepted as a HCP to provide information to patients.

Identification Check (Eg. drivers licence, passport) - scan/take photos of ID for sign up purposes or ID verification e.g. NHS app when signing up or for a clinician to verify the person they are speaking to is the patient they are supposed to be dealing with.

Logic

DISABLED LOGIC - Disabled if DT14 has been answered no.

Scoring Impact

None

Guidance/Context

This questions is needed to help guide what is expected of the developer in terms of completing a DPIA and what would be expected within the following questions.

Response Type

Multiple Option

Answer Criteria

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

N/A

Response Type

Yes/No

Answer Criteria

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

N/A

Response Type

Free Text

Answer Criteria

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

N/A

Response Type

Free Text

Answer Criteria

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

N/A

Response Type

Yes/No

Answer Criteria

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question can be answered once the following breakout questions have been determined. This question is to help determine the need for a DPIA.

Response Type

Yes/No

Answer Criteria

Has a systematic description of the intended data processing been provided?

Article 35(3) sets out three types of processing which always require a DPIA, one of which is Systematic and extensive profiling with significant effects.

“any systematic and extensive evaluation of personal aspects relating to natural persons which is based on automated processing, including profiling, and on which decisions are based that produce legal effects concerning the natural person or similarly significantly affect the natural person.” - See Article 35(3)

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question is to help determine the need for a DPIA.

Response Type

Yes/No

Answer Criteria

Article 35(3) sets out three types of processing which always require a DPIA, one of which is Large scale use of sensitive data.

“processing on a large scale of special categories of data referred to in Article 9(1), or of personal data relating to criminal convictions and offences referred to in Article 10.” - See Article 35(3)

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question is to help determine the need for a DPIA.

Response Type

Yes/No

Answer Criteria

Article 35(3) sets out three types of processing which always require a DPIA, one of which is Public monitoring.

“a systematic monitoring of a publicly accessible area on a large scale.”

Systematic monitoring includes all forms of tracking and profiling on the internet, including for the purposes of behavioural advertising. - See Article 35(3)

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

If two or more of the answer options have been selected, then there is likely to be a need for the developer to have completed a DPIA, unless evidence can be provided that; it does not present risks to rights and freedoms of the data subjects; it is similar to another processing operation for which a DPIA has already been performed; A Member State law excludes the need of a DPIA; it is included in the optional list drawn up by the relevant supervisory authority pursuant to art. 35(5) GDPR.

In some cases, it is possible that just one of the options being selected will result in the need for a DPIA.

Response Type

Multiple Option

Answer Criteria

- Evaluation or scoring.
- Automated decision-making with legal or similar significant effect.
- Systematic monitoring.
- Sensitive data or data of a highly personal nature.
- Data processing/profiling on a large scale.
- Matching or combining datasets.
- Data concerning vulnerable data subjects.
- Innovative use or applying new technological or organisational solutions.
- Preventing data subjects from exercising a right or using a service or contract.
- Invisible processing.
- Risk of physical harm.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

Not all organisations are required to have a Data Protection Officer (DPO). This is determined by the type of organisation and core activities. The most common reason for organisations providing digital health technologies to have a DPO is due to the core activities involving processing health data (being a special category).

Response Type

Yes/No

Answer Criteria

The Information Commissioner has a self-assessment tool to determine whether you must appoint a DPO.

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

See ICO link for when a DPIA is needed. A DPIA is likely if at least 2 scenarios are present. Examples below (not exhaustive).

- When personal or sensitive data is processed
- If data processing may lead to high risk
- If automated profiling is involved
- High scale processing
- Processing data of vulnerable individuals.

Also refer to questions
ORC_ERC_EDC_DPA01
ORC_ERC_EDC_DPA02
ORC_ERC_EDC_DPA03
ORC_ERC_EDC_DPA04

Response Type

Yes/No

Answer Criteria

N/A

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

This question is needed as the following questions look to identify if the DPIA is accurate and robust.

Response Type

Yes/No

Answer Criteria

N/A

Logic

There is no disablement logic written for this question.

Scoring Impact

There is no scoring impact associated with this question.

Guidance/Context

N/A

Response Type

Yes/No

Answer Criteria

N/A

Logic

There is no disablement logic written for this question.

Scoring Impact

Exceptional risk applied if answered no.

Guidance/Context

Necessary qualities would be that the DPOs must have a strong understanding of data protection law and regulatory requirements.

Response Type

Yes/No

Answer Criteria

N/A

Logic

There is no disablement logic written for this question.

Scoring Impact

Exceptional risk applied if answered no.

Guidance/Context

The DPO shouldn’t assume any other role in the organisation, other than that of Data Protection Officer. In this case, we may need to recommend that the DPO is a full time role, and to reconsider job titles.

Response Type

Yes/No

Answer Criteria

N/A

Logic

There is no disablement logic written for this question.

Scoring Impact

Exceptional risk applied if answered no.

Guidance/Context

Within a DPIA it would be expected that details of a DPO are shown to demonstrate they have the relevant credentials.

Response Type

Yes/No

Answer Criteria

N/A

Logic

There is no disablement logic written for this question.

Scoring Impact

Exceptional risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the nature of the processing..

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details how data is collected about individuals, for example, input directly by the user, automatically collected, or from third party sources. This may be detailed in a data flow.

Logic

There is no disablement logic written for this question.

Scoring Impact
Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the nature of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details how the developer intends to store any data collected about an individual.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the purpose of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details the intended use for the collected data.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

This question is looking for clarity on who, internally, will have access to particular data, rather than naming organisations, where it is unclear who is a processor or controller. Addressing this question ensures that the DPIA is appropriate and robust surrounding the nature of processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details who will have access to the data collected.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

This question is looking for clarity on who, externally will have access to particular data. Addressing this question ensures that the DPIA is appropriate and robust surrounding the nature of processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details any third parties with whom individual’s data will be shared, as well as internally.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the nature of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA detail the developer’s use of any processors.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the nature of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details the developer’s own retention periods.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the scope of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details the retention periods of all third party recipients of individual’s data.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the nature of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details how data is protected, eg. physical or electronical protection, who as access to data etc. Ideally this would be detail of procedures which have been put in place internally, such as staff training or limited access.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

Innovative technology concerns new developments in technological knowledge in the world at large, rather than technology that is new to an individual, and its use can trigger the need to carry out a DPIA. This is because using such technology can involve novel forms of data collection and use, possibly with a high risk to individuals’ rights and freedoms. The personal and social consequences of deploying a new technology may be unknown, and a DPIA can help the controller to understand a control such risks.

Examples of processing using innovative technology include: artificial intelligence, machine learning and deep learning; connected and autonomous vehicles; intelligent transport systems; smart technologies (including wearables); market research involving neuro-measurement (e.g. emotional response analysis and brain activity);some ‘internet of things’ applications, depending on the specific circumstances of the processing.

Response Type

Multiple Option

Answer Criteria

Yes if the DPIA details whether or not any new technologies are in use.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the nature of the processing.

Response Type

Multiple Option

Answer Criteria

Yes if the DPIA detail the developer’s use of any processors.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the nature of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA has identified any previous factors which may indicate likely high risk, and has flagged these in the DPIA.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

This question is looking to capture whether the above questions have all been covered and the DPIA is appropriately and completely described the nature of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA provides a detailed description of the intended processing of data, the scope and purpose of the processing, reasons for purposing, and how the data is collected and processed.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

The UK GDPR does not contain a definition of large-scale processing, but to decide whether processing is on a large scale you should consider:
- the number of individuals concerned;
- the volume of data;
- the variety of data;
- the duration of the processing; and
- the geographical extent of the processing.

Examples of large-scale processing include:
- a hospital (but not an individual doctor) processing patient data;
- tracking individuals using a city’s public transport system;
- a fast food chain tracking real-time location of its customers;
- an insurance company or bank processing customer data;
- a search engine processing data for behavioural advertising; or
- a telephone or internet service provider processing user data.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details how many individuals are subject to data processing, and the variety of the data which is processed.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the scope of the processing.

Response Type

Yes/No

Answer Criteria

Yes if any sensitive information is processed, and this is detailed within the DPIA.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

Frequency cannot depend on the user keeping information up to date. It needs to be explicitly clear that processing will only occur when the user updates the info/adds an entry. The developer should therefore indicate how frequently each processing activity will be carried out.

The extent may be covered by the responses for the nature of the data collected and the processing purposes.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details the geographical extent of processing, and the frequency of processing. This comes under the scope of processing.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the scope of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details the intended duration of any processing activities, or details any commitment to data minimisation principles, such as keeping data no longer than necessary, and removing data correctly. This covers the duration that processing occurs, and is different to the retention period. This comes under the scope of processing.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the scope of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details a definitive number, or indicates the number of individuals involved in data processing.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the scope of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA provides detail of the geographical area covered by the processing activities. This comes under the scope of processing. Spatial data is any data with a direct or indirect reference to a specific location or geographical area. Spatial data is often referred to as geospatial data or geographic information.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the context of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details all sources where a developer may collect an individual’s data from, eg. directly from the user, or from third parties. This is to determine the context of processing.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the context of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details the relationship between the developer and the user of the app or product. Yes if the DPIA details that users are informed of data processing, for what purpose, and who with. This is to determine the context of processing.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the context of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details how far individuals have control over their data, specifically if it details how they can exercise control over their user rights.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the context of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details how far individuals can expect the processing of their data to occur. This is to determine the context of processing.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

Individuals can be vulnerable where circumstances may restrict their ability to freely consent or object to the processing of their personal data, or to understand its implications.

Most obviously, children are regarded as vulnerable to the processing of their personal data since they may be less able to understand how their data is being used, anticipate how this might affect them, and protect themselves against any unwanted consequences. This can also be true of other vulnerable sections of the population such as elderly people, or those with certain disabilities.

Even if the individuals concerned are not part of a group that would automatically be consider vulnerable, an imbalance of power in their relationship with the data controller can cause vulnerability for data protection purposes if individuals believe that they will be disadvantaged if the processing doesn’t go ahead.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA outlines whether the data subjects are likely to be children or other vulnerable individuals. The use of the personal data of children or other vulnerable individuals for marketing purposes, profiling or other automated decision-making, or if you intend to offer online services directly to children - this is likely to result in high risk.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the context of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details any previous experience the developer has, of this type of processing. Only relevant if there are new, innovative or unique means of processing.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the context of the processing.

Response Type

Multiple Options

Answer Criteria

Yes if the DPIA details any relevant advances in the technology and/or security used in the processing.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the context of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details any current issues of public concern regarding the processing.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the context of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details compliance with UK GDPR codes of conduct, or any other UK certification schemes for example ISO, CE etc.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the context of the processing.

Response Type

Yes/No

Answer Criteria

N/A

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the purpose of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details the developer’s legitimate interests.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the purpose of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details any of the 6 accepted lawful/legal bases upon which the developer relies:

The lawful bases for processing are set out in Article 6 of the UK GDPR. At least one of these must apply whenever you process personal data:

(a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose.

(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.

(c) Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations).

(d) Vital interests: the processing is necessary to protect someone’s life.

(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

(f) Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks.)

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the purpose of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details the intended outcome of the data processing.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

A key step of writing a DPIA is to describe the processing that will be undertaken. This must include the nature, scope, context and purposes of processing. Addressing this questions ensures that the DPIA is appropriate and robust surrounding the purpose of the processing.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details the expected benefits of processing, for them or for society as a whole.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

Developers should seek and document the views of individuals (or their representatives) unless there is a good reason not to. See Step 3: Do we need to consult individuals?

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details whether the view of individuals (or their representatives) have been sought and documented - if this has not happened, the DPIA should then detail why not.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

In most cases it should be possible to consult individuals in some form. However, if developers decide this is not appropriate, you should record this decision as part of your DPIA, with a clear explanation. For example it may compromise security. See Step 3: Do we need to consult individuals?

Response Type

Yes/No

Answer Criteria

N/A

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

If developers use a data processor, there may be need to ask them for information and assistance. See Step 3: Do we need to consult anyone else?

Response Type

Multiple Options

Answer Criteria

Yes if the DPIA details any consultation with any third party processors.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

Developers should consult all relevant internal stakeholders, in particular anyone with responsibility for information security.

Response Type

Yes/No

Answer Criteria

Yes if the DPIA provides details of any consultation with relevant internal stakeholders. In particular, we would like to see evidence of consulting anyone with a responsibility toward Information Security / Information Governance.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.

Guidance/Context

It is recommend that seeking legal advice or advice from other independent experts such as IT experts, sociologists or ethicists where appropriate. However, there are no specific requirements to do so

Response Type

Yes/No

Answer Criteria

Yes if the DPIA details any advice from other independent experts.
The ICO recommends developers consider seeking legal advice or advice from other independent experts such as IT experts, sociologists or ethicists where appropriate. However, there are no specific requirements to do so.

Logic

There is no disablement logic written for this question.

Scoring Impact

Low risk applied if answered no.