...
| Item | Question | Comment | Owner |
|---|---|---|---|
| 1 | Technically as it isn't a 'public facing' service does it need one? Would it be good practice to include on anyway for Learners confidence in the system? Or is it superceded by HEE IG terms? | Ray Hill (Unlicensed) | |
| 2 | Is there a need to consider different user groups - HEE staff, Trainees, Trusts, Trainers etc who will have different legal relationships to HEE and TIS? | Trainees will be public facing I believe whille the rest of the users over N3? | Ray Hill (Unlicensed) |
| 3 | Should it have a Terms and Conditions of Use either implicitly by logging in or first time consent on user registration or first login? | There may not be registration on TIS. | Ray Hill (Unlicensed) |
| 4 | Is a cookie policy required? | Temporary session cookie only to enable section of the site to be used and navigated or persistant cookies? Or persistant cookie until the time set expires or the user deletes the cookie? | Ray Hill (Unlicensed) |
| 5 | Is a Disclaimer/Privacy Policy required? Is so for which users? | This is more about the data collected and how they are processed by TIS. | Ray Hill (Unlicensed) |
| 6 | Do we need to consider a link for 'Terms & Conditions of Use' visible and accessible all time on the TIS? | Ray Hill (Unlicensed) | |
| 8 | Consideration for GDPR (May 2018) and therefore seek guidance on Information Governance (Andrew Todd)? | Ray Hill (Unlicensed) | |
...
- HEE Privacy and Cookie Policy: https://www.hee.nhs.uk/about-us/contact-us/privacy-cookies
- Intrepid
- Oriel
Next steps:
- Discuss with Ray Hill on the above questions and agree the next steps.
- User Journeys to get to the relevant privacy notice pages and cookie policy
- Decide on the content of the cookie policy and the relevant page and create draft.
...