Security and governance
GDPR roles and health data in digital assessments
A practical way to map controller, processor, and joint-controller responsibilities when a clinic digitises psychometric assessment work.
Knowledge cluster
Security, privacy, and governance
Operational guidance for health-data roles, DPIAs, least privilege, auditability, supplier assurance, and shared responsibility.
What evidence helps a clinic govern sensitive assessment data with proportionate controls?
Security and governance
A practical DPIA for psychometric assessments
A step-by-step DPIA method for identifying and reducing privacy risks before introducing or materially changing a digital assessment process.
Security and governance
Least privilege, auditability, and secure API boundaries
How to turn least privilege and auditability into testable controls across users, services, exports, APIs, and support access.
Security and governance
Build a healthcare SaaS security evidence pack
A buyer-oriented structure for collecting current, scoped, and decision-useful security evidence from a healthcare software supplier.