DPIA Screening Questions

 

The below screening questions should be used to find out if a DPIA is necessary.  

If you answer “Yes” to any of the questions below, it is an indication that a DPIA is required so please contact information.governance@york.gov.uk for advice and support on completing a DPIA

 

Please send your completed form to information.governance@york.gov.uk

 

Title/Reference

Procurement of APL

Brief description

The City Of York Council (the “Council”) is intending to identify Providers to be included as part of an Approved Provider List (“APL”). The APL will have an initial term of 3-years with an option to extend for up to a further 4-years (2-years, plus 2-years), leading to a maximum duration of 7-years. Service contracts awarded as call-off contracts from the APL will be up to a maximum 7-years in length, with initial periods, break points and potential extensions configured to balance the stability of care for service Providers and manage service Provider performance. This will help to inform efficiencies and enable the establishment of a legal agreements for these APL’s. The work will be undertaken on a phased approach until summer 2024, due to ongoing negotiations with supported living Providers.

Screening completed by

Name

Edward Njuguna

Job Title

Commissioning Manager

Department

All age commissioning and contracts

Email

    

Review date

Only if required when the APL IS approved and entering into arrangements with approved providers

Screening Questions – please answer the below questions for how you are planning to or already do use,  personal identifiable information eg  personal data, special categories of personal data or criminal offence and conviction data

Yes or No

1

Use systematic and extensive profiling or automated decision-making to make significant decisions about people.

N

2

Process special category data or criminal offence data on a large scale.

N

3

Systematically monitor a publicly accessible place on a large scale.

N

4

 Use new technologies, innovative technological or organisational solutions.

N

5

Use profiling, automated decision-making or special category data to help make decisions on someone’s access to a service, opportunity or benefit.

N

6

 Carry out profiling on a large scale including evaluation or scoring

N

7

Process biometric or genetic data.

N

8

Combine, compare or match data from multiple sources.

N

9

Process personal data without providing a privacy notice directly to the individual and/or other  processing involving preventing data subjects from exercising a right or using a service or contract.

N

10

Process personal data in a way which involves tracking individuals’ online or offline location or behaviour or other systematic monitoring

N

11

Process children’s personal data for profiling or automated decision-making or for marketing purposes, or offer online services directly to them.

N

12

Process personal data which could result in a risk of physical harm in the event of a security breach.

N