DDPO and REC Pilot

The Beaumont Hospital Deputy Data Protection Officer (DDPO) and Research Ethics Committee (REC) have been pilotting joint and parallel review of research Data Protection Impact Assessments (DPIAs) and applications for research ethics approval since January 2020. This pilot forms an important part in data governance processes for health research in the hospital.

These draft DDPO-REC Pilot Appendices (May 2021) represent knowledge gained to date.

Latest Progress on Pilot
  • The DPIA for Research and Clinical Trials was updated by the DDPO in August 2021 - see here
  • A Checklist for researchers to self-assess data subject rights was released by the DDPO in August 2021 - see here
  • Guidance for the REC on when to refer a study to the DPO was finalised by the REC and the DDPO in September 2021 - see When should BH REC refer a study?
  • and:
  • 'Step by Step Guides' for Researchers are currently under development - researchers will need to identify the data controller as the first step in each of these guides - see challenges in identifying data controllers...
  • Links to online Training material in GDPR suitable for health researchers have also been made available - see GDPR and Health Data

Ultimate responsibility for completion of the DPIA rests with the researcher who needs to retain and maintain a copy of the most up to date DPIA and make available to the DDPO, DPO or Data Protection Commission (DPC) on request.

GDPR allows Data Protection Officers to provide advice and feedback on DPIAs where this is requested.

DPIAs need to be kept under review - see DPIA review...