Who is responsible for obtaining consent?
Users of the application must obtain consent from the client before processing their details.
How is consent recorded?
Confirmation of consent is required via a checkbox before a case can be submitted. Users of the application are also required to provide the date when consent was granted.
What are my responsibilities as an administrating organisation?
The administrating organisation of the referral system must complete a DPIA if their instance of the referral system collects special category data (such as information relating to the client’s health, disability, sexuality, racial or ethnic origin etc.)
You can find more information about what classifies as special category data here.