Privacy policy
Last updated: TODO: confirm publication date with IHCPL. This is placeholder content pending final legal review by IHCPL.
Legal basis for processing
Where ACI processes special category health data, IHCPL relies on the UK GDPR Article 9(2)(h) legal basis (health and social care purposes). TODO: confirm the full legal basis statement and applicable jurisdictions with IHCPL legal counsel before publishing.
Data Protection Impact Assessment
A DPIA covering ACI's processing activities is in progress. TODO: link the completed DPIA summary here once finalised.
Data retention & security
TODO: confirm retention periods, hosting jurisdiction, and security controls with IHCPL's technical and legal teams before publishing.
Your rights
TODO: confirm the data subject rights process (access, correction, erasure) and the designated contact for exercising them.