Digital Security and Confidentiality Audit - Supported Living

Q1 | Unanswered

Is there a digital security and data protection policy aligned with GDPR and the Data Protection Act 2018?

Q2 | Unanswered

Are staff trained in confidentiality, data protection, and secure handling of digital information?

Q3 | Unanswered

Are all devices used to access care records (phones, tablets, laptops) password-protected and encrypted?

Q4 | Unanswered

Are access rights to electronic records restricted to authorised staff only?

Q5 | Unanswered

Are paper records (if used) stored securely in locked or restricted-access areas?

Q6 | Unanswered

Are personal data shared only with appropriate consent or in line with legal requirements?

Q7 | Unanswered

Are care records regularly reviewed for accuracy, relevance, and data minimisation?

Q8 | Unanswered

Are electronic communication platforms (e.g., email, care systems, messaging apps) used in line with security protocols?

Q9 | Unanswered

Are data breaches or near misses reported promptly and investigated for learning?

Q10 | Unanswered

Is confidential information not shared via insecure platforms (e.g., personal email, WhatsApp)?

Q11 | Unanswered

Are service users’ consent preferences for data sharing documented and respected?

Q12 | Unanswered

Are staff aware of how to securely delete or dispose of digital or physical records?

Q13 | Unanswered

Are records backed up securely and regularly in line with service continuity plans?

Q14 | Unanswered

Are electronic systems updated with software patches and monitored for security vulnerabilities?

Q15 | Unanswered

Are care planning or scheduling apps reviewed for compliance and approved before use?

Q16 | Unanswered

Is there a policy for using digital devices in tenants’ homes (e.g., mobile phones, photos, remote log-ins)?

Q17 | Unanswered

Are service users supported to access their records or understand how their data is used?

Q18 | Unanswered

Are staff trained not to discuss confidential information in public areas or during shared travel?

Q19 | Unanswered

Are staff access rights revoked immediately when they leave the service or change roles?

Q20 | Unanswered

Are policies in place for the secure use of remote or hybrid working, including staff logging into care systems?

Q21 | Unanswered

Are CCTV (if used in shared areas or entrances) compliant with data protection and signage requirements?

Q22 | Unanswered

Are any digital tools or assistive technologies used with consent and documented appropriately?

Q23 | Unanswered

Is there a system to track and audit access to care records and sensitive data?

Q24 | Unanswered

Are confidentiality breaches used as learning examples and reported in governance processes?

Q25 | Unanswered

Is digital security included in risk assessments, audits, and quality reviews?