Data Protection Impact Assessment (Summary)

A Data Protection Impact Assessment (DPIA) is carried out because Consenta processes health data — a special category under UK GDPR — at scale. This summary describes the processing, the risks identified and the measures in place to reduce them. The full DPIA is maintained internally and reviewed regularly.

• Raw clinical data is processed only inside the providing organisation’s own environment (the Edge Node). It never moves onto the Consenta platform.
• The Edge Node matches patient consent, removes direct identifiers, generalises quasi-identifiers and computes a re-identification risk score.
• Only anonymised snapshots and non-identifying integrity proofs are published to Consenta and made available to approved buyers.

• Re-identification risk — mitigated by k-anonymity and l-diversity guarantees, generalisation, suppression, an acceptable-risk threshold and a mandatory review/quarantine stage before any dataset is approved.
• Processing without a lawful basis — mitigated by explicit, granular, withdrawable patient consent recorded per cohort and purpose.
• Unauthorised access — mitigated by role-based access control, encrypted storage, sign-in rate limiting, account lockout and a full audit trail.
• Loss of individual rights — mitigated by self-service data export (right of access) and erasure (right to be forgotten) for patients.

This DPIA is reviewed whenever there is a material change to the processing, and at least annually. Questions can be directed to our data protection contact at [email protected].