Skip to main content

Class Three: What our priorities are and how we are doing

Class three includes information on: 

Annual report
Annual business plan, including commissioning 
Targets, aims and objectives 

Information about our Targets, aims and objectives will be published here 

Strategic direction document (3 year plan) 
Performance against targets/ key performance indicators (KPI)/ performance management information
Quality and safety reports
Structured assessment and standards for healthcare service in Wales
Annual quality statement
Caldicott Principles in Practice (C-PIP)
This report is presented to the Digital and Information Governance Committee

Caldicott assessments and improvement plan

This report is presented to the Digital and Information Governance Committee

Audit reports
These reports are presented to the Audit Committee

Service user surveys

Comments, suggestions and feedback

Data Protection Impact Assessments (DPIAs) 

A DPIA is a tool which helps identify and minimise the data protection risks of a project. It is a statutory requirement for processing that is likely to result in a high risk to individuals. This includes some specified types of processing. DPIAs are an integral part of taking a privacy by design approach. 

An effective DPIA will allow organisations to identify and fix problems at an early stage, reducing the associated costs and damage to reputation, which might otherwise occur.  

The Information Commissioner's Office (ICO), which is the UK regulator for Data Protection legislation, encourages organisations to ensure that privacy and data protection is a key consideration in the early stages of any project, and then throughout its lifecycle. For example when:

  • building new or upgrading existing IT systems for storing or accessing personal data;

  • developing legislation, policy or strategies that have privacy implications;

  • embarking on a data sharing initiative; or

  • using data for new purposes.