Describe the information flows The collection, use and deletion of personal data must be documented.

Does any data flow in identifiable form?  If so, from which organisation, and to which organisation/s?

 

 

 

 

Please include a data flow map and confirm the flow has been added to your organisation’s Information Asset and Data flow register.

Data is added to the Tempo GP networks system by Practice Users and Practice Manager.

 

Practice Users register and enter their personal information on The System.

What media will you use for the data flow?

(e.g. email, post, courier, encrypted hard drive, secure electronic means [e.g. SFTP], other – please specify all that will be used)

All data is always transmitted over secure protocol (HTTPS). User data is stored in a Cloudways MySQL database which has a password and IP whitelist*, accessed over SSH.