DPIAs built for the sensitive information you handle every day
For care homes, home care, clinics and other health and care providers. Health records, mental capacity, confidentiality and cameras in care settings, assessed properly and recorded clearly.
Health information carries the highest risk, and the closest scrutiny
Care records, medication, safeguarding and family contacts are some of the most sensitive information there is. Commissioners, inspectors and the ICO expect to see that you have assessed the risks before you introduce a new system, camera or way of working. DPOHub turns those expectations into clear questions, with the risk calculated for you.
Everything a care provider needs to get DPIAs right
| Feature | Benefit |
|---|---|
| Health and care DPIA opens automatically whenever health information is involved | Health data gets the extra scrutiny it needs |
| Caldicott Principles and duty of confidentiality questions | Matches what commissioners and inspectors expect |
| Data Security and Protection Toolkit questions (England), with notes for other UK nations | Your DPIA and your toolkit evidence tell the same story |
| Mental capacity, best interests and representative checks | Protects the people who cannot speak for themselves |
| Sharing with GPs, hospitals, councils and families | Share what is needed, safely, and record why |
| CCTV DPIA for care settings | Cameras in communal areas done right, with residents' dignity protected |
| Staff health and wellbeing activities covered too | One tool for residents, patients and staff |
| Health and care columns completed in your ROPA | Your records register fills in as you go |
| Every company activity template included | HR, payroll, suppliers and marketing covered as well |
Start from a ready-made template
People you support
Care and support records, bookings and appointments, complaints, feedback and surveys.
Premises and safety
CCTV and video recording, door entry, visitors and reception, accidents.
Staff
Safer recruitment, absence and occupational health, staff health and safety, staff monitoring.
Legal and compliance
Requests from people about their data, personal data breaches, regulatory reporting and inspections.
...and more. 62 templates in total.
Add-on DPIAs that open when needed
Health and care DPIA
Opens whenever health or care information is involved. Covers confidentiality, the Caldicott Principles, capacity and consent, sharing, and security.
CCTV DPIA
Opens when cameras are involved. Covers communal areas, bedrooms and private spaces, audio, signs and access to footage.
Three steps from activity to signed-off DPIA
Pick an activity
Start from one of our templates, such as payroll, CCTV, school admissions or council tax. Your organisation profile fills in the systems, security and policies you use everywhere.
Answer the screening
Part 1 checks the legal triggers and tells you the route: no DPIA, a Short DPIA or a Full DPIA. Each question uses the data protection term, explains it in plain English and gives the law behind it.
Get your outputs
DPOHub calculates the risks, lists the actions, and produces your DPIA report, any add-on DPIAs and your ROPA row, ready for sign-off.
Your data never leaves your organisation
DPOHub DPIA runs entirely in your web browser. Nothing you type is sent to DPOHub or anyone else. You keep your work as project files in your own OneDrive or SharePoint.
- No accounts, no cookies, no analytics
- Optional password protection with strong (AES-256) encryption
- Licensed to your organisation and hosted by you
- Works in Edge, Chrome, Firefox and Safari, on desktop, tablet and phone
Frequently asked questions
Is this suitable for a small care home?
Yes. Quick mode and ready-made templates keep low-risk activities short, so you spend your time on the ones that matter.
Does it cover cameras in residents' rooms?
Yes. The CCTV DPIA asks the extra questions for private spaces, including consent, capacity and best interests.
Does it replace the Data Security and Protection Toolkit?
No. It helps you produce the DPIA evidence the toolkit asks for.
Who should sign off a health DPIA?
Your Caldicott Guardian or senior lead, and your DPO. If you have a DPO, they will access this. If you do not, DPOHub can help: contact consult@dpohub.co.uk
Is resident data sent to DPOHub?
No. Everything stays on your own systems.
Protect the people in your care, and show you have
See how DPOHub DPIA works for your organisation in a 20-minute demo.
Advice only. DPOHub DPIA and its results are guidance, not legal advice. Every organisation and every situation can be different, so check the answers and results before you rely on them, and ask your DPO. If you have a DPO, they will access this. If you do not, DPOHub can help: contact consult@dpohub.co.uk