At Patient Watch, our data strategy is centered on two key principles: Data Minimization and Access Controls.

We prioritize collecting only the necessary personal data to fulfill our purpose, reducing any associated risks. Simultaneously, we implement role-based access controls, ensuring that patient data access is tailored to specific user roles. This dual approach enables us to secure and GDPR compliant data environment, reinforcing the trust and confidentiality of the information we handle.

1. Data Minimization: - Collect and process only the minimum amount of personal data necessary for the intended purpose, reducing the risk associated with handling excessive or irrelevant information.
2. Data Encryption: - Encrypt all data transmitted between the web app and servers using state-of-the-art encryption protocols to ensure confidentiality during transmission.
3. Access Controls: - Implement role-based access controls to restrict access to patient data based on user roles, enhancing overall data security.

Access to a Patient Diary

The follow data is collected from patients in electronic diaries within the app. All information is used to improve the standard of patient care.

	Patient	Clinician	Admin
Comments	Edit	View	Edit*
Photos	Edit	View	Edit*
Pain Scores	Edit	View	Edit*
Clinical Actions	View	Edit	View*

• In special circumstances, an administrator could be given access to view or edit a diary on behalf of the provider.

Personal Data Stored by Patient Watch

To minimise collection, different users must provide different data. If data is collected it is for one of the following reasons:

1. Improve app experience (e.g. Phone number for sending SMS diary reminders)
2. Enable audit/research.

Data	Clinician	Patient
Name	1	1
Email	1	1
Phone Number	-	1
GMC	1	-
NHS Number	-	1
Hospital Number	-	1
Date of Birth	-	1
Time Zone	1	1
Patient Images	2	1
Patient Pain Scores	2	1
Patient Blood Results	2	1

Diaries linked to providers and patients contain additional data required for staff decisions and audit/research purposes.

---

For any inquiries or concerns, contact us at info@patient-watch.com.