In this health screening process, the worker is the data subject, CWHT is the data controller and Cushla, as the digital health screening management system provider, is the data processor. As controller, CWHT (nurse) is entering data onto the small leaflet which is given to the worker and therefore not retained (no data storage).
CWHT (nurse) is also entering the lifestyle details and screening test results into the digital health screening portal which is shared with the worker to their PEHR. Both the health details and the worker PEHR are secured in the Cushla application. This is a secure cloud-based platform with appropriate security controls to mitigate data loss.
All health screening reports are anonymised. Only where the worker has consented to being contacted by CWHT will contact be made. At all times, the worker has the ability to remove consent to share their data within the CWHT/Cushla PHER app.