Purpose: To document the minimum necessary access to personal confidential data (PCD) for each role across Veripath's platform, ensuring least-privilege principles are applied and auditable.
| Role | Authorised Systems / Data Stores | Access Level | Justification (Business Need) | Review Date | Reviewer |
|---|---|---|---|---|---|
| SYSTEM_ADMIN (Veripath) | Booking App DB, AES infra (portal, PKI, TSA, signer), Keycloak, Django Admin, server OS/logs | Write (config, patching, deployment); Read (logs, audit) | System maintenance, security patching, infrastructure management | Quarterly | SIRO / DPO |
| SIRO (Senior Information Risk Owner) | All systems (audit/review mode only) | Read (audit logs, access reports, Dashboards) | Information risk ownership, governance, breach investigation | Quarterly | CEO / Board |
| ADMIN (Veripath Superuser) | Django Admin, all application backends | Full CRUD (platform-wide) | Platform administration, support escalation | Quarterly | SIRO |
| ICB_ADMIN | Regional reporting, aggregate practice data | Read (aggregate/commercial data) | Regional oversight and commissioning | Quarterly | SIRO |
| BILLING_ADMIN | Accounts, Billing module | Read/Write (financial data) | Invoicing, contract management | Quarterly | SIRO |
| Role | Authorised Systems / Data Stores | Access Level | Justification (Business Need) | Review Date | Reviewer |
|---|---|---|---|---|---|
| CLINICIAN | GP Booking App (patient records, clinical notes, appointments), AES Portal | Read/Write (patient records); Write (sign prescriptions via AES) | Direct patient care, clinical decision-making, issuing prescriptions | Quarterly | Practice Manager |
| PRACTICE_MANAGER | GP Booking App (all practice data), Staff Management, Reporting, Onboarding | Read/Write (all practice data); Read (reports); Write (staff records) | Practice oversight, staff management, compliance | Quarterly | SIRO / DPO |
| RECEPTIONIST | GP Booking App (scheduling, demographics only) | Read (patient contact details, appointments); Write (appointments, demographics) | Booking appointments, patient registration, updating contact details | Quarterly | Practice Manager |
| Role | Authorised Systems / Data Stores | Access Level | Justification (Business Need) | Review Date | Reviewer |
|---|---|---|---|---|---|
| DENTAL_CLINICIAN | Dental Booking App (patient records, treatment notes), AES Portal | Read/Write (patient records); Write (sign prescriptions via AES) | Direct patient care, treatment planning, prescribing | Quarterly | Practice Manager |
| DENTAL_HYGIENIST | Dental Booking App (patient records, treatment notes) | Read/Write (own patients' records) | Patient treatment, hygiene therapy | Quarterly | Practice Manager |
| DENTAL_PRACTICE_MANAGER | Dental Booking App (all practice data), Staff Management | Read/Write (all practice data); Write (staff records) | Practice oversight, staff management | Quarterly | SIRO / DPO |
| DENTAL_ADMIN | Dental Booking App, Admin panel (practice-scoped) | Admin (practice-scoped); Read/Write (practice data) | Practice administration, configuration | Quarterly | Practice Manager |
| DENTAL_RECEPTIONIST | Dental Booking App (scheduling, demographics only) | Read (patient contact details, appointments); Write (appointments, demographics) | Booking appointments, patient registration | Quarterly | Practice Manager |
| Role | Authorised Systems / Data Stores | Access Level | Justification (Business Need) | Review Date | Reviewer |
|---|---|---|---|---|---|
| ORG_ADMIN / PARTNER_ADMIN | Partner management, Booking App (org-scoped) | Read/Write (org data, practice configuration) | Organisation administration, user management | Quarterly | SIRO |
| PARTNER_REGISTERED_MANAGER | Compliance dashboard, Staff records | Read (compliance data, staff qualifications) | CQC regulatory compliance, quality assurance | Quarterly | SIRO |
| PARTNER_NOMINATED_INDIVIDUAL | Compliance dashboard, Governance records | Read (compliance, governance data) | Legal accountability for regulated activities | Quarterly | SIRO |
| PARTNER_COMPLIANCE_OFFICER | Compliance dashboard, Audit logs, Data processing records | Read (compliance, audit, DPIA records) | Compliance monitoring, policy adherence | Quarterly | SIRO |
| PARTNER_CALDICOTT_GUARDIAN | Audit logs, Data processing records, Data sharing agreements | Read (audit, DPIA, data sharing) | Data protection governance, patient confidentiality oversight | Quarterly | SIRO |
| PARTNER_CLINICIAN | Booking App (org-scoped patient records), AES Portal | Read/Write (patient records); Write (sign prescriptions) | Direct patient care within partner organisation | Quarterly | Registered Manager |
| Role | Authorised Systems / Data Stores | Access Level | Justification (Business Need) | Review Date | Reviewer |
|---|---|---|---|---|---|
| PATIENT | Booking App (own records only) | Read (own appointments, records); Write (own appointments, demographics) | Self-service appointment booking, viewing own health information | N/A (self-managed) | DPO |
| Role | Authorised Systems / Data Stores | Access Level | Justification (Business Need) | Review Date | Reviewer |
|---|---|---|---|---|---|
| Third-Party Supplier (specify) | [System name] — limited to contracted services | Read (e.g., support tickets, system logs); No direct PCD access without executed DPA | Technical support, infrastructure hosting under Data Processing Agreement | Per contract | DPO / SIRO |
Notes on Third-Party Access:
| System | Purpose | Hosted | Data Classification |
|---|---|---|---|
| GP Booking App | Patient records, appointments, clinical data for GP practices | Veripath infrastructure | High (PCD) |
| Dental Booking App | Patient records, appointments, treatment notes for dental practices | Veripath infrastructure | High (PCD) |
| AES Portal (aes.veripath.co.uk) | Advanced Electronic Signature prescription signing; PAdES-B-LTA compliant | Veripath infrastructure | High (PCD in signed PDFs only; metadata only in DB) |
| Keycloak (auth.veripath.co.uk) | Single sign-on, authentication, organisation groups | Veripath infrastructure | Medium (identities, no clinical data) |
| Django Admin | Platform administration, user management | Veripath infrastructure | High (system-wide access) |
org_id).