This privacy impact assessment (PIA) provides an overarching, systematic evaluation of privacy and other risks associated with integrating data into the Integrated Data Infrastructure (IDI), and how these risks are being managed. This PIA also summarises some of the expected benefits of the IDI.

The IDI integrates data from various agencies. Four key privacy risks have been identified for this data integration. These are:

• individuals being re-identified in the data
• unfavourable public perception of the data integration
• inability to maintain data security
• data being used for non-approved purposes.

The procedures in place to mitigate the identified risks include the:

• application of the 'five safes' framework
• removal of unique identifying information from the datasets researchers can access
• strict confidentiality checking of the output of analysis
• stringent application process that researchers must follow to gain access to the IDI data, including the need to:

1. seek ethics approval for all projects wanting to access health data
2. meet strict access protocols in order to access the IDI data o demonstrate that the proposed research has a statistical purpose and is for the public good.
3. meet strict access protocols in order to access the IDI data o demonstrate that the proposed research has a statistical purpose and is for the public good.

Concludes that the public benefits of the proposed data integration outweigh the potential privacy concerns. Well-established processes are in place to mitigate the risks identified, and these will continue to be reviewed and updated.