There are a number of options based on other partner approaches that you may wish to take when it comes to developing a privacy notice.
One key consideration is whether you will redact any identifiable information that may be shared in free text boxes within an anonymous report. There are two different approaches that we have seen across our partner base:
- Including information that identifiable information will be kept confidential on the system in accordance with the organisation’s retention schedule, to inform prevention but also effectively address risk if there are multiple anonymous or identifiable reports in a particular area, or against an individual.
- Alternatively, the organisation may wish to redact information that is provided within free text boxes. This information is permanently deleted from the system and cannot be recovered.