Do you provide a DPIA pack?
Information governance usually decides when immersive training actually launches, so the DPIA pack is there to shorten that review rather than start it from nothing.
What the pack covers
The DPIA pack describes what personal data Node XR processes and why, for your information governance team to review. It comes pre-completed on the supplier side, so your team adapts it to your own use rather than writing it from a blank template.
Other documents you can request
- Data processing agreement (DPA)
- Architecture diagrams
- NHS DSPT evidence
- Confirmation in writing of current Cyber Essentials Plus scope
Decisions that stay with you
Under UK GDPR, a DPIA is the data controller's responsibility, which for staff or student training is normally your organisation. One decision worth making early is how long to keep gaze and motion data, which is more identifying than it looks. NHS teams can add an optional NHS DSPT Onboarding service (£1,500), which bundles with the standard onboarding workshop.