Data Protection
Overview
Ready for the SCA is designed for UK GP training programmes and operated in line with UK GDPR principles. It supports mock SCA delivery, assessment feedback, trainee review and optional recorded debrief workflows.
Roles and responsibilities
GP training programmes act as Data Controllers and decide why and how personal data is used. Ready for the SCA acts as a Data Processor and processes data on controller instructions.
Data handling
Organisations manage their own users and access. Role-based permissions are applied for organisation admins, examiners, trainees and actors. Data is logically separated by organisation to support programme-level privacy and governance.
Assessment and feedback data
Assessment data, including scores, narratives and feedback records, is stored securely and used only for training and assessment purposes within the programme context.
Video recordings
Recording is an optional feature controlled by the organisation. Organisations are responsible for obtaining and documenting appropriate consent where required. Recordings are used for debrief and training only.
Data location
Data is stored using Google Cloud infrastructure in appropriate UK or EU regional data centres, in line with controller requirements and configured service regions.
Retention and deletion
Retention periods are set by each organisation as Data Controller. Data can be deleted on request under controller policy and instruction.
Agreements
Data processing agreements are available on request for organisations using the platform.