Prototype privacy position
This portfolio should not collect patient data or sensitive health information. Any future production form requires a documented lawful basis, data minimisation, retention controls, processor review and accurate privacy disclosures.
