| Field | Notes |
|---|---|
| Date discovered | |
| What happened | |
| Data involved | health screening forms, injury notes, emergency contacts, progress notes, photos, goals, session records, invoices, and messages. |
| People affected | |
| Immediate action taken | |
| Risk decision | Is there a risk to people? Was ICO reporting considered? |
| Outcome | |
| Prevention | What document, process, supplier, access, or training change is needed? |