| Field | Notes |
|---|---|
| Date discovered | |
| What happened | |
| Data involved | special category health information, clinical or treatment notes, home visit access details, appointment records, images, referral notes, invoices, and communication records. |
| People affected | |
| Immediate action taken | |
| Risk decision | Is there a risk to people? Was ICO reporting considered? |
| Outcome | |
| Prevention | What document, process, supplier, access, or training change is needed? |