Right, let's talk about keeping sensitive medical info under wraps. Designating a Medical Reviewer is key for compliance and privacy.
This role is crucial: it controls who gets to see the raw clinical answers from medical questionnaires. Everyone else – your standard managers and TMs – will only ever see the outcome: 'fit,' 'fit with adjustments,' 'needs review,' or 'not fit.' This setup aligns perfectly with ICO guidance on worker health information, so you're always on the right side of data protection.
Adding or Removing a Reviewer
Adding or removing a reviewer is straightforward:
- Head over to Users.
- Find the person you need. This is usually your Health & Safety lead, an HR colleague, or an external occupational-health provider you've already given a login to.
- In their row, you'll see a checkbox. Tick (or untick) the "Medical reviewer" box.
- Hit Save. Just so you know, this change gets logged straight to the audit trail – handy for proving compliance.
A Couple of Quick Points
- Heads up: When the first orgAdmin enables Tier B or C, they're automatically granted this flag. We do this to ensure the system never starts up in a state where nobody can actually review medical info.
- Quick one: You can't remove the last Medical Reviewer. You'll need to designate a replacement first before you can take the flag away from someone.
Keeping sensitive data compliant is a breeze when DDIR handles the heavy lifting.