Appendix: Risks from personal data exposure and how harms can be mitigated

Below are examples of potentially harmful impacts to people, organisations and society, and mitigating actions that could be taken.

Wellbeing/ safety/ autonomy

Stakeholder impacted

Individuals

Type of risk

Wellbeing/ safety/ autonomy

Potentially harmful impact(s)

• Denied service based on health data

• Discriminated against or stigmatised

• Publicly exposed/ attacked

Potential mitigating actions

• Validate data input

• Data anonymisation

• Use synthetic data

Data breach

Brand reputation and loss of trust

Inequitable value distribution