Send a Confidentiality Declaration to an Assigned Driver

Before a driver receives any information about the peer mentor's contact (name, address, health context), they must sign a confidentiality declaration. The coordinator triggers the sending of this declaration from within the assignment detail. The declaration is encrypted in transit and stored securely. The coordinator sees real-time status of whether the declaration has been sent, opened, and acknowledged. This workflow is mandatory for all driver assignments at Blindeforbundet.

CRITICAL story-driver-administration-and-confidentiality-declarations-coordinator-002 8 pts

Story Points

Critical

Priority

Driver Administration and Confidentiality Declarations

Feature

User Story

As a Coordinator

I want to send a confidentiality declaration to a driver once they have been assigned to a peer mentor assignment so that they formally agree to protect sensitive personal information before receiving assignment details

So that the organization complies with data protection requirements and drivers cannot access contact details without legally binding consent

Acceptance Criteria

Given an assignment has a driver assigned, when the coordinator taps 'Send Declaration', then a pre-filled declaration is sent to the driver via the configured notification channel (push notification or SMS)
Given the declaration has been sent, when the coordinator views the assignment, then a status badge shows 'Sent' with the timestamp
Given the driver opens the declaration, when the system receives an open confirmation, then the status badge updates to 'Opened'
Given the declaration content includes sensitive assignment details, when it is sent, then the content is encrypted using the declaration encryption service so it cannot be read in transit
Given the coordinator attempts to send a declaration to a driver without a valid template configured, when they tap Send, then an error message explains that no declaration template is available and prompts them to contact the system administrator

Business Value

Handling encrypted, personally identifiable information about visually impaired contacts is a legal and ethical requirement under Norwegian privacy law (GDPR). Without a digital declaration workflow, Blindeforbundet currently relies on paper forms which cannot be tracked, cannot be confirmed as received, and create administrative overhead. Digitizing this eliminates compliance risk and provides an auditable record for every driver engagement.

Components

Confidentiality Declaration Send Screen ui
Confidentiality Declaration Management Service service
Declaration Delivery Notification Service service
Declaration Encryption Service service
Confidentiality Declaration Repository data
Declaration Template Repository data
Declaration Supabase Storage Adapter data
Declaration Audit Logger infrastructure
Declaration Status Badge ui

Dependencies

Assign a Driver to a Peer Mentor Assignment high

Driver Administration and Confidentiality Declarations

Related Feature

Coordinator

User Role