PRMDR-608 Privacy Policy (#269)

Add legal privacy policy page

app/src/components/layout/Layout.tsx

@@ -1,8 +1,8 @@
 import React from 'react';
 import type { ReactNode } from 'react';
 import Header from './header/Header';
-import { Footer } from 'nhsuk-react-components';
 import PhaseBanner from './phaseBanner/PhaseBanner';
+import Footer from './footer/Footer';
 
 type Props = {
     children: ReactNode;
@@ -28,9 +28,7 @@ function Layout({ children }: Props) {
                     </section>
                 </main>
             </div>
-            <Footer>
-                <Footer.Copyright>&copy; {'Crown copyright'}</Footer.Copyright>
-            </Footer>
+            <Footer />
         </div>
     );
 }

app/src/components/layout/footer/Footer.test.tsx

@@ -0,0 +1,25 @@
+import { render, screen } from '@testing-library/react';
+import Footer from './Footer';
+import { routes } from '../../../types/generic/routes';
+
+describe('Footer', () => {
+    describe('Rendering', () => {
+        it('renders privacy policy link', () => {
+            render(<Footer />);
+            expect(screen.getByTestId('privacy-link')).toBeInTheDocument();
+        });
+    });
+
+    describe('Navigation', () => {
+        it('navigates to privacy policy when link is clicked', () => {
+            render(<Footer />);
+            expect(screen.getByTestId('privacy-link')).toBeInTheDocument();
+            expect(screen.getByTestId('privacy-link')).toHaveAttribute(
+                'href',
+                routes.PRIVACY_POLICY,
+            );
+            expect(screen.getByTestId('privacy-link')).toHaveAttribute('rel', 'opener');
+            expect(screen.getByTestId('privacy-link')).toHaveAttribute('target', '_blank');
+        });
+    });
+});

app/src/components/layout/footer/Footer.tsx

@@ -0,0 +1,23 @@
+import React from 'react';
+import { Footer as NHSFooter } from 'nhsuk-react-components';
+import { routes } from '../../../types/generic/routes';
+
+function Footer() {
+    return (
+        <NHSFooter>
+            <NHSFooter.List>
+                <NHSFooter.ListItem
+                    href={routes.PRIVACY_POLICY}
+                    data-testid="privacy-link"
+                    rel="opener"
+                    target="_blank"
+                >
+                    Privacy notice
+                </NHSFooter.ListItem>
+            </NHSFooter.List>
+            <NHSFooter.Copyright>&copy; {'Crown copyright'}</NHSFooter.Copyright>
+        </NHSFooter>
+    );
+}
+
+export default Footer;

app/src/pages/privacyPage/PrivacyPage.test.tsx

@@ -0,0 +1,114 @@
+import { LinkProps } from 'react-router-dom';
+import useRole from '../../helpers/hooks/useRole';
+import { render, screen, waitFor } from '@testing-library/react';
+import PrivacyPage from './PrivacyPage';
+import { REPOSITORY_ROLE } from '../../types/generic/authRole';
+import userEvent from '@testing-library/user-event';
+import { act } from 'react-dom/test-utils';
+import { routes } from '../../types/generic/routes';
+const mockedUseNavigate = jest.fn();
+jest.mock('../../helpers/hooks/useRole');
+const mockedUseRole = useRole as jest.Mock;
+jest.mock('react-router-dom', () => ({
+    __esModule: true,
+    Link: (props: LinkProps) => <a {...props} role="link" />,
+    useNavigate: () => mockedUseNavigate,
+}));
+
+describe('PrivacyPage', () => {
+    beforeEach(() => {
+        process.env.REACT_APP_ENVIRONMENT = 'jest';
+        mockedUseRole.mockReturnValue(null);
+    });
+    afterEach(() => {
+        jest.clearAllMocks();
+    });
+
+    describe('Rendering', () => {
+        it('renders page headers', () => {
+            render(<PrivacyPage />);
+
+            const contentHeaders = [
+                'Privacy notice',
+                'What happens with my personal information?',
+                'Feedback form privacy notice',
+            ];
+            contentHeaders.forEach((str) => {
+                expect(screen.getByRole('heading', { name: str })).toBeInTheDocument();
+            });
+        });
+
+        it('renders legal privacy content', () => {
+            render(<PrivacyPage />);
+
+            const contentHeaders = [
+                /If you access the Lloyd George patient records digital service using your/i,
+                /credentials, your NHS Care Identity credentials are managed by NHS England/i,
+                /This means NHS England is the data controller for any personal information/i,
+                /that you provided to get NHS Care Identity credentials/i,
+                /NHS England uses this information only to verify your identity/i,
+                /When verifying your identity, our role is a "processor"/i,
+                /We must act under instructions provided by NHS England \(the "controller"\)/i,
+                /To find out more about NHS England's Privacy Notice/i,
+                /and its Terms and Conditions, view the/i,
+                /This only applies to information you provide through NHS England/i,
+                /When submitting your details using our/i,
+                /any personal information you give to us will be processed in accordance with the/i,
+                /We use the information you submitted to process your request and provide/i,
+                /relevant information or services you have requested/i,
+                /This will help support us in developing this service/i,
+            ];
+            contentHeaders.forEach((str) => {
+                expect(screen.getByText(str)).toBeInTheDocument();
+            });
+        });
+
+        it('renders public clickable links', () => {
+            render(<PrivacyPage />);
+            expect(screen.getByTestId('cis2-link')).toHaveAttribute(
+                'href',
+                'https://am.nhsidentity.spineservices.nhs.uk/openam/XUI/?realm=/#/',
+            );
+            expect(screen.getByTestId('cis2-service-link')).toHaveAttribute(
+                'href',
+                'https://digital.nhs.uk/services/care-identity-service',
+            );
+            expect(screen.getByTestId('gdpr-link')).toHaveAttribute(
+                'href',
+                'https://digital.nhs.uk/data-and-information/keeping-data-safe-and-benefitting-the-public/gdpr#:~:text=The%20GDPR%20came%20into%20effect,in%20line%20with%20the%20regulations',
+            );
+        });
+
+        it('does not render a clickable link for feedback form if user logged out', () => {
+            mockedUseRole.mockReturnValue(null);
+            render(<PrivacyPage />);
+            expect(screen.queryByTestId('feedback-link')).not.toHaveAttribute('href');
+            expect(screen.queryByTestId('feedback-link')).not.toHaveAttribute('to');
+        });
+
+        it('renders a clickable link for feedback form if user logged in', () => {
+            mockedUseRole.mockReturnValue(REPOSITORY_ROLE.GP_ADMIN);
+            render(<PrivacyPage />);
+            expect(screen.queryByTestId('feedback-link')).not.toHaveAttribute('href');
+            expect(screen.getByTestId('feedback-link')).toHaveAttribute('to', '#');
+        });
+        describe('Navigation', () => {
+            it('navigates to feedback form when link is clicked and user is logged in', async () => {
+                mockedUseRole.mockReturnValue(REPOSITORY_ROLE.GP_ADMIN);
+                render(<PrivacyPage />);
+                expect(screen.queryByTestId('feedback-link')).not.toHaveAttribute('href');
+                expect(screen.getByTestId('feedback-link')).toHaveAttribute('to', '#');
+                act(() => {
+                    userEvent.click(
+                        screen.getByRole('link', {
+                            name: 'feedback form',
+                        }),
+                    );
+                });
+                await waitFor(() => {
+                    expect(mockedUseNavigate).toHaveBeenCalledWith(routes.FEEDBACK);
+                });
+            });
+        });
+    });
+});

app/src/pages/privacyPage/PrivacyPage.tsx

@@ -0,0 +1,85 @@
+import React from 'react';
+import useRole from '../../helpers/hooks/useRole';
+import { routes } from '../../types/generic/routes';
+import { Link, useNavigate } from 'react-router-dom';
+
+function PrivacyPage() {
+    const isLoggedIn = !!useRole();
+    const navigate = useNavigate();
+    return (
+        <>
+            <h1>Privacy notice</h1>
+            <p>
+                If you access the Lloyd George patient records digital service using your{' '}
+                <a
+                    data-testid="cis2-link"
+                    target="_blank"
+                    href="https://am.nhsidentity.spineservices.nhs.uk/openam/XUI/?realm=/#/"
+                    rel="noreferrer"
+                >
+                    NHS Care Identity
+                </a>{' '}
+                credentials, your NHS Care Identity credentials are managed by NHS England.
+            </p>
+            <p>
+                This means NHS England is the data controller for any personal information that you
+                provided to get NHS Care Identity credentials.
+            </p>
+            <h4>What happens with my personal information?</h4>
+            <p>NHS England uses this information only to verify your identity.</p>
+            <p>
+                When verifying your identity, our role is a "processor". We must act under
+                instructions provided by NHS England (the "controller").
+            </p>
+            <p>
+                To find out more about NHS England's Privacy Notice and its Terms and Conditions,
+                view the{' '}
+                <a
+                    data-testid="cis2-service-link"
+                    target="_blank"
+                    href="https://digital.nhs.uk/services/care-identity-service"
+                    rel="noreferrer"
+                >
+                    NHS Care Identity Service
+                </a>{' '}
+                .
+            </p>
+            <p>This only applies to information you provide through NHS England.</p>
+            <h2>Feedback form privacy notice</h2>
+            <p>
+                When submitting your details using our{' '}
+                {isLoggedIn ? (
+                    <Link
+                        data-testid="feedback-link"
+                        to={'#'}
+                        onClick={(e) => {
+                            e.preventDefault();
+                            navigate(routes.FEEDBACK);
+                        }}
+                    >
+                        feedback form
+                    </Link>
+                ) : (
+                    <span data-testid="feedback-link">feedback form</span>
+                )}
+                , any personal information you give to us will be processed in accordance with the{' '}
+                <a
+                    data-testid="gdpr-link"
+                    target="_blank"
+                    href="https://digital.nhs.uk/data-and-information/keeping-data-safe-and-benefitting-the-public/gdpr#:~:text=The%20GDPR%20came%20into%20effect,in%20line%20with%20the%20regulations"
+                    rel="noreferrer"
+                >
+                    UK General Data Protection Regulation (GDPR) 2018
+                </a>{' '}
+                .
+            </p>
+            <p>
+                We use the information you submitted to process your request and provide relevant
+                information or services you have requested.
+            </p>
+            <p>This will help support us in developing this service.</p>
+        </>
+    );
+}
+
+export default PrivacyPage;

app/src/router/AppRouter.tsx

@@ -21,6 +21,7 @@ import HomePage from '../pages/homePage/HomePage';
 import UnauthorisedLoginPage from '../pages/unauthorisedLoginPage/UnauthorisedLoginPage';
 import FeedbackPage from '../pages/feedbackPage/FeedbackPage';
 import ServerErrorPage from '../pages/serverErrorPage/ServerErrorPage';
+import PrivacyPage from '../pages/privacyPage/PrivacyPage';
 
 const {
     START,
@@ -38,6 +39,7 @@ const {
     SEARCH_PATIENT,
     VERIFY_PATIENT,
     UPLOAD_DOCUMENTS,
+    PRIVACY_POLICY,
 } = routes;
 
 type Routes = {
@@ -74,6 +76,11 @@ export const routeMap: Routes = {
         page: <ServerErrorPage />,
         type: ROUTE_TYPE.PUBLIC,
     },
+    [PRIVACY_POLICY]: {
+        page: <PrivacyPage />,
+        type: ROUTE_TYPE.PUBLIC,
+    },
+
     // Auth guard routes
     [LOGOUT]: {
         page: <LogoutPage />,

app/src/types/generic/routes.ts

@@ -9,6 +9,7 @@ export enum routes {
     AUTH_ERROR = '/auth-error',
     UNAUTHORISED_LOGIN = '/unauthorised-login',
     SERVER_ERROR = '/server-error',
+    PRIVACY_POLICY = '/privacy-policy',
     LOGOUT = '/logout',
     FEEDBACK = '/feedback',
     SEARCH_PATIENT = '/search/patient',