---

GDPR goes live 25 May 2018 – latest guidance for practices

The General Data Protection Regulation (GDPR) comes into force in less than 48 hours (25 May 2018). We have produced a round-up of a significant amount of guidance to help you with integrating GDPR compliance into your practice systems.

• Practice Index have released a helpful video designed for GPs to get them GDPR ready. You can view this here.
• The Information Commissioner’s Office (ICO) has just updated their website section on the right to be informed, which is one of the key transparency requirements of GDPR. The updated section includes a checklist of the information that must be provided to individuals whose data you collect and use. If you are using any templates to help you update how you provide privacy information, please check this section to ensure that they meet the requirements of the right to be informed.
• The ICO has also produced a frequently asked questions (FAQs) web page for small health sector bodies, a video on data protection for small healthcare organisations, and offers an advice service for small organisations.
• The BMA has a dedicated GDPR web page and NHS Digital has produced a suite of GDPR resources.
• The Information Governance Alliance (IGA) have released a guidance document called ‘the key points for GPs’ which includes a myth busting section, information on the Data Protection Officer (DPO), Subject Access Requests (SARs), data protection fees and a checklist.
• Dr Paul Cundy, a London GP and the General Practitioners Committee (GPC) IT Lead, produces a GDPR blog which you can read and subscribe to here. 

If you can spare us five minutes, we’d like to hear how you feel that the implementation of GDPR is going. If you have not already done so, please complete our quick survey.

Last updated : 21 May 2018

---