GDPR – further guidance now available

The EU’s General Data Protection Regulation (GDPR) comes into force on 25 May 2018 when it replaces the UK Data Protection Act 1998. The GDPR is significant and wide-reaching in scope and it expands the rights of individuals to control how their personal information is collected and processed. The GDPR places a range of new obligations on organisations to be more accountable for data protection.

We have been keeping you up to date with guidance as it becomes available and the latest guidance is below:

  • GPC – GPs as data controllers

    This General Practitioners Committee guidance covers compliance, privacy notices for patients, reporting data breaches, information on financial penalties, access to patient records and the designation of Data Protection Officers (DPOs).

    Read more here.

  • IGA – GDPR guidance

    The national GDPR working group, chaired by NHS England, has produced a number of guidance documents publicised by the Information Governance Alliance (IGA), including a GDPR implementation checklist, on consent and lawfulness of processing.

    Read more here.

  • ICO – FAQs for small health sector bodies

    The Information Commissioner’s Office guidance includes updates on a wide range of issues including public authority definition under GDPR, issues relating to the appointment of a DPO, back-ups of personal data, GDPR registration, subject access requests (SARs), consent and personal data, reporting a personal data breach and how medical records are affected by the right to erasure.

    Read more here.

  • MRC – Preparation for the implementation of the General Data Protection Regulation (GDPR): GDPR, Consent in Research and Confidentiality

    The Medical Research Council guidance includes information for practices around requests for sharing personal data for research purposes and how consent and confidentiality fit in to it under GDPR.

    Read more here.

  • National Association of Sessional GPs (NASGP) - The guidance, aimed at sessional GPs but useful for everyone to read, covers who GDPR applies to, the main changes from current data protection law, consent and legal processing, transparency and fair processing, subject access requests, data breaches and DPIAs (Data Protection Impact Assessments).

    There is also information on the role of the DPO (Data Protection Officer) and the strengthening of patients’ rights as well as the two helpful scenarios on locum GPs accessing patient records. Our thanks to NASGP (https://www.nasgp.org.uk/) for allowing us to use this information.

    You can see the guidance on pages 17-21 of the guidance by clicking here.


Please remember to keep checking our website for further information.

Last updated : 19 Mar 2018

 

BMA seek feedback on NHSPS leases without service charges (18 Dec 2018)

The BMA would like to speak to practices in in NHS Property Services premises who have: Written leases without service charge provisions where no payments have historically been made...
Read more »

NHS England and CCGs investigating half-day closing sub-contracting arrangements (18 Dec 2018)

NHS England and various London CCGs have been carrying out analysis of practices’ opening hours based on the information provided in their E-Declarations. Some commissioners have identified practices who have...
Read more »

General Practice Indicators module on the NHS England primary care website updated. (17 Dec 2018)

NHS England have recently updated eight indicators in the General Practice Indicators module on www.primarycare.nhs.uk. The eight indicators which have been updated relate to: Cervical screening to 2017/18...
Read more »

ICO fines for practices who do not pay their registration fees (17 Dec 2018)

From 25 May 2018, the Data Protection (Charges and Information) Regulations 2018 required every organisation or sole trader who processes personal information to pay a data protection fee to the...
Read more »

Tips of the month December 2018 (17 Dec 2018)

We provide weekly tips based on common queries which come through to us from London GPs and practice teams. These are shared via social media and collated for...
Read more »

Practice Managers Conference 2018 summary (17 Dec 2018)

The Practice Managers Conference was attended by dozens of delegates from across the Londonwide area. Delegates said they enjoyed the day, particularly the opportunity to meet other PMs and learn...
Read more »

The Data Security and Protection Toolkit (DSPT) – submission deadline 31 March 2019. (17 Dec 2018)

The Data Security and Protection Toolkit (DSPT) replaced the Information Governance toolkit from April 2018. The DSPT is an online self-assessment toolkit that has to be used by all organisations...
Read more »

Thank you for responding to our workforce survey (13 Dec 2018)

Thank you to everyone who took the time to complete our workforce survey, which closed last week.  The data gathered from previous workforce surveys has been used in a number...
Read more »

Motions sought for national LMC conference (07 Dec 2018)

We are seeking draft motions for the UK LMC conference before Christmas, so we have time to submit them in early January. If you are an LMC member please speak...
Read more »
Next Page »
« Previous Page