General Data Protection Regulations Update

LMC Law delivered an interactive GDPR training session for Calderdale LMC on Wednesday 28th March 2018. 

The General Data Protection Regulation (GDPR) is an EU Regulation which will be directly applicable in the UK on 25 May 2018.

Key changes under GDPR

• Compliance must be actively demonstrated, for example it will be necessary to: keep and maintain up-to-date records of the data flows from the practice and the legal basis for these flows; and have data protection policies and procedures in place.
• More information is required in 'privacy notices' for patients.
• A legal requirement to report certain data breaches.
• Significantly increased financial penalties for breaches as well as non-compliance.
• Practices will not be able to charge patients for access to medical records (save in exceptional circumstances).
• Designation of Data Protection Officers.

Below is a brief outline of the topics covered in the session: 

1. What is GDPR? 
2. Current obligations 
3. GPs as data controllers 
4. Lawful basis for processing 
5. Establishing a special category condition 
6. Data Protection Officer 
7. Data Protection Impact Assessments 
8. Privacy Notice 
9. Subject Access Requests
10. Breach/Penalties 

To download the presentation please click on the following link: 

GDPR presentation

Published 5th April 2018