Ask Sheila England

Sheila will try to answer as many of your English Social Care questions as possible, giving priority to frequently asked questions and questions regarding current events and trends.

06th June 2018

What will be the impact of GDPR on site visits in Care Homes?

Hi Shelia, I'm just about to have my first person and site visit next week, I'm so confused about the General Data Protection Act and what impact it will have on me and what I actually need to do.
can you help?


Dear J,


Thank you for your question.


There are a number of processes that you need to go through to make sure that you are compliant.


This is a matter that has to be taken very seriously and it isn't just a matter for care homes, it is a matter for every business in this country.


It is however particularly important for any care provider as you will hold a great deal of personal information about the people you care for and the staff who you employ and how you manage that information is going to become increasingly important.


You should begin by looking at the website of the Information Commissioner.


On 25 May 2018, most processing of personal data by organisations will have to comply with the General Data Protection Regulation.


There are two useful guides on the website which you can find here. The first is:


Preparing for the General Data Protection Regulation (GDPR) 12 steps to take now.


The 12 steps to take are:


1. Awareness


2. Information you hold


3. Communicating privacy information


4. Individuals’ rights


5. Subject access requests


6. Lawful basis for processing personal data


7. Consent


8. Children


9. Data breaches


10. Data Protection by Design and Data Protection Impact  Assessments


11. Data Protection Officers


12.  International


The other is a self-assessment document designed to help you to decide how much more work you need to undertake to become compliant.


There are several blogs on the QCS website about GDPR and if you are a customer of QCS there are all the policies and procedures you will have received to make sure that you are compliant.


There is also information about GDPR available on the Skills for Care website.


The Office of the Information Commissioner has made it clear that small businesses will need to be able to demonstrate that they are taking steps to comply.


I hope this is helpful.


Best wishes.



*All information is correct at the time of publishing.

What would you like to ask Sheila?

Sheila Scott OBE from National Care Association (NCA). Care is Sheila’s life; she possesses a strong command of the issues facing the care sector informed by her long career as a nursing professional, the owner and manager of a care business and as a leader in the care sector.

Sheila will try to answer as many of your questions as possible, giving priority to frequently asked questions and questions regarding current events and trends.

Please note that Sheila can not offer answers to matters requiring legal advice. If your matter concerns a specific service provider, please contact the CQC.

Join over 90,000+ users already using the QCS Management System!
Start Free Trial
Back to Top
Special Offer Up To £400 Discount. Don't Miss Out!