Ask Sheila - Archive England

Sheila Scott OBE has now retired and therefore is no longer available to answer your social care questions. However, you might still find the answer you’ve been searching for down below.

06th June 2018

What will be the impact of GDPR on site visits in Care Homes?

Hi Shelia, I'm just about to have my first person and site visit next week, I'm so confused about the General Data Protection Act and what impact it will have on me and what I actually need to do.
can you help?


Dear J,


Thank you for your question.


There are a number of processes that you need to go through to make sure that you are compliant.


This is a matter that has to be taken very seriously and it isn't just a matter for care homes, it is a matter for every business in this country.


It is however particularly important for any care provider as you will hold a great deal of personal information about the people you care for and the staff who you employ and how you manage that information is going to become increasingly important.


You should begin by looking at the website of the Information Commissioner.


On 25 May 2018, most processing of personal data by organisations will have to comply with the General Data Protection Regulation.


There are two useful guides on the website which you can find here. The first is:


Preparing for the General Data Protection Regulation (GDPR) 12 steps to take now.


The 12 steps to take are:


1. Awareness


2. Information you hold


3. Communicating privacy information


4. Individuals’ rights


5. Subject access requests


6. Lawful basis for processing personal data


7. Consent


8. Children


9. Data breaches


10. Data Protection by Design and Data Protection Impact  Assessments


11. Data Protection Officers


12.  International


The other is a self-assessment document designed to help you to decide how much more work you need to undertake to become compliant.


There are several blogs on the QCS website about GDPR and if you are a customer of QCS there are all the policies and procedures you will have received to make sure that you are compliant.


There is also information about GDPR available on the Skills for Care website.


The Office of the Information Commissioner has made it clear that small businesses will need to be able to demonstrate that they are taking steps to comply.


I hope this is helpful.


Best wishes.



*All information is correct at the time of publishing.

About Sheila

Sheila Scott OBE has now retired and over the years , prior to her retirement she has answered thousands of your social questions. You can still access the many questions below.

For Sheila Scott OBE as the former CEO of National Care Association (NCA), care is Sheila's life. She possesses a strong command of the issues facing the care sector informed by her long career as a nursing professional, the owner and manager of a care business, and as a leader in the care sector.

Please do get in touch with our team of specialists if you can’t see an answer to the question you may have and we will be happy to help.

Here at QCS we have an extensive panel of specialists with a wide range of knowledge and experience so don’t worry if you have a social care question you are struggling to find the answer to, our team are here to help.

    Join over 130,000 users already using the QCS Management System!
    Start Free Trial Buy Now
    Back to Top