Hi Shelia, I’m just about to have my first person and site visit next week, I’m so confused about the General Data Protection Act and what impact it will have on me and what I actually need to do.
can you help?

Answered by Sheila Scott

Dear J,

Thank you for your question.

There are a number of processes that you need to go through to make sure that you are compliant.

This is a matter that has to be taken very seriously and it isn’t just a matter for care homes, it is a matter for every business in this country.

It is however particularly important for any care provider as you will hold a great deal of personal information about the people you care for and the staff who you employ and how you manage that information is going to become increasingly important.

You should begin by looking at the website of the Information Commissioner.

On 25 May 2018, most processing of personal data by organisations will have to comply with the General Data Protection Regulation.

There are two useful guides on the website which you can find here. The first is:

Preparing for the General Data Protection Regulation (GDPR) 12 steps to take now.

The 12 steps to take are:

1. Awareness

2. Information you hold

3. Communicating privacy information

4. Individuals’ rights

5. Subject access requests

6. Lawful basis for processing personal data

7. Consent

8. Children

9. Data breaches

10. Data Protection by Design and Data Protection Impact  Assessments

11. Data Protection Officers

12.  International

The other is a self-assessment document designed to help you to decide how much more work you need to undertake to become compliant.

There are several blogs on the QCS website about GDPR and if you are a customer of QCS there are all the policies and procedures you will have received to make sure that you are compliant. www.qcs.co.uk/

There is also information about GDPR available on the Skills for Care website.

The Office of the Information Commissioner has made it clear that small businesses will need to be able to demonstrate that they are taking steps to comply.

I hope this is helpful.

Best wishes.

Sheila