GDPR

NHS Digital’s flagship security awareness toolkit, Keep I.T. Confidential, has been updated to help support social care organisations to improve security culture within their care settings. Free resources to be…

New guidance from the Information Commissioner’s Office (ICO) has been developed for organisations including care providers who use or may want to consider surveillance systems to collect and process personal…

Introduction Obscuring or removing personal data from datasets allows information to be used more widely and may be particularly useful to the organisation in the areas of research and management…

  If an organisation wishes to transfer data to a third party, there are a number of factors to consider, particularly where the transfer is made to an organisation located…

    Under both the Data Protection Act 1998 and the General Data Protection Regulation 2016 (“GDPR”) organisations must ensure there is a lawful basis for processing personal data. If…

  The rights of the data subject are enhanced under GDPR. They are detailed below, together with some common myths and mythbusters. The first two rights must be automatically exercised…

In the last GDPR guidance note we discussed the key terms set out in GDPR. In this guidance note we’ll look at the 6 key principles of GDPR that apply…

The Information Commissioner Office (ICO) has turned its attention to the health and social care sector since the implementation of GDPR in May 2017. The ICO has conducted audits of…