GDPR - Data Protection
What is GDPR?
The EU’s General Data Protection Regulation (GDPR) was introduced to unify all EU member states' approaches to data regulation, ensuring all data protection laws are applied identically in every country within the EU. It will protect EU citizens from organisations using their data irresponsibly and puts them in charge of what information is shared, where and how it's shared.
The GDPR is due to come into force on 25 May - and even though the UK is due to leave Europe in the next 12 months, it will still apply to all businesses handling EU residents' data, effectively replacing the Data Protection Act 1998.
'Controllers' and 'processors' of data need to abide by the GDPR. A data controller states how and why personal data is processed, while a processor is the party doing the actual processing of the data. So the controller could be any organisation, from a profit-seeking company to a charity or government. A processor could be an IT firm doing the actual data processing.
It's the controller's responsibility to ensure their processor abides by data protection law and processors must themselves abide by rules to maintain records of their processing activities. If processors are involved in a data breach, they are far more liable under GDPR than they were under the Data Protection Act.
To help you understand what this means for you and how we handle your data, there are documents with varying levels of information.
Practice Privacy Notice Poster - a simple poster to explain how we use your medical records
Privacy Notice for Children
Clinical system privacy poster
Our Staff have the right to be treated with dignity and respect at all times. The Practice operates a zero tolerance policy with regard to physical and verbal abuse towards any member of staff and the practice has the right to remove violent patients from the list with immediate effect in order to safeguard practice staff, patients and other persons. Violence in this context includes actual or threatened physical violence or verbal abuse which leads to fear for a person’s safety. On these rare occasions we have the right to remove the patient from our Practice list.
(Site updated 21/06/2019)