GDPR - Information governance

In this 6 part series, Nicki Rowland details information governance. 

General Data Protection Regulation. Part 1. Introduction to GDPR - Nicki Rowland

Aims and objectives:

• Understand the key differences between DPA and GDPR and the new principles to which one must adhere
• Explore what defines personal and sensitive data and how it should be stored, handled and processed
• Learn how to demonstrate accountability within the GDPR framework and manage information security systems in your practice
• Recognise sanctions for failure, when in breach
• Some simple solutions to aid the practice
• Understand Quality Assurance within GDPR

General Data Protection Regulation. Part 2. Patient rights and understanding the role of the controller and processing - Nicki Rowland

Aims and objectives:

• Understand the changes in the Data Protection Act and how it translates to the GDPR
• How to choose the appropriate lawful basis for the practice
• The purposes for processing data
• Understand, is the processing adequate, relevant and limited and how to keep accuracy
• Understand the fees
• Understand the differences between the data processors and data controllers
• Gain an insight into the obligations of the data processors

General Data Protection Regulation. Part 3. Steps to be taking now - Nicki Rowland

Aims and objectives:

• Understand the changes in the Data Protection Act and how it translates to the GDPR.
• Understand what steps you must take to ensure your staff and practice are getting compliant with GDPR.
• Gain an insight into Privacy Impact Assessments.
• Gain an insight into the information you hold and what staff need to do to ensure this is secure.
• Understand the impact on consent, vital interests, legitimate interests.
• Gain an insight into the lawful basis for processing personal data and where consent is needed.
• An update on how GDPR applies to children.
• An insight into what to do if there is a breach.
• Understand the role of a DPO 

Data Protection Response to General Data Protection Regulation - Nicki Rowland

Aims and objectives:

• Understand the importance of data protection
• Understand the consequences of data breaches
• Understand how you can avoid breaches and more information on encryption

General Data Protection Regulation. IT security - Nicki Rowland

Aims and objectives:

• Understand the importance of data security, and data facts - what can happen if data security lapses
• Understand the impact on the dental practice as a business
• Understand the sources of a breach, and the types of cybercrime and malware
• Gain an insight into good practice, including how to raise security awareness, training of staff and tips on passwords

General Data Protection Regulation. Documentation - Nicki Rowland

Aims and objectives:

• Understand the importance of documentation, including tips on privacy notices and policies and how to access requests and other items
• Understand the difference between a Data Controller and Data Processor
• Understand what the Controller's roles are and what is to be documented for the Controller
• Understand the categories of data subjects and categories of personal data
• Understand your role in who the personal data will be disclosed to, and hence the documentation
• Understand the legal basis for processing and what security measures will be taken
• The role of the Data Processor and their responsibilities