Find out more about virtual attendance
Since the introduction of the EU General Data Protection Regulation (GDPR) in May 2018, and it’s more recent morphing into the UK GDPR more recently, all organisations have been required to demonstrate compliance or “accountability” to the law’s six principles, as the Regulation defines it. This course will help key players in healthcare organisations understand what this means for them and how to achieve it.
This course will not be an “all you need to know about the GDPR for healthcare” affair – but it will be a very full and detailed day! It will reflect for healthcare on what the former Information Commissioner, Elizabeth Denham, said in 2019 at the Information Commissioner’s Office (ICO) annual Data Protection Practitioners’ Conference:
“Accountability encapsulates everything the GDPR is about. It enshrines in law an onus on companies to understand the risks that they create for others with their data processing, and to mitigate those risks. It formalises the move of our profession away from box ticking or even records of processing, and instead seeing data protection as something that is part of the cultural and business fabric of an organisation. And it reflects that people increasingly demand to be shown how their data is being used, and how it’s being looked after.”
It will demonstrate the key areas of UK GDPR compliance, and support delegates in meeting them, including:
- Data protection policies
- Data protection by design and by default
- Data protection impact assessments
- Contracts for suppliers processing personal data
- Records of processing activities
- Implementing appropriate security measures
- Data breach management
- Appointing a Data Protection Officer
- Adhering to codes of conduct (or similar schemes)
- When, how and if to use consent
- Rights of data subjects
- Understanding the legislative backdrop to GDPR accountability
- Participation in practical exercises relating to demonstrating compliance
- Open discussion of key points and issues in relation to the GDPR compliance
- Cross-referencing other compliance tools, inc. the Data Security and Protection Toolkit
- Most importantly, supporting delegates to discuss any of their own issues
