Summary
Summary
The General Data Protection Regulation (GDPR) is a new European legislation which came into force on 25th May 2018.
Along with the new legislation came increased penalties for non-compliance. In 2023 a failure to report a data breach could result in a fine of up to £17.5 million or 4% of annual turnover.
GDPR brings 8 key rights for data subjects including the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object and rights in relation to automated decision making and profiling.
Some pharmacies will be required to have a Data Protection Officer (DPO) in place however the principles of GDPR, data protection and confidentiality apply to us all and compliance is everybody's responsibility.
