What is GDPR?
The General Data Protection Regulation (GDPR) is a new European legislation which came into force on 25th May 2018.
The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR).
It concerns the processing (i.e. collection, storage and transfer) of personal data (including special categories of data e.g. health data), related to identified or identifiable living persons (known as data subjects) stored in filing systems (e.g. PMR systems) or manual unstructured files.
Along with the new legislation comes increased penalties for non-compliance. This may sound scary but aspects such as patient confidentially have always been part of pharmacy and pharmacies have been subject to information governance requirements such as appointing an IG lead and completing the annual IG toolkit.