Data protection (GDPR) GDPR summary The GDPR, and also the Data Protection Act 2018 (DPA 2018) took effect on 25th May 2018. The main rules are in the GDPR. These ...
Brexit updates From 1st January 2021, EU law is incorporated into UK law but with the UK free to amend it, subject to any agreement to the contrary. Previo...
Guidance on subject access requests The Information Commissioner’s Office has issued revised guidance on subject access requests (SARs) under the GDPR. As outlined in the...
Brexit Updates on this include new GDPR guidance from the Information Commissioner. It is still unknown what deal (if any) will be struck between t...
Guidance on data controllers and processors The Information Commissioner’s Office has published new guidance on this in relation to GDPR. The guidance is at https://ico.org.uk/fo...
Litigation motive in subject access requests The Court of Appeal upheld a decision by the GMC to disclose an expert report to a patient despite the patient’s data being mixed with...
How long to retain health surveillance records Diana Kloss distinguishes between mandatory health records where the retention period is set by regulations, and OH’s confidential clinical ...
GDPR: new data protection rules We have now published fuller material on the GDPR in our ‘Data protection’ section. The GDPR, and also the Data Protection Act 2...
GDPR: the data subject’s right to information The GDPR and Data Protection Bill are due to take effect on 25th May 2018. Diana Kloss considers the privacy notices required to be given to...
Subject access requests under the GDPR The GDPR and Data Protection Bill are due to take effect on 25th May 2018. Diana Kloss considers workers’ rights to ask to see their health ...
