Introduction to gdpr
- 2. Please be kind to the messenger • GDPR is a European Regulation • The implementation of GDPR is not up for debate or discussion • ICGP and GPIT are trying to help you to comply with GDPR
- 3. Outline of this Webinar • Brief presentation; • Review of resources available to help you prepare for GDPR; • Questions and Answers; • Conclusion: next steps;
- 4. What is the General Data Protection Regulation (GDPR)? • GDPR is an EU regulation that comes into effect on 25th May 2018; • GDPR strengthens data protection for EU citizens; • GDPR replaces existing Data Protection Acts 1998 and 2003; • GDPR will have a major impact on general practice;
- 5. GDPR is complex • GDPR has: • 11 Chapters • 99 Articles • 173 Recitals • The text of GDPR runs to 98 A4 pages
- 6. ICGP GDPR Working Group • Brian O’Mahony • Conor O’Shea • Brian Meade • Niamh Killeen • Brendan Fay (Ward Solutions) • John McWade (Ward Solutions • Deliverable is a Code of Conduct for GPs on Data Protection: • Draft document will be finalised by February 14th ; • Then goes to Data Protection Commissioner (DPC) for review; • Will be published as soon as any feedback and comments from DPC is resolved;
- 7. Voluntary Code of Conduct • Records of Processing Activity • Categories of Personal Data • Legal Basis for Processing of Data • Recipients for Sharing Data • Data Retention Policy • Principles of Data Protection • Lawful, fair and transparent • Accountability • Individual Rights of Patients • Access • Rectification • Erasure • Data Portability • Personal Data Breaches • Data Protection Impact Assessments • Data Protection Officers
- 8. Key messages • Sort out your IT security; • Identify a data protection lead in the practice • Document the steps you are taking to comply with GDPR; • Teach your staff;
- 9. GDPR Resources • ICGP Data Protection Guidelines, http://www.icgp.ie/data • GPIT Frequently Asked Questions on GDPR, http://www.gpit.ie/faq • Data Protection Commissioner, http://gdprandyou.ie/resources/ • Final text of the GDPR, https://gdpr-info.eu
- 10. Questions? • Please keep questions broad and of general interest; • Avoid questions of a highly granular, personal and specific nature; • We may not know the answer;
- 11. Next steps • Commission an information security audit; • Identify a person with responsibility for data protection; • Start your GDPR accountability log; • Webinar on March 22nd by Brian Meade; • Review and adopt the Code of Conduct when it becomes available;