Confidentiality

Question 1

key rules of GDPR

Answer 1

`- Protection - anyone who processes personal information must ensure that it is protected
- Access - individuals have the right to access both their personal data and information about how it is being processed
- Specific reason - personal data can only be held if there is a specific lawful reason to do so

Question 2

What is GDPR?

Answer 2

is a regulation in EU law on data protection and privacy that aims to give individuals control over their personal information.

Question 3

safeguards for confidentiality

Answer 3

• Access controls
• Training
• Security procedures

Question 4

right to disclose

Answer 4

• client permission obtained
• where disclosure is in the public interest
• to defend the firm in a negligence claim

Question 5

duty to disclose

Answer 5

• if ordered to disclose by a court
• if required by a regulator eg. financial conduct authority, charity commission
• suspicions of money laundering should be reported to the national crime agency
• suspicions of terrorist activities should be reported to the police