Data protection laws and personal data Flashcards
What is personal data?
Information relating to an identifiable natural person, who can be directly/indirectly identified by reference to an identifier
Give 3 examples of identifiers?
Name, address, cultural identity
What act was implemented in the UK to protect personal data?
General Data Protection Regulation (GDPR) implemented Data Protection Act 2018
How does the DPA 2018 state data should be processed?
Fairly and lawfully
What right does the DPA 2018 give living people/their authorised representatives?
Right to apply for access to personal data irrespective of where data was produced
In what 2 situations does DPA 2018 not apply?
Deceased person
Data is anonymous
Does DPA 2018 apply to NHS or private health records?
Both
How does DPA 2018 apply to employers?
Employers could hold info on employees’ mental, physical health
Who developed the Caldicott principles?
Dame Fiona Caldicott
What is the purpose of the Caldicott principles?
Demonstrate how staff should handle their access to patient’s personal information
What is the role of the Caldicott Guardian?
Safeguarding and governing of use of personal data in the Trust
How many Caldicott principles are there?
8
What do Caldicott principles state about decisions regarding sharing confidential info?
Must be justified
What do Caldicott principles state about when to share confidential info?
Only when necessary
What do Caldicott principles state about how much confidential info to share?
Minimum necessary amount