LO2: Legalisation - data protection act 1998 and GDPR

Question 1

what data needs to be held in health and social care settings?

Answer 1

1. patient recordings
2. care plans
3. employee records
4. test results.

Question 2

what are the 8 principles of the act?

Answer 2

1. processed fairly and lawfully
   2.used only for the purposes for which it was intended for.
2. adequate and relevant but not excessive
3. data must be accurate and kept up to date
4. information should be kept for no longer than necessary
5. processed in line with the individuals
6. keeping information secured (paper or online)
7. information should not be transported to other countries outside of the EU.

Question 3

what is confidentiality about?

Answer 3

1. information relating to individuals must not be shared outside of a setting.
2. telephone conversations (avoid disclosure of confidential information)

Question 4

give an example of when sensitive information could be used in a care home?

Answer 4

someone with dementia not understanding personal information and where things are being kept meaning that they look at peoples personal information.

Question 5

give an example of when sensitive information could be used in a hospital?

Answer 5

someone looking into someone’s information and stealing their medication or overdosing on something.

Question 6

give an example of when sensitive information could be used in a nursery?

Answer 6

looking at a child’s personal information (like an address) and kidnapping the child.

Question 7

what is transparency?

Answer 7

staff being open, honest and truthful about data.

Question 8

what are the 7 principles of GDPR?

Answer 8

1. you must have a lawful reason for collecting data, and must be collected in a fair and transparent way.
2. the data you collect must only be used for it’s intended need, if you wish to use it for other reasons (eg: marketing and promotion) then you will require consent to do so.
3. you must not collect any additional personal information that isn’t necessary
4. it has to be legible and accurate and you must have systems and processes in place to keep it up to date.
5. you cannot retain information longer than the legally required timescales.
6. personalised data must be processed and stored securely whether that information is on data file or a paper version
7. accountability = organisations must have policies, procedures and training on data protection.