Template D: Process according to data protection principles Confirm Principle for each Issues to consider date activity considered Lawfully All your processing is lawful – Template C A fair processing notice is provided to data Fairly and subjects, as appropriate and we will consider transparent objections to any processing – Template G Personal data available only to those who need Adequate, relevant to see it for the work they do. For appropriate and limited for the processing, the data subject’s name is purposes generally redacted (pseudonymised data is processed). Records are accurate and, if relevant, up to date. Processes in place to amend in response Accurate/up to date to a patient rights request. Form in which Psedonymisation/redaction of personal details, identification kept has been considered, as appropriate. for no longer than necessary An appropriate person has provided assurances that your computer, IT and web-based systems Security are secure. Steps have been taken to check that personal data is not accessible to unauthorised persons
Template D: Process according to data protection principles Principle for each activity Issues to consider Confirm date considered Lawfully All your processing is lawful – Template C Fairly and transparent A fair processing notice is provided to data subjects, as appropriate and we will consider objections to any processing – Template G Adequate, relevant and limited for the purposes Personal data available only to those who need to see it for the work they do. For appropriate processing, the data subject’s name is generally redacted (pseudonymised data is processed). Accurate/up to date Records are accurate and, if relevant, up to date. Processes in place to amend in response to a patient rights request. Form in which identification kept for no longer than necessary Psedonymisation/redaction of personal details, has been considered, as appropriate. Security An appropriate person has provided assurances that your computer, IT and web-based systems are secure. Steps have been taken to check that personal data is not accessible to unauthorised persons
gdpr-part-3-workbook-may-2018-1.docx