Sector

Data Protection for the Care Sector

Our specialist team can support and advise about all aspects of data protection legislation.

BUSINESS OBJECTIVES ACHIEVED

Organisations operating in the care sector hold and use vast amounts of personal and sensitive data, particularly in relation to residents and their families, and even staff. Ensuring that your organisation and staff understand the duties and obligations of those with responsibility for this data is an essential part of any successful care setting.

Our Information Law team advises on all aspects of the data protection legislation, including the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003. In addition, the team provides advice relating to data protection compliance, Freedom of Information Act (FOIA), Data Subject Access Requests (DSARs), and delivers dynamic and practical advice to clients across a wide variety of sectors, including the care sector.

The team's expertise includes:

Assessing current UK GDPR compliance and devising an action plan for implementation of various aspects of the data protection legislation, including the adoption of appropriate policies and procedures and dealing with freedom of information and other information requests
Providing bespoke training to organisations regarding compliance with the UK GDPR and other data protection legislation
Assisting with and handling DSARs and breaches of data security, including liaising with the ICO in respect of data breach reports and complaints made to it by individuals who allege misuse of their personal data
Assisting with and handling requests made to public authorities under the Freedom of Information Act 2000
Drafting and advising on contractual agreements for the provision of data processing and data sharing
Advising on contractual clauses in commercial agreements to ensure the relevant data protection clauses are included
Drafting and providing advice in relation to Data Protection Impact Assessments, Legitimate Impact Assessments and Records of Processing Activities
Conducting data protection and freedom of information audit
Providing advice and support with regards to sending and receiving marketing communications.

Information Law retainers

Our Information Law team offers practical and competitive support packages to provide specialist advice to your existing Data Protection Officer and/or organisation via the following offers:

DPO Support retainer; or
Fully outsourced DPO retainer

For one fixed price which can be paid monthly, quarterly, or annually, your organisation will receive dedicated support and advice whenever needed, to provide assurance that your organisation is meeting its compliance requirements. The range of services offered differ depending on retainer type, however, the Information Law provides the following services as standard across both products:

Review of existing data protection policies and procedures
Responsive telephone and email advice
Advice relating to Data Processing Agreements
Advice relating to DPIAs
Advice relating to personal data breaches
Advice relating to DSARs
Advice relating to investigations by the ICO
Regular updates on changes to the law.

Quotations are provided based around the specific needs of the organisation and considering factors such as the size of the organisation and the amount of personal data held within it.

For further information about the retainer packages offered by our Information Law team and/or to obtain a quote for ad hoc advice and support, please contact our Information Law team via our online Contact Form.