Data Protection and the UK GDPR

To ensure that information is managed and controlled effectively.

To ensure that our organisation retains only the information it needs.

To help staff to understand what their information management responsibilities are.

To enable us to store all information indefinitely.

Who is responsible for information governance?

What is your main responsibility in relation to information governance?

Managers have additional responsibilities in relation to information governance, eg ensuring that staff receive training when necessary.

‘Personal’ data can include opinions as well as facts about a person written or typed into reports or support plans.

The UK GDPR provides a ___________ for the protection of personal data. Select the missing word(s).

Developments in technology have led to an increased risk of identity fraud.

‘Processing’ data can refer to …

The UK GDPR provides everybody with important rights, including the right to find out what personal information is held by an organisation.

Under the UK GDPR, the rights of an individual in relation to information held about them are the same for …

The policy that governs the way in which information is used and shared in the health and social care sector is known as?

The Freedom of ___________ Act 2000 gives the public a general right of access to data held by a public authority.

Any personal information relating to our clients/customers must not be disclosed to unauthorised persons …

According to the Confidentiality Statement, all records and correspondence relating to any aspect of the organisation’s activities must be kept securely at all times.

Telling somebody outside the organisation about a client/customer who has visited our offices.

Passing on personal or sensitive data when not authorised to do so.

Reading confidential files when you have been asked and authorised to do so.

Passing on the minimum rather than an excessive amount of information when authorised to do so.

Under the UK GDPR, deliberate divulgence of personal information without authorisation is …

If you see anything that you think might be a breach of confidentiality, you have a responsibility to …

Failure to comply with your organisation’s Information Security and Communication Policy could lead to disciplinary action.