GDPR

• Examples of Personal Data

  HR records, client lists, CCTV footage, contact details
• Right of Erasure


  data subjects have the right to have their personal data deleted in some circumstances
• Why is GDPR important?

  it increases the regulatory responsibility and burden on organisations and strengthens the rights of the individual
• Examples of Sensitive Personal Data

  race, religion, ethnicity, sexual orientation, health, genetic information
• GDPR

  general data protection regulations
• When was GDPR implemented?

  in the UK, may 25th 2018, it replaces the data protection act
• Who does GDPR affect?

  data collectors and data processors
• Data Processor

  individuals that process data on the collectors behalf e.g., text/email reminder services
• What types of data does GDPR apply to?

  personal data and sensitive personal data
• Personal Data Breach

  this is when a security breach occurs that leads to the accidental or unlawful destruction, loss, or access to personal data
• Consent

  should be informed and given freely, done with an affirmative action e.g., 'opt-in' boxes
• Right of Access


  data subjects have the right to access their personal data and be informed about how their data is processed
• Data Collectors


  these are people that decide which data is processed and why e.g., a practice manager
• Right of Rectification


  data subjects have the right to rectify their data if it is incorrect or incomplete
• Data Processing


  anything that is done with the data from the moment it is obtained to the moment it is destroyed