General Data Protection Act and GDPR updated regulation and what it means for Wansford Smile Studio Policy.
What is the GDPR?
The Data Protection Act 2018 sets out the framework for data protection law in the UK. It updates and replaces the Data Protection Act 1998 and came into effect on 25 May 2018. It was amended on 01 January 2021 by regulations under the European Union (Withdrawal) Act 2018, to reflect the UK’s status outside the EU. It sits alongside and supplements the UK GDPR – for example by providing exemptions. It also sets out separate data protection rules for law enforcement authorities, extends data protection to some other areas such as national security and defence, and sets out the Information Commissioner’s functions and powers. The UK GDPR is the UK General Data Protection Regulation. It is a UK law which came into effect on 01 January 2021. It sets out the key principles, rights, and obligations for most processing of personal data in the UK, except for law enforcement and intelligence agencies.
It is based on the EU GDPR (General Data Protection Regulation (EU) 2016/679) which applied in the UK before that date, with some changes to make it work more effectively in a UK context.
The Data Protection Act (DPA) is a law designed to protect personal data stored on computers or in an organized paper filing system it sets out eight principles governing the use of personal information which we must comply with, unless an exemption applies.
The following principles are in essence a code of good practice for processing personal data.
- First principle – Personal data shall be processed fairly and lawfully and, in particular, shall not be processed unless certain conditions particularly in sensitive personal data are met.
- Second principle – Personal data shall be obtained only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes.
- Third principle – Personal data shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed.
- Fourth principle – Personal data shall be accurate and, where necessary, kept up to date.
- Fifth principle – Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
- Sixth principle – Personal data shall be processed in accordance with the rights of data subjects under this Act.
- Seventh principle – Appropriate technical and organizational measures shall be taken against unauthorized or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.
- Eighth principle – Personal data shall not be transferred to a country or territory outside the European Economic Area, unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.
Here at Wansford Smile Studio we take your privacy seriously and will only use your personal information to administer your account and to provide the products and services you have requested from us. We would also like to contact you with details of further dental appointments and changes to our services we provide.
To ensure that Wansford Smile Studio is in compliance with the GDPA General Data Protection Act 2018 and (GDPR), we kindly ask our patients to provide us with their consent to receive electronic/email/telephonic messages and contacts from us such as appointment reminders and similar communications.
Wansford Smile Studio Privacy Notice
Wansford Smile Studio, Old Hill Farm, Yarwell Road, Wansford, PE8 6PL
We process your personal data, which includes your name, contact details, prescription medicines and data from other health care services we provide to you, for the purposes of:
Your care: providing dental services and care to you and, as appropriate sharing information with your GP and others in the wider dental network.
Our Referrals: sharing your information with a separate dental practice, some local Authorities, other Dental /Hospital settings in the wider NHS and Private field, and only limited information to those externally, and
Management: sharing only limited information to those listed above, as well as those external to the NHS/Privately who ensure we maintain appropriate professional and service standards and that your declarations and ours are accurate.
We hold your information for as long as it is appropriately advised. You have a right to a copy of the information we hold about you, generally without charge. You may want to seek to correct any inaccurate information we hold.
We process your personal data in the strictest confidence in the public interest, for the provision of healthcare and treatment and the management of healthcare systems. All staff members here at Wansford Smile Studio are responsible for the confidentiality of your information. You may object to us holding your information. You may also lodge a complaint with the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Please ask at reception if you would like some more information. You may choose to opt out of us using your data for research purposes – please ask for further details.
Our Data Protection Officer is ALEX MACRAS – Principal and Owner of Wansford Smile Studio