General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) will become UK law on 25 May 2018. It will supersede the Data Protection Act with added detail at certain points and a new accountability requirement. The GDPR requires you to show how you comply with the principles – for example by documenting the decisions you take about a processing activity.

The Information Governance Alliance (IGA) will shortly publish guidance for health and social care on the impact of the changes.  Meanwhile you can read the Information Commissioner’s Office guidance here.

NHS England GDPR guidance for GPs will be published on the IGA website from December 2017.

Published: 15 November 2017