What is the GDPR and why is 25 May 2018 important? #GDPR

The General Data Protection Regulation (GDPR) is European legislation that will be directly effective in the UK from 25 May 2018. It will be accompanied by UK-specific legislation, a new Data Protection Act, which will complement and clarify aspects of the GDPR. It will continue to apply after Brexit.

While the GDPR will bring changes to the way in which data protection is managed, it is more evolution than revolution, and is designed to both protect the rights of individuals and make clear the responsibilities of those who process data. It makes mandatory what up until now has been considered good or best practice. The basic principles of processing personal data remain broadly the same as our previous Data Protection Act, although the meaning of personal data is broadened, which may mean that some information that was previously not considered to be personal data now is.

Pharmacies must comply with information governance requirements already, so no-one will be starting from scratch, though some will have more to do than others to be ready for the 25th of May.

View our GDPR page for more information