2.1.2 Maintains confidentiality in all aspects of patient care.

What is the DPA (1998) designed for

Store and protect personal data on computers

Allows individuals to legally control information about themselves

Defined using 8 principles - what are they

- LLADNIST

1. Obtained and processed lawfully

2. Processed for limited purposes

3. Adequate, relevant and not excessive

4. Accurate and up to date

5. Not kept for longer than needed

6. Processed in line with the individuals rights

7. Secure

8. Not transferred to other countries without adequate protection

What is the purpose of GDPR

Prevent px details being shared, viewed or accessed by unauthorised personnel

What type of stuff should you do and not do

o Inform patient how their data will be used and obtain consent.

o Never leave patient details lying around.

o Verify patient name, D.O.B and address.

Can px request test records

Done by the specialist data protection legal team and can take up to 30 days

What needs to be done in store

Rx requests

Can they ask for erasure? Discuss

Patients can request for data to be erased completely - can delete patient account via consent

app but clinical and financial records cannot be deleted due to legislation.

Duty of confidentiality is absolute but can it be breached

Yes if risk of injury or death

What do you do it px refuses consent to use their record

Should not state consent was obtained on this record and must not be shown to examiner or used for exams

What do you do it another practicer calls requesting copy of px record

Should speak to px and obtain consent

Confirm their details

Write consent obtained when rx is forwarded

What would you do if a px refuses to give consent to keep any record of the sight test you were about to conduct

You would let hem know that legally you cannot carry out ST without keeping records you cannot protect yourself or the company from any legal allegation