Patient data: new Data Protection law on its way
Organisations in the health and care sector will already be well aware of the importance of data protection. In 2016, a new General Data Protection Regulation will be approved at a European level which, following a two-year implementation period, will replace the existing Data Protection Act 1998.
The new Regulation will significantly strengthen the current law in this area, impacting organisations in the health sector on everything from obtaining and using patient data, through to information sharing arrangements, data security measures and contracts with data processors. New requirements will include formalising the role of the Data Protection Officer, and giving additional rights to data subjects and potentially larger penalties for when things go wrong.
We will be working with our clients across the sector in the coming months to assist them with the implementation of the new Regulation. Jon Belcher, a data protection expert in Blake Morgan's Cardiff office, discussed the new regulation in a recent article, which can be accessed here.