Data Protection - What Does a Data Protection Course Involve?

Data protection is the protection and the legal control over access to and the use of all data stored physically and electronically. It is defined by the Data Protection Act (DPA) of 1998 and was updated by the General Data Protection Regulations (GDPR) in 2018.

Confidentiality of information is a key part of maintaining dignity for those using health and social care services. The DPA requires public bodies and their data controllers to comply with a range of predefined principles.

What are the principles of the protection of data?

The Data Protection Act controls how your personal information is used by organisations, businesses or the government. Everyone responsible for using data has to follow strict rules enforced by the Information Commissioners Office (ICO). They must make sure the information is: 

• Used fairly and lawfully
• Used for limited, specifically stated purposes
• Used in a way that is adequate, relevant and not excessive
• Accurate
• Kept for no longer than is absolutely necessary
• Handled according to people's individual rights
• Kept safe and secure
• Not transferred outside the European Economic Area without adequate protection 

Can information be withheld?

There are some situations when organisations are allowed to withhold information, for example for:

• The prevention, detection or investigation of a crime
• National security or the armed forces
• The assessment or collection of tax
• Judicial or ministerial appointments

In these circumstances, the organisation doesn't have to say why they're withholding information.

What does a Data Protection / GDPR course cover?

While GDPR legislation has updated how the law is to be implemented in care homes (as well as any business), a data protection course will typically cover the following:

• General and sensitive personal data
• Protect personal data when dealing with customers
• Learn to process personal data safely
• Eight principles of DPA

The GDPR is an EU regulation and is read alongside the DPA, which was updated in the UK in 2018.

To begin your data protection training, head to our GDPR Awareness course page.