Information Commissioners Officer: guidance on GDPR

Summary

The Information Commissioners Office (ICO) gives guidance on how to handle information about people's healthcare and medical affairs.

Content

The ICO’s toolkit helps healthcare organisations assess their compliance with the Data Protection Act. There’s a dedicated records management section, with guidance and links to further reading on:

• Developing records management policy and procedures
• Training
• Outsourcing
• Records inventories
• Tracking and off-site storage
• Security and disposal of data
• Business continuity