Training Objective:
To understand and apply the knowledge required to manage Data Subject Access Requests presented to the organisation
Covering :
- Data Protection Law & the Rights of the Individual
- What is a Subject Access Request & why this is different to other requests?
- How to manage a SAR
- Identity checks
- Disclosure and exemptions and when to withold information
- Timescales & processes
- Redaction & third-party information
- Deceased records and lack of capacity requests
Duration: 1 to 2 hours
Who should attend: All general practice staff (clinical & non-clinical)
