Menu Home Search
This is not the published version of this resource. View the published version

General Data Protection Regulation

The General Data Protection Regulation has introduced wide ranging and significant changes to UK data protection legislation.

The BMA's main GDPR guidance is here and includes FAQ sections related to GDPR resources and the role of the DPO.

Due to the complex nature of the new regime for data protection laws, the BMA cannot offer comprehensive legal advice on GDPR.  However its guidance should help practices navigate the legislation and point them in the right direction for guidance on the questions that may arise.  The BMA guidance will be updated regularly as new guidance is published so please check back regularly.

Confidentiality & Data Security Policy for Members

Data Retention Policy

Management of Data Breach

Right of Access to Data Held Policy

In addition to the above information, practices may also find the following links of interest:

FAQs on GDPR - produced by LMC Law, this page will be updated regularly so it will be important to check back for further information.

Data sharing agreement checklist- produced by LMC Law, practices are reminded that they will need to have data sharing agreements in place where they are passing any type of personal data including special category data to other organisations or individuals to process.

NHS Digital

Information Commissioner’s Office


February 2020

The voice for NHS GPs and Practice Teams across North Yorkshire, the City of York, Bradford, Airedale, Wharfedale & Craven districts.