Right to Restrict Processing
According to GDPR:
Taken from the Information Commissioner’s Office website:
-
Individuals have the right to request the restriction or suppression of their personal data.
-
This is not an absolute right and only applies in certain circumstances.
-
When processing is restricted, you are permitted to store the personal data.
-
An individual can make a request for restriction verbally or in writing.
-
You have one calendar month to respond to a request.
See this ico article to keep up to date with latest developments.
On GPM's end:
Process
Gensolve has defined GPM to restrict processing of their information, be that by the clinic or by integrated third parties. In this article, you will learn how to do so.
Steps
-
Create a “GDPR Restrict Processing” event to record the client request and set a due date for action.
-
Upload request from client to the Client Uploads tab.
-
Optionally send the client an email confirming request (you can use an Email Template to do so).
-
Go to Client Details screen.
-
Add “GPDR Restrict Processing” client group, with note of what is requested.
-
If the client does not want to be in Physitrack or Physiotec. Optionally:
-
Clear Physitrack or Physiotec setting.
-
Add a note in the Client Group Details.
-
Create/set a highlight.
-
Send email or letter to explain action taken (you can use a template to do so).
-
Complete the Todo action / event.
Then, if applicable, when exporting data from GPM to feed into your other systems, you can use a query such as GDPR Not Restricted for Processing as shown below. As showing in the example below, this will prevent your client from being exported into the template merge file.
You may also want to take a look at: How to create a Client Event, Using Saved queries with Template Merge for data export, Configuring Physiotec, Configuring Physitrack.
