Right to be Informed
According to GDPR:
Taken from the Information Commissioner’s Office website:
-
Individuals have the right to be informed about the collection and use of their personal data. This is a key transparency requirement under the GDPR.
-
You must provide individuals with information including: your purposes for processing their personal data, your retention periods for that personal data, and who it will be shared with. We call this ‘privacy information’.
-
You must provide privacy information to individuals at the time you collect their personal data from them.
-
There are a few circumstances when you do not need to provide people with privacy information, such as if an individual already has the information or if it would involve a disproportionate effort to provide it to them.
See this ico article to keep up to date with latest developments.
On GPM's end:
Process
Gensolve has defined GPM to notify patients about any of their information being managed by the clinic or third parties. However, the actual sending of the notification must be done manually by clinics. In this article, you will learn how to do so.
The client’s right to be informed works hand in hand with gaining consent. Below are examples of how this could work for your clinic.
-
Verbal: a client calls reception who reads a brief script of consent and refers to the clinic's website to review privacy policy and terms of service.
-
Physical letter: a client visits the clinic and is provided with a physical letter with consent details.
-
Digital email and letter: an email with consent terms provided by an attached electronically signed letter.
Steps
Review whether you wish to email clients with consent files they can sign electronically when creating email / letter templates accordingly.
You may also notify clients of any alterations on their data by:
- Sending an SMS. See Using Emails and SMS.
- Creating an event, then using Event Notifications to inform about the changes. Events will keep a record of when and who notifications were sent to. See Using Event Notifications.
Note: The practice will know when consent in missing from a patient when he/she is highlighted in red when selected on Client's Top Bar. To learn how to change said status refer Consent.
You may also want to take a look at: Gaining Consent, How to create Template Letters, File scanning and uploading, How to create template email, How to send an attachment as a PDF.
