Right to Erasure
According to GDPR:
Taken from the Information Commissioner’s Office website:
-
The GDPR introduces a right for individuals to have personal data erased.
-
The right to erasure is also known as ‘the right to be forgotten’.
-
Individuals can make a request for erasure verbally or in writing.
-
You have one month to respond to a request.
-
The right is not absolute and only applies in certain circumstances.
-
This right is not the only way in which the GDPR places an obligation on you to consider whether to delete personal data.
See this ico article to keep up to date with latest developments.
On GPM's end:
Process
Gensolve has defined GPM to make it possible for erased clients to not be found within its database, however, appointments previously saved will be shown in the appointment book. Please note that health records will still be available. In this article you will learn how to Erase/Forget a Client.
Please refer to Health and Care Professionals Council or your specific overruling body for data management. For example, the following is taken from Chartered Society of Physiotherapists.
Retention schedules vary according to the type of record, but in general it is usually eight years from the date of last treatment for adult records, and for children eight years after their 18 birthday or until 25 years of age. Other types of records may need to be stored indefinitely.
As such, when this request is made, the client will not actually be erased but instead will no longer appear in any search queries so will not (easily) be available to view personal details or book new appointments.
Steps
-
Create a 'Right to Erasure' event to record the client request and set a due date for action.
-
If available upload request from client to Client Uploads tab.
-
Optionally send Client 'Right to Erasure' email / letter confirming the request and explaining consequences (you can use a template to do so).
-
Go to Clients tab on Top Menu Bar.
_I.png)
-
Action Erasure Request (GDPR).
_II.png)
-
Complete Todo action / event.
Note: Now you won't be able to find erased clients within GPM. Also, client Information will be available on all appointment screens as a read only. However, you will not be able to manage any other information, since they have been inactivated.
You may also want to take a look at: Client Events, Roles and Permissions.
