August 2024 update
Big news this month – well for us anyway. Some of you may have spotted in our new signature block that N3i have moved offices, only about 100 yards but to a location with a bit more space to expand.
So just a few IG updates this month.
- A lot of new cloud phone systems are being installed at practices. You must ensure that information about how the systems processes personal data, such as length of time conversations are recorded and how users can request them in a SAR, are added to your Privacy Notice.
- Linked to the first point you should consider the length of time you retain phone conversations. The NHS Records Management Code of Practice recommends one year retention, but you should consider the practical implications and come to a decision which you must then ensure that your phone provider implements.
- If you hear any discussions about changes to the DSPT please don’t worry as this only applies to large organisations at present and unlikely to affect GP Practices for a few years.
- If you would like any of your team added to this DL please just let us know.
Finally the IG Team now offer a visiting support service. Can be for a discussion on a specific subject or just a general chat with Practice Manager or administration team involved in IG processes, such as those dealing with:
- Subject Access Requests
- Requests to access to deceased records
- Data breaches/incidents
- Inappropriate access by staff
- Retention periods – phone and CCTV
- Policies
Contact us on n3i.dpo@nhs.net to arrange a visit.