Data Breaches, Subject Access Requests and Redaction

Handling data breaches and subject access requests (SARs) can be complex, time-consuming, and frustrating. This webinar is designed for Practice Managers and senior administrators working in General Practice, offering practical guidance to manage these challenges confidently and proactively. The session also explores how SARs and data breaches can be interconnected, particularly when patients raise concerns about inappropriate access to their records via apps or portals.

Aims

To equip attendees with the knowledge and tools to manage data breaches and subject access requests effectively, in line with legal and regulatory requirements.

Objectives

By the end of the session, participants will:

• Understand the legal framework (including an update of the changes to the management of SARs by the Data (Use and Access) Act 2025) surrounding data breaches and SARs.
• Be able to identify and respond to breaches appropriately.
• Implement effective procedures to manage SARs, including complex cases.
• Develop proactive strategies to reduce the likelihood of breaches and improve response processes.

Content

Using realistic scenarios, the session will cover:

• Identifying and assessing a data breach.
• Managing and reporting breaches to regulators and affected individuals.
• Handling complex subject access requests, including those linked to breaches.
• Practical tips for improving policies and procedures to prevent breaches and streamline SAR handling.

Previous Delegate Feedback

“Very clear explanations given and and good examples to help explain”

This event is not being recorded