Unit 13 Guide

• Human Rights Act 1998 in particular article 8.
• Care Act 2014 in particle when it comes to consent.
• The Health and Social Care Act 2008 (Regulated Activities)
Regulations 2014 in particular regulation 17.
• GDPR Regulations 2018 (Data Protection Act 2018). You are
required here to ensure confidentiality and protect the privacy of your clients and workers. The act gives clients the right to access information written about them. It also gives them the right to request a correction of any information which is not current. Clients have the right to know how their information will be used and stored. Refer to subject access requests.
As part of your evaluation, discuss the possible consequences if these regulations and legislation were not in place. Refer to ethical issues, safeguarding and sharing information.

Consider your role as the registered manager nominated individual or director (if applicable). Highlight your role, starting with ensuring compliance with ICO. Getting your organisation registered and adhering to the requirements of the GDPR regulations. How do you implement preventative measures? How is your team supported to fully understand confidentiality (training, supervision, auditing records etc)? Do you think these methods are effective?
– Privacy notices and Transparency
– Data and cyber security
– How are devices secured?
– Confidentiality, availability and integrity of records/information
– Reducing the risk of data breaches.

Refer to the guidance provided by ICO regarding handling a breach. Highlight what could happen if there was a breach. How will you handle this and minimise harm to individuals? Refer to any obligations to you to report and notify when there is a breach. It be a good idea to refer to your current systems? Are your records digitalised? Are they paper-based or a mixture of both?