On the Frontline: GDPR and OAs

^{Figure 1: Personal data is information that relates to an identified or identifiable individual}

General Data Protection Regulation (GDPR) replaced the Data Protection Act 1998 (DPA) on the May 25, 2018. It imposes strict obligations and brings in a new set of legal requirements relating to the protection of personal information – with high fines for non-compliance of up to £17.5 million or 4% of annual global turnover, whichever is greater.

GDPR protects individuals or patients’ rights and freedoms over their personal data ensuring it is used properly and fairly. It highlights the need for maintaining patients’ confidentiality and respecting their privacy, which is why it is taken seriously by the optical profession.