View from Locsu

It’s more than a year since the implementation of GDPR and the compliance environment continues to grow in complexity. Although our relationship with the EU remains uncertain, GDPR was simultaneously enacted into UK law under the Data Protection Act 2018, so it’s here to stay. That means now is a good time to take stock of the state of compliance among optical contractors.

Complying with general regulations such as the GDPR and other information governance requirements such as the NHS Digital Data Security and Protection Toolkit (DSPT) is an essential part of achieving the standards required to engage credibly with Health Service provision. Information governance is only one area of compliance however: safeguarding and health and safety, for example, continue to be essential for correct service delivery. The area can be a minefield. Busy practices leave little time for navigating complex regulations and drafting policies.