View from Locsu: Be prepared for GDPR

With GDPR taking effect this month, Locsu has issued two lots of guidance to LOCs to ensure they comply. Unlike optical practices and Primary Eyecare Companies, LOCs do not deal with patient data but they still hold and process other types of personal data.

The guidance and an audit tool can be found on the Locsu website under the LOC guidance tab. The key actions include:

Awareness – ensure that members are aware that the law is changing and the impact that this will have.

Record all personal data held.

Identify and document lawful bases for processing personal data.

Ensure privacy notices are available to individuals at the point of collecting their data. They should be reviewed and updated if necessary.