Regulation & Governance
- This topic is empty.
-
Posts
-
Posted on behalf of Gill Booth, QA Operational Group Chair
Dear All
Following the UKCRC CTU Network Directors Meeting this week please find some links to additional resources which may be of use if you are experiencing difficulties in engaging with your host institution in regard to the new lawful basis for processing data under GDPR:
HRA Lawful Basis for DPOs: https://www.hra.nhs.uk/planning-and-improving-research/policies-standards-legislation/data-protection-and-information-governance/gdpr-detailed-guidance/legal-basis-processing-data/
MRC Regulatory Support Centre: Guidance Note 3: https://mrc.ukri.org/research/facilities-and-resources-for-researchers/regulatory-support-centre/gdpr-resources/
‘Bigger picture’ message re choosing public interest and research: https://www.youtube.com/watch?v=8A0wo4QYyJQ
ICO Example (navigate to ‘what are the rules for scientific research): https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/consent/what-is-valid-consent/
Please remember: if you are processing data from NHS Digital or other such data providers you will need to tell them BEFORE 25th May if you are changing your lawful basis. This is a one-time opportunity and will not be able to be changed after 24th May. If you have live contracts for these datasets then please contact the relevant provider ASAP to confirm your lawful basis. NHS Digital have written to every contract holder requesting information on the lawful basis going forward but we do not know of other providers doing the same.
Best wishes
Gill
Louise Williams
UKCRC Registered CTU Network
- You must be logged in to reply to this topic.
