BDA heralds potential breakthrough on GDPR

The simple change would specifically exempt small NHS providers from the costly burden of appointing a dedicated Data Protection Officer (DPO). The BDA has been working closely with partners at the Optical Confederation, the National Pharmacy Association and the Pharmaceutical Services Negotiating Committee, urging both government and opposition MPs to exempt dentists, pharmacists and opticians from this expensive and unnecessary new requirement.  

Primary care leaders have argued that the current draft Bill goes well beyond the requirements of the General Data Protection Regulation (GDPR), which does not require health providers to appoint a DPO unless they process healthcare data "on a large scale".

Most high street NHS primary care providers do not process data on a large scale, but are set to be covered by this onerous new duty by virtue of being defined by UK legislation as "public bodies". The BDA has estimated that outsourcing this service may well cost even the smallest practices in excess of £5,000, with some members reporting quotes from potential contractors of over £10,000 a year. Amendments will be considered at the Bill’s Report Stage, which is likely to take place in the second week of May.