GDPR advanced training for therapists in private practice

Dr Robert Watson from Become Psychology and Mark Burnett from Hope & May Global Data Protection Professionals present:

"GDPR advanced module for psychologists, psychotherapists and counsellors in private practice".

This is the thirteenth run of this popular and well-rated workshop. 

Like many others, you may think that a therapist in private practice has met their GDPR obligations by sharing their privacy policy with new clients, being registered with the ICO, and keeping client information safe.

Unfortunately, your obligations are greater than this – a good example is the legal requirement to have an Appropriate Policy Document, which is your legal protection when you must share information for safeguarding your clients or third parties. If you have never heard of an Appropriate Policy Document, you are not alone – no one on our course had. But it is an essential document to have in your portfolio as it covers you if you had to share information with third parties without the consent of your client, in other words, suspending their rights under UK Data Protection Law.   

Join us on Friday, 25th July, to fully understand your fundamental obligations and deepen your knowledge and skills for applying data protection law, including the UK GDPR, to your private practice. Following attendance, participants will be entitled to join our free quarterly GDPR Update and Advice Forum organised on Zoom.  

This course will cover the following:

Part 1:

1. How to make data protection integral to your practice. This will include what documents you need in place and how to ensure clients are properly informed about your intended processing activities.
2. How to demonstrate adherence to the principles of transparency, accountability.
3. Practical considerations around the nuts and bolts: how long do I need to keep records for, where and how do I keep them, what audit trails are needed, and what documentation must I keep?
4. Choosing the appropriate lawful basis. Where you are not using consent, you will need an alternative. This section will include information about safeguarding and appropriate documentation to support you where individuals may be at risk.

Part 2:

1. What rights do my clients have?
2. What if my client:
   1. Makes a subject access request. How do I comply, and can I refuse?
   2. Makes a subject deletion request. How do I comply, and can I refuse?
   3. Makes a data accuracy request. How do I comply, and can I refuse?
   4. Makes a request to stop or limit the use of their data. How do I comply, and can I refuse?

The course includes helpful guidance notes and document templates, and there will be plenty of opportunities for questions and discussion throughout the day.

Further information and bookings are available from our Billetto event listing.