The GDPR will introduce new elements and significantly enhanced requirements regarding data protection in comparison to the current UK Data Protection Act (DPA) 1998. To support pharmacy teams to be prepared in meeting the requirements of the GDPR and understand the GDPR, its principles, roles, responsibilities and processes., the following resources are now available to download:

NPA support resources

  • GDPR overview
  • GDPR FAQs
  • GDPR staff training manual, including multiple choice questions, answers and a certificate
  • GDPR brief overviews on:
    • Lawful basis for processing
    • Consent
    • Individual rights
    • Records of processing activities
    • Data breaches
  • A GDPR webinar which was presented on 15 March 2018

Community Pharmacy GDPR Working Party cross-sector guidance

The NPA has been working closely with other pharmacy organisations as part of the Community Pharmacy GDPR Working Group which has produced cross-sector guidance resources which include the following four resources:

General Data Protection Regulation (GDPR): brief overview

This resource provides a brief overview of the GDPR.

General Data Protection Regulation (GDPR): training manual and MCQs

To help comply with the GDPR requirement of staff awareness, the following documents are available:

- Pharmacy team training manual

- MCQ assessment

- MCQ assessment answers

- Certificate of completion

General Data Protection Regulation (GDPR): lawful basis for processing – brief overview

This resource provides a brief overview of the lawful basis for processing under the GDPR.

General Data Protection Regulation (GDPR): consent

This resource provides a brief overview of consent as part of the GDPR.

General Data Protection Regulation (GDPR): individual rights

This resource provides a brief overview on the rights for individuals and their personal data within the GDPR.

General Data Protection Regulation (GDPR): records of processing activities – brief overview

A brief overview of records of processing activities and record templates for data controller and processors.

General Data Protection Regulation (GDPR): data breaches – brief overview

This resource provides a brief overview of data breaches under the GDPR.