The GDPR has introduced new elements and significantly enhanced requirements regarding data protection in comparison to the current UK Data Protection Act (DPA) 1998. To support pharmacy teams to be prepared in meeting the requirements of the GDPR and understand the GDPR, its principles, roles, responsibilities and processes., the following resources are now available to download:

NPA support resources

Community Pharmacy GDPR Working Party cross-sector guidance: England and Wales

The NPA has been working closely with other pharmacy organisations as part of the Community Pharmacy GDPR Working Party which has produced cross-sector guidance resources which include the following four resources:

Community Pharmacy Scotland

Community Pharmacy Scotland has launched a GDPR pack which compromises of four parts to help compliance with the GDPR.

Community Pharmacy Northern Ireland

Community Pharmacy Northern Ireland has launched a GDPR pack which compromises of four parts to help compliance with the GDPR.

General Data Protection Regulation (GDPR): DPO resources

A suite of resources to understand the requirements of appointing a DPO and their role; the following documents are available:

- DPO guidance

- DPO checklist

- GDPR definitions and quick reference guide

General Data Protection Regulation (GDPR): brief overview

This resource provides a brief overview of the GDPR

General Data Protection Regulation (GDPR): training manual and MCQs

To help comply with the GDPR requirement of staff awareness, the following documents are available:

- Pharmacy team training manual

- MCQ assessment

- MCQ assessment answers

- Certificate of completion

General Data Protection Regulation (GDPR): lawful basis for processing

This resource provides a brief overview of the lawful basis for processing under the GDPR

General Data Protection Regulation (GDPR): consent

A brief overview of consent as part of the GDPR and authorisation template for prescription collection/delivery service and EPS nomination

General Data Protection Regulation (GDPR): individual rights

This resource provides a brief overview on the rights for individuals and their personal data within the GDPR

General Data Protection Regulation (GDPR): records of processing activities

A brief overview of records of processing activities and record templates for data controller and processors

General Data Protection Regulation (GDPR): data breaches

This resource provides a brief overview of data breaches under the GDPR