This is the eighth run of this popular and well-rated workshop. 

This is module two of how to run a successful private practice. This module covers how to understand and comply with Data Protection Laws, including the UK GDPR, in order to run a successful private practice.

Module one covers eveything else and can be booked here

Like many others, you may think that a therapist in private practice has met their GDPR obligations by sharing their privacy policy with new clients, being registered with the ICO, and keeping client information safe. Unfortunately, your obligations are greater than this, and the new UK Data Protection and Digital Information Bill due to become law in June 2024 will add to your existing obligations. The most fundamental change from the new legislation will be the need to appoint to the new role of the Senior Responsible Individual. SRIs will replace the role of DPOs and will be required no matter the size of the organisation meaning that as a sole trader you will be the SRI. They will need to demonstrate knowledge and competence in data protection, making CPD an essential requirement to this role. Join us to fully understand your obligations and deeper your knowledge and skills for applying data protection law, including the UK GDPR, to your private practice. Following attendance, participants will be entitled to join our free quarterly GDPR Update and Advice Forum organised on Zoom.

---

Dr Robert Watson from Become Psychology and Mark Burnett from Hope & May Global Data Protection Professionals present:

"GDPR Advanced Module for Psychologists, Psychotherapists and Counsellors in private practice".

UK Data Protection Law that includes the GDPR is an increasingly complex and evolving piece of legislation that therapists in private practice need to understand and follow. Therapists deal everyday with what is known as special category data which is the sensitive personal information your clients tell you, and the GDPR requires that extra care and safeguards are in place to protect data subjects (your clients) sensitive personal information. This well rated course will help you to digest the complexities of this legislation so that you have a clear understanding of what is needed to comply with the GDPR, the policies and paperwork that you need to have in place, and how to respond when your clients exercise their rights under the GDPR. Previous participants have said:

"Thank you so much! I don't know how you and Mark did it but you actually made GDPR interesting and dare I say it, sort of fun!"

" Both Robert and Mark were also really down to earth and approachable and made me feel like no question was too silly to ask. It felt like a safe space to share dilemmas relevant to gdpr."

"Really appreciated the applicability of information shared , rather than just cite legislation, the information was relevant and real life examples were offered, welcome d and thought through together".

"Mark and Robert made a very difficult topic interesting and accessible. Delivery was really good. Examples of enforcement action illustrated points well. Opportunity for questions really good."

This course will cover the following:

Part 1:

1. How to make data protection integral to your practice. This will include what documents you need in place and how to ensure clients are properly informed about your intended processing activities.

2. How to demonstrate adherence to the principles of transparency, accountability.

3. Practical considerations around the nuts and bolts: how long do I need to keep records for, where and how do I keep them, what audit trails are needed, and what documentation must I keep.

4. Choosing the appropriate lawful basis. Where you are not using consent, you will need an alternative. This section will include information about safeguarding and appropriate documentation to support you where individuals may be at risk.

Part 2:

1. What rights do my clients have.

2. What if my client:

a) Makes a subject access request. How do I comply, and can I refuse?

b) Makes a subject deletion request. How do I comply, and can I refuse?

c) Makes a data accuracy request. How do I comply, and can I refuse?

d) Makes a request to stop or limit the use of their data. How do I comply, and can I refuse?

The course includes helpful guidance notes and document templates, and there will plenty of opportunity for questions and discussion throughout the day.

FAQs

What is the refund policy?

Cancellation by delegates:

Cancellations must be made by phone to Dr Robert Watson on 07941027765.

Cancellations made 30 days prior to the event will receive a full refund. Cancellations after this date cannot be refunded for any reason. Once cancelled, your booking cannot be reinstated.

No refund will be made for non-attendance on the course.

Name changes for attendees will be accepted if sufficient prior notice is given. Please inform Become Psychology 5 working days prior to the event by phone or email.

Cancellation by Become Psychology:

Become Psychology will deliver events as advertised but there may be occasions where, in exceptional circumstances, we have to cancel an event. In the case of event cancellation delegates will either be offered an alternative date, or a full refund.

Where can I contact the organizer with any questions?

By phone, Dr Robert Watson 07941027765

By email, contact@become-psychology-london.co.uk