PSNC publishes GDPR guidance for community pharmacies

PSNC publishes GDPR guidance for community pharmacies

March 28, 2018

18th May 2018: Please note, updates have been made to this guidance. All the latest information can be found at

PSNC has today published a series of guidance documents to assist community pharmacy contractors in working towards General Data Protection Regulation (GDPR) compliance.

The materials, created by the cross-sector Community Pharmacy GDPR Working Party*, discuss each of the different elements of the GDPR and how they apply to community pharmacy.

They consist of:

Contractors should be reassured that whilst GDPR brings a new approach to data protection, much of what becomes mandatory has been good practice in the past and pharmacy teams are used to managing personal data and are subject to considerable information governance (IG) requirements already.

Given the upcoming deadline for completion of the IG Toolkit (31st March 2018), any contractors who have not yet completed the IG Toolkit should do so immediately, and PSNC recommends that this is done before you start thinking about GDPR.

To keep things as straightforward as possible, the new guidance is underpinned by the mnemonic DATAPROTECTED, giving 13 steps as the route to compliance:

  1. Decide who is responsible
  2. Action plan
  3. Think about and record the personal data you process
  4. Assure your lawful basis for processing
  5. Process according to data protection principles
  6. Review and check with your processors
  7. Obtain consent if you need to
  8. Tell people about your fair processing notice
  9. Ensure data security
  10. Consider personal data breaches
  11. Think about data subject rights
  12. Ensure privacy by design
  13. Data protection impact assessment

As everybody is still getting to grips with the GDPR, there is much still to be clarified both before and after the 25th May 2018; in her blog, the Information Commissioner Elizabeth Denham admits that “GDPR compliance will be an ongoing journey”. Therefore, this guidance should be considered a starting point and we will update it as issues are clarified.

The working party is also happy to accept questions, which may be sent to any of the member organisations and selected questions with answers will be added to the FAQs document.

Contractors are reminded that PSNC will hold two live webinars in early April and most of the time will be dedicated to guiding contractors through the information given in these guidance documents.

*Organisations in the cross-sector Working Party are: PSNC, the National Pharmacy Association, the Royal Pharmaceutical Society, the Company Chemists’ Association, the Association of Independent Multiple Pharmacies, Community Pharmacy Wales and the Centre for Pharmacy Postgraduate Education.


Posted in: , ,

More Latest News >

Book now for our CPCS webinar

PSNC will be holding a webinar about the new NHS Community Pharmacist Consultation Service (CPCS) on Monday 16th September at...