GDPR for Psychotherapists - Overview of blog series
/Overview
This note started out in April 2018, when a member of The Relational School ("TRS") asked on their list for some advice about the encryption of electronic messaging and emails, against the background of GDPR (formally the General Data Protection Regulation (2016) and the new Data Protection Act (2018). I gave a reply, a discussion ensued. Subsequently I joined the Facebook group "GDPR for therapists" set up by Tania Taylor. After I had participated in the discussion in these groups, and spoken with some other friends and colleagues, I had the idea of gathering my ideas, and the outcome of my research.
I turned it all into a small series of blogs, and posted them here on my website on the "Psychotherapist blog" page.
The individual blogs are:
Main ideas about implementation
Legal issues; excerpts from the GDPR text
Technical issues - General and information security
Technical issues - Recommended actions
Technical issues - Mobile phone security
Technical issues - Encrypting the communication of personal data
Technical issues - Protecting hardware and software; backups
Technical issues - Deleting data
I am most grateful for all the interaction and discussion with members of the TRS list, Tania Taylor's Facebook group, Tania Taylor, Dominic Davies, and Niki Reeves, who has provided a set of slides that she uses. I thank them all for their input and discussion.