Page 72 - Part-A

Information, Advice or Guidance

The General Data Protection Regulation 2016 ensures that personal information,
including information about mental health, is safeguarded. It also gives individuals
the right to know what information is held about them. Anyone who handles personal
information must comply with six principles. These principles state that information
must be:

1. Processed fairly, lawfully and in a transparent manner in relation to the data
subject.

Care workers must not collect and use an individual’s personal information unless
they have the person’s permission and are confident that they are entitled to handle
it. Individuals have a right to know how their information is being used, to have any
errors corrected and to prevent personal information being used for advertising or
marketing.

2. Collected for specified, explicit and legitimate purposes and not further processed
for other purposes incompatible with these purposes.

The information must only be used for the purpose for which is was obtained and
not for anything else.

3. Adequate, relevant and limited to what is necessary in relation to the purposes for
which data is processed.

Only collect and use as much information as is needed.

70